Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: O/BQ2X1b9PGBNz22ikyup/crlSwlbIQ9/y/BZeFCKG4=
Subject key identifier: DE:C3:4D:61:CE:75:2D:28:93:A8:AB:F5:EC:F9:FE:B8:E8:3C:50:DE
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 019D992B63013D863D419909350494EAD2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: DB8ZWlMfXTSn5a07rPOIt2RrqOZNCjdUHMTBTcGiNU8=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:63:01:3d:86:3d:41:99:09:35:04:94:ea:d2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=dec34d61ce752d2893a8abf5ecf9feb8e83c50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:38:2f:64:ab:39:4d:b5:45:7d:03:c6:07:
70:4c:8d:1f:1a:ed:22:35:b0:b1:db:b4:7d:f4:c7:
8b:b4:98:d7:70:c5:d1:42:08:df:8a:86:c8:f9:0e:
f0:71:be:f8:c0:e5:a4:2e:1e:27:ba:39:8d:4a:03:
04:e9:eb:98:72:22:3c:f7:9e:16:c0:48:ad:bd:e1:
16:ca:0d:67:e0:26:8d:63:c6:f3:c1:ec:97:9d:18:
39:c0:03:73:d3:97:9f:ed:8b:ed:1e:a8:c3:6c:48:
94:d7:96:94:ad:82:7e:2e:25:28:3d:9f:b4:d5:c0:
02:e5:47:16:a8:b4:02:24:f0:0d:37:b1:7e:21:52:
e9:a8:40:72:c3:f0:20:ef:04:97:c1:00:1d:c8:1a:
8e:9c:ce:22:9a:45:81:2b:4a:3e:23:bb:4c:26:07:
73:2a:62:76:53:be:dc:6b:66:da:e6:81:3c:90:8b:
db:d0:aa:a5:13:cf:69:54:b9:51:68:2c:cb:8d:b2:
e0:e4:85:4b:30:b1:93:bf:31:77:bd:6e:42:60:f3:
29:b6:59:f7:b3:43:ab:d4:7a:2e:91:f0:7d:00:2e:
4c:fa:36:8a:21:30:ce:48:fd:b8:2e:3d:db:eb:72:
9e:29:af:a4:87:5a:57:dd:61:55:dc:f4:1c:2e:68:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:4D:61:CE:75:2D:28:93:A8:AB:F5:EC:F9:FE:B8:E8:3C:50:DE
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:de:9d:76:1f:58:54:5b:ce:43:0c:88:9a:30:71:59:3d:
18:63:3d:92:5a:94:c7:1f:db:c3:5f:23:cd:b9:8b:f0:17:c6:
5e:2c:7a:81:95:b2:36:6d:ab:ab:3b:6b:25:a2:6f:3e:86:fd:
e8:4a:ec:8c:db:ce:2f:4b:92:17:1f:46:08:f7:f9:73:7d:15:
e8:f3:35:f3:18:0f:0a:3f:36:8c:52:7f:9d:5b:b5:e2:03:e3:
41:5e:4f:72:89:71:e4:68:c3:5d:b9:ed:55:e0:9b:64:5c:25:
a7:9e:8a:29:a6:ce:7a:cc:b3:42:d9:ad:6f:59:8d:e7:70:14:
8e:5b:18:11:dc:4a:c5:d6:8d:04:08:50:94:05:a1:07:06:f2:
e8:46:00:e8:43:e9:53:1b:9e:01:43:5f:7c:7a:f0:01:01:08:
c5:e7:6e:b8:e4:58:03:7f:0a:a1:03:b4:a7:13:50:c1:97:e7:
0a:8a:4e:2c:ab:7d:82:b5:55:3a:ea:8f:cf:6c:62:b3:29:95:
16:45:77:44:bd:a9:cd:0b:87:c7:c1:e4:76:19:45:b5:91:b4:
4e:33:5d:71:7a:fc:9e:58:c3:c6:d2:67:5e:62:b0:31:11:1f:
e0:95:64:f5:04:d0:64:3b:28:80:87:a9:11:3c:ca:35:9f:da:
a7:f0:42:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK2MBPYY9QZkJNQSU6tLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjYwNDE3MDIwMDUwWhcNMjYwNDE4MDIwMDUwWjAzMTEwLwYDVQQD
EyhkZWMzNGQ2MWNlNzUyZDI4OTNhOGFiZjVlY2Y5ZmViOGU4M2M1MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo544L2SrOU21RX0DxgdwTI0fGu0i
NbCx27R99MeLtJjXcMXRQgjfiobI+Q7wcb74wOWkLh4nujmNSgME6euYciI8954W
wEitveEWyg1n4CaNY8bzweyXnRg5wANz05ef7YvtHqjDbEiU15aUrYJ+LiUoPZ+0
1cAC5UcWqLQCJPANN7F+IVLpqEByw/Ag7wSXwQAdyBqOnM4imkWBK0o+I7tMJgdz
KmJ2U77ca2ba5oE8kIvb0KqlE89pVLlRaCzLjbLg5IVLMLGTvzF3vW5CYPMptln3
s0Or1HoukfB9AC5M+jaKITDOSP24Lj3b63KeKa+kh1pX3WFV3PQcLmijdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7DTWHOdS0ok6ir9ez5/rjoPFDeMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpfenXYf
WFRbzkMMiJowcVk9GGM9klqUxx/bw18jzbmL8BfGXix6gZWyNm2rqztrJaJvPob9
6ErsjNvOL0uSFx9GCPf5c30V6PM18xgPCj82jFJ/nVu14gPjQV5Pcolx5GjDXbnt
VeCbZFwlp56KKabOesyzQtmtb1mN53AUjlsYEdxKxdaNBAhQlAWhBwby6EYA6EPp
UxueAUNffHrwAQEIxeduuORYA38KoQO0pxNQwZfnCopOLKt9grVVOuqPz2xisymV
FkV3RL2pzQuHx8HkdhlFtZG0TjNdcXr8nljDxtJnXmKwMREf4JVk9QTQZDsogIep
ETzKNZ/ap/BCvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:24 2026 by rpki-client