Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: S+45ZVOVkhCaCR6y0V8t0rqvpjTdgQ4BsaPRBgMvsUY=
Subject key identifier: FB:6C:91:0E:6A:8F:93:77:1F:B2:A2:16:BE:B6:15:09:29:C8:1D:C7
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019D9A3E84481564C861EFDFF1BD01877655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:21 +0000
Manifest this update: Fri 17 Apr 2026 07:01:21 +0000
Manifest next update: Sat 18 Apr 2026 07:01:21 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: zEhiceAdWEFAo0eHu6AB/hJWNYDwb2obt47sxuLDc7g=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:84:48:15:64:c8:61:ef:df:f1:bd:01:87:76:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Apr 17 07:01:21 2026 GMT
Not After : Apr 18 07:01:21 2026 GMT
Subject: CN=fb6c910e6a8f93771fb2a216beb6150929c81dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:3c:31:83:4f:72:cc:12:2b:fe:b1:5a:1a:
09:77:bd:ff:81:dd:8b:ab:58:5a:37:58:b2:6b:3c:
aa:cb:79:9e:4a:5b:2c:67:6c:ea:0b:9a:18:a4:4c:
71:21:8c:bd:cb:53:a3:f2:d9:76:62:a5:cb:16:fd:
ba:30:75:73:b5:ac:de:ac:6c:c6:33:a5:ea:64:05:
7e:b9:34:d7:ea:00:44:1b:57:4a:23:49:aa:72:c5:
54:0a:cc:e6:c7:c1:70:2c:bb:63:48:06:fb:d5:78:
43:e9:7e:f6:57:fa:8a:f5:db:72:b8:a9:a6:66:56:
bb:bb:37:a5:17:be:36:e8:aa:d2:29:6c:fe:17:94:
46:fd:03:3c:b4:91:30:b9:3c:90:78:05:f1:6d:e6:
81:fe:75:2c:54:98:93:76:13:89:56:20:71:05:72:
19:22:cf:9a:0c:1e:3b:5f:96:f0:ce:0f:97:21:0a:
9e:ad:38:bf:32:f6:6c:a3:af:b1:0c:42:01:c9:61:
09:11:ad:d2:07:b8:32:30:5a:4e:60:bd:13:1d:09:
14:f4:92:1a:80:e8:78:f8:c0:46:77:87:ae:c0:8c:
50:a5:16:3c:26:b8:85:64:73:3c:c2:43:a9:75:89:
fa:33:4b:df:f9:02:df:6f:f3:d4:70:49:15:c6:ac:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:91:0E:6A:8F:93:77:1F:B2:A2:16:BE:B6:15:09:29:C8:1D:C7
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:89:49:2b:c1:79:62:82:09:c1:d5:9f:8d:a0:1c:c7:e1:
28:51:34:00:47:aa:17:fc:b7:f8:35:fe:7f:6c:12:dd:9a:18:
1c:50:b0:7b:fb:26:12:58:b5:5e:5f:a3:f6:3d:b2:80:0d:fd:
39:13:e2:ee:a3:77:da:4e:45:11:92:0a:11:e4:4d:61:27:7f:
fe:b3:a3:70:7a:ef:18:29:49:ae:3c:7c:71:e0:d4:4f:56:bb:
e8:96:04:10:ab:c7:8f:9d:03:e6:40:c7:31:eb:7a:4c:61:e4:
1c:06:44:db:cb:0b:34:3d:42:8e:00:3f:fe:56:93:f1:66:64:
3d:fb:9a:65:e9:ea:ef:02:97:05:4c:28:c4:b4:f6:19:eb:2c:
c8:12:4f:4e:c5:b5:07:8d:34:99:65:79:35:69:bc:3d:67:37:
2e:12:98:ae:7c:f7:ca:87:4a:13:da:24:11:f6:19:5b:4a:95:
d5:56:48:2d:1c:07:83:95:d7:5f:ea:5c:2f:41:54:51:d7:59:
37:aa:e9:b4:f0:79:9b:5d:e9:09:e9:c7:95:64:dd:3b:6c:cb:
0b:43:96:41:28:f0:4a:5a:24:8c:e3:78:cb:99:fc:3e:11:e1:
40:09:4a:2d:89:9c:13:1c:ab:19:0c:4f:9e:79:53:b1:50:71:
a3:33:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:08 2026 by rpki-client