Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: 3rMByrMYgLCqjPSv6gVsqEwYk1imCwCGOG8w2tW4o58=
Subject key identifier: 20:3E:C8:C5:1A:C0:21:27:B0:C9:CE:55:AD:13:51:6E:8B:02:CC:C8
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019D98F50FE5B71D67C0FC5A663D5B355CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:30 +0000
Manifest this update: Fri 17 Apr 2026 01:01:30 +0000
Manifest next update: Sat 18 Apr 2026 01:01:30 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: Ew4PdAeEhQqOhRiTc0VIKrOGqfsCfiZDPpYf1s65rs4=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0f:e5:b7:1d:67:c0:fc:5a:66:3d:5b:35:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Apr 17 01:01:30 2026 GMT
Not After : Apr 18 01:01:30 2026 GMT
Subject: CN=203ec8c51ac02127b0c9ce55ad13516e8b02ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:78:42:13:15:7b:74:fa:54:c1:5a:09:34:
16:70:53:06:b4:a5:0d:71:66:9a:69:2f:17:a4:12:
31:f9:d4:3b:a9:ed:12:7d:60:4b:3a:0f:db:27:4e:
2e:37:1b:5d:72:88:53:2b:b9:bb:95:9a:68:a1:d6:
49:b0:a1:29:ba:b8:39:77:2e:20:59:cd:8c:20:91:
a3:1b:f4:96:42:b0:92:13:46:ea:f2:44:a9:c4:7e:
9d:40:97:a4:8a:2b:70:b1:4c:fe:4c:fa:dc:20:79:
d4:ca:d4:8e:7a:40:11:51:d9:8b:63:22:9c:8d:f4:
13:3f:25:49:7a:25:9c:cf:84:bd:73:2b:2e:66:e9:
d5:3b:b6:41:01:d7:bc:51:ea:4e:f4:ab:3b:49:d5:
f4:ae:2d:91:81:15:07:6c:05:87:8d:fa:97:cf:46:
6b:a3:e7:fd:67:ed:71:c2:cf:51:3b:ad:a4:0d:e8:
bb:f2:37:33:0f:57:59:6b:08:8b:15:45:a7:65:92:
29:1e:43:fa:86:dd:30:01:2c:d6:f1:7b:8e:94:46:
99:be:3f:37:5c:35:bb:f6:7b:36:8c:83:ea:f5:b4:
8e:a6:23:e2:8c:a0:20:d5:32:ef:e1:0d:d1:e2:59:
9b:49:b9:5e:6b:45:4f:f2:32:ae:7d:77:7a:54:2a:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:C8:C5:1A:C0:21:27:B0:C9:CE:55:AD:13:51:6E:8B:02:CC:C8
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6c:61:83:06:5e:b1:87:3d:0d:7c:e8:ca:de:f0:d8:27:e0:
c3:07:f5:08:9a:2a:9c:de:38:e0:bc:31:1c:0b:66:03:16:a6:
9b:c4:46:c8:f5:98:4f:10:77:82:5a:b1:b3:10:e6:04:23:62:
fd:a7:e6:72:f7:13:22:1f:62:e8:bb:9a:5f:24:82:be:cf:cd:
61:d9:99:e4:09:24:c8:b4:c2:3d:b8:6b:7d:c2:b0:28:2b:fd:
d5:f5:dc:79:08:3f:8c:06:66:e8:9e:ad:76:19:2f:69:e9:01:
1e:4e:1b:52:aa:1b:1f:c1:7d:67:0f:f0:47:8f:73:c5:6c:82:
35:a4:23:25:2b:4b:c7:ed:1d:32:2f:da:ac:b5:4f:fc:81:b1:
59:17:d5:85:b8:95:b7:6d:d7:59:70:a4:4d:02:7a:a0:e9:5c:
03:3d:2e:d1:9b:45:0e:f0:09:fc:a0:bc:8f:c2:f3:91:ff:7d:
b3:45:bd:6b:23:96:83:84:ea:78:ec:95:fa:8d:8b:23:65:06:
c1:e2:36:73:be:35:bb:98:9c:cc:3b:5e:a9:44:a0:85:4c:22:
8a:a9:14:cd:32:a2:10:52:10:e3:87:45:9e:8c:63:f5:0d:bc:
ea:58:a9:f4:4c:aa:49:55:4c:a8:3c:cc:65:6e:dd:84:2a:7b:
6c:d5:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:17:35 2026 by rpki-client