Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: U0lihbSNMM4tOAqtERM7z/+l37JSx73jl+BeoTftrWc=
Subject key identifier: FA:A6:41:35:55:5E:16:83:CA:26:79:65:D1:77:FF:C1:C0:F2:A7:BC
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019D9A3ED2AC3AA7B76A7A580226B954E8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: q1RFfbH0rr5/Q9dkCoEvp7ZqRaTyC/tX16NDzEtQTQo=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:ac:3a:a7:b7:6a:7a:58:02:26:b9:54:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=faa64135555e1683ca267965d177ffc1c0f2a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:08:b9:eb:ce:2a:fc:0b:66:6e:b8:67:84:
e8:98:94:28:4f:e0:5a:c3:5a:45:5b:e6:a7:32:e3:
59:fd:1f:8d:f6:dc:d2:d0:b6:9b:29:4a:ee:3f:64:
fc:98:50:b4:6c:d8:1c:24:63:59:25:16:d2:f7:e8:
21:88:cd:c4:da:03:9e:21:b7:7c:7b:a4:3e:ac:30:
b7:9b:8b:1a:b9:ec:ca:13:37:02:e3:d5:82:56:0b:
c6:cf:1b:e7:c0:99:09:0f:55:69:40:73:c4:b0:96:
1a:57:fc:af:41:e2:a2:7d:c5:79:44:a7:0d:bf:27:
1d:ec:c5:46:c3:7c:e1:c1:37:6f:82:f9:21:f8:23:
d8:57:6d:d8:3b:19:6d:f6:7d:c2:0d:ac:8e:95:99:
6c:30:05:b8:9e:f5:e1:91:38:0e:02:48:e6:c1:7c:
f7:e1:2a:49:ec:99:03:51:50:a3:b0:03:9e:be:fb:
3d:68:35:0d:33:8d:72:58:17:63:78:93:7a:82:11:
9d:17:85:29:a2:dc:ee:c1:e3:64:ce:bd:54:ed:ce:
2a:b0:d0:5e:40:1e:70:a7:b0:80:64:f9:be:66:b2:
d9:a2:41:af:1b:96:1f:f9:82:f2:4c:3e:35:ba:90:
bf:05:f0:16:2a:86:98:e1:9c:43:75:b6:3f:b9:71:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:41:35:55:5E:16:83:CA:26:79:65:D1:77:FF:C1:C0:F2:A7:BC
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:09:14:3a:f3:fa:4c:da:c6:9d:35:40:e4:fa:ae:17:d5:
b1:bd:19:9f:5f:01:8d:18:8d:f4:c2:e4:45:3d:18:d7:79:a6:
7c:88:f5:32:df:a4:7f:09:3e:11:06:58:a8:05:05:6b:df:ec:
62:00:6a:bd:75:ac:72:e2:7e:77:c8:d8:7b:37:a4:a6:f1:c7:
78:83:38:c0:8c:cc:95:89:c0:8e:e4:64:31:d2:e0:ab:fc:e3:
8c:19:aa:9e:5e:08:54:ab:be:4b:ca:24:a3:42:34:b3:b1:20:
ad:0d:d5:2b:2f:ed:80:5c:8c:9d:a0:f5:19:bb:02:6b:e4:87:
53:c2:c1:2d:8f:da:6e:cf:59:12:e6:ad:ea:2d:9a:b2:31:f9:
40:19:42:e1:28:58:9c:5e:a8:9f:b4:2c:f1:bf:e8:3d:dc:1d:
ad:1e:1c:ef:c6:f9:67:d9:93:00:36:6f:61:d4:c8:9a:c3:98:
ac:e1:46:38:66:57:0a:32:d0:2b:46:9e:33:39:ab:5b:30:ca:
f1:1f:13:53:9e:a8:dd:fb:eb:84:61:3a:a1:de:13:70:50:73:
bc:b2:81:07:41:ad:82:7b:4e:7b:56:40:dd:63:80:67:66:db:
8e:a9:e6:ca:5e:1e:22:be:5a:b4:2e:bd:c0:67:1d:95:b4:9f:
d0:4c:b8:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPtKsOqe3anpYAia5VOj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh
MzA1ZWMwHhcNMjYwNDE3MDcwMTQxWhcNMjYwNDE4MDcwMTQxWjAzMTEwLwYDVQQD
EyhmYWE2NDEzNTU1NWUxNjgzY2EyNjc5NjVkMTc3ZmZjMWMwZjJhN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhsIuevOKvwLZm64Z4TomJQoT+Ba
w1pFW+anMuNZ/R+N9tzS0LabKUruP2T8mFC0bNgcJGNZJRbS9+ghiM3E2gOeIbd8
e6Q+rDC3m4sauezKEzcC49WCVgvGzxvnwJkJD1VpQHPEsJYaV/yvQeKifcV5RKcN
vycd7MVGw3zhwTdvgvkh+CPYV23YOxlt9n3CDayOlZlsMAW4nvXhkTgOAkjmwXz3
4SpJ7JkDUVCjsAOevvs9aDUNM41yWBdjeJN6ghGdF4UpotzuweNkzr1U7c4qsNBe
QB5wp7CAZPm+ZrLZokGvG5Yf+YLyTD41upC/BfAWKoaY4ZxDdbY/uXGmaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqmQTVVXhaDyiZ5ZdF3/8HA8qe8MB8GA1UdIwQY
MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt
ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm
LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXcJFDrz
+kzaxp01QOT6rhfVsb0Zn18BjRiN9MLkRT0Y13mmfIj1Mt+kfwk+EQZYqAUFa9/s
YgBqvXWscuJ+d8jYezekpvHHeIM4wIzMlYnAjuRkMdLgq/zjjBmqnl4IVKu+S8ok
o0I0s7EgrQ3VKy/tgFyMnaD1GbsCa+SHU8LBLY/abs9ZEuat6i2asjH5QBlC4ShY
nF6on7Qs8b/oPdwdrR4c78b5Z9mTADZvYdTImsOYrOFGOGZXCjLQK0aeMzmrWzDK
8R8TU56o3fvrhGE6od4TcFBzvLKBB0GtgntOe1ZA3WOAZ2bbjqnmyl4eIr5atC69
wGcdlbSf0Ey44Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:03 2026 by rpki-client