Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: SMljf2pjT3+qK4661vi+8L5JYR19PN61EO+jYHF7t5I=
Subject key identifier: 9A:52:AF:E9:09:4B:1C:5B:CD:4E:01:B5:E8:25:0C:32:92:45:69:C9
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019D9A3F0B124CFD564ADD577BCA016E7F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0DCF
Signing time: Fri 17 Apr 2026 07:01:55 +0000
Manifest this update: Fri 17 Apr 2026 07:01:55 +0000
Manifest next update: Sat 18 Apr 2026 07:01:55 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: dbCKaEZEqo/1Fs9BqdF6yIEqGbLRqUwH6NjJOMFnooE=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0b:12:4c:fd:56:4a:dd:57:7b:ca:01:6e:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Apr 17 07:01:55 2026 GMT
Not After : Apr 18 07:01:55 2026 GMT
Subject: CN=9a52afe9094b1c5bcd4e01b5e8250c32924569c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:51:21:4c:26:31:09:5a:c5:bf:5e:28:24:29:
a8:00:80:ab:cf:01:3b:ec:7a:49:f5:52:58:61:e3:
c5:f1:c5:69:2a:be:73:ff:4b:31:ed:e4:d9:48:5b:
be:10:32:99:0b:2a:b5:f1:6e:f6:24:c1:98:29:60:
15:6f:37:7e:f2:79:db:7f:e8:cc:d4:3c:9a:2b:e5:
61:8d:c6:88:82:2c:4e:19:1f:1a:e8:84:dc:31:99:
41:a7:19:5c:d8:ea:97:12:c3:e0:05:40:c1:fa:e7:
bc:22:89:4e:2d:e4:d9:e0:26:12:b3:c6:70:89:84:
ce:2b:47:e0:35:72:b0:ee:0d:14:3a:5c:5d:ac:11:
67:28:83:d9:11:7d:b4:41:d2:45:a2:64:ec:90:70:
9f:c1:c3:99:a5:57:5e:d1:4c:b4:fd:46:0b:c2:2b:
09:67:b4:0d:b6:a6:fa:8d:78:48:9b:39:02:9a:aa:
1d:da:fa:0b:bb:e7:a1:44:4c:03:aa:a0:3c:24:6e:
33:4d:84:76:6e:d6:94:a7:34:fe:f6:19:87:87:d6:
68:22:cc:d0:c7:42:23:f1:22:aa:01:73:de:9c:ba:
9a:82:23:4c:c2:64:9e:d2:2b:58:9c:f7:a7:31:9d:
62:59:91:d5:ce:00:9a:c3:b1:2f:8e:b4:6c:1f:06:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:AF:E9:09:4B:1C:5B:CD:4E:01:B5:E8:25:0C:32:92:45:69:C9
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ea:51:93:89:fa:91:73:bb:84:8a:f2:76:56:43:d5:bf:e5:
fa:3b:3c:30:49:d7:05:e6:74:7a:ad:cc:ad:0b:13:39:4f:5b:
85:fc:28:57:f6:31:76:75:27:de:c3:47:1c:43:9b:35:4c:d9:
ca:42:a5:9b:54:29:4e:d8:ea:d1:0f:77:78:c3:03:b1:43:89:
28:06:33:81:1e:4c:f5:76:d3:42:bc:14:a8:21:63:2f:db:5a:
60:19:e7:80:9e:e8:40:5f:ba:8b:0c:7d:02:b0:66:58:e2:32:
a9:b3:71:f4:c8:46:77:69:81:b4:62:2d:17:3b:af:f2:79:d6:
49:c9:ab:4a:e4:8d:03:6c:f7:01:90:19:01:44:5d:17:6c:0b:
0e:06:00:87:4e:7f:d9:31:ae:b7:ed:d3:ad:f7:41:3c:b0:ad:
c7:b3:2c:03:58:56:da:df:f0:14:e2:2b:d9:e6:3e:26:70:0f:
8b:68:93:ae:c3:10:f6:bd:c8:d2:2e:25:97:ab:1c:80:da:2a:
c0:1a:07:80:5c:35:23:b5:df:d6:57:c2:75:bf:ee:08:b3:76:
3f:0d:cc:54:70:7e:7f:da:bb:5c:47:cf:b6:14:1a:3b:09:28:
f3:fb:30:d6:84:47:90:1d:0b:f8:8b:ba:3e:b2:9a:eb:96:a8:
1f:20:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:20 2026 by rpki-client