Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: x134E+nMfWckhi2GA4E8DyZ46AWfb3Mn9y3a50RwJwc=
Subject key identifier: 3E:E0:46:AB:6E:99:11:0C:5E:A2:3A:85:F4:6D:98:85:57:1F:F1:9C
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019D9962101A27597748E3AC6BCCFA0A3BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: j5mRgJzjmN/0oFTGN0jJcAX+F4lXgAK6Fz9XHtcafus=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:10:1a:27:59:77:48:e3:ac:6b:cc:fa:0a:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=3ee046ab6e99110c5ea23a85f46d9885571ff19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:9e:1d:c6:6f:f4:3a:ba:f0:c0:7a:e2:10:
a1:ef:19:01:7b:df:a2:83:79:5e:74:bf:3d:71:9d:
44:c6:44:e6:12:82:f1:05:d8:85:d0:2d:6e:24:cc:
80:71:a4:9f:e0:d4:40:3e:bd:8d:a1:76:4c:f5:2a:
b1:7b:38:8b:40:1f:50:76:d2:df:b4:d1:b0:52:d0:
cf:a9:75:a1:c2:6a:cb:0f:23:46:0a:7b:d3:21:e6:
07:1e:f4:75:46:0b:58:f5:3c:68:06:3b:be:1c:18:
df:8b:71:ba:3b:60:6d:78:21:52:94:a8:42:4d:44:
64:0e:0c:21:f6:94:7b:65:28:94:a2:52:9e:29:45:
f9:1c:39:e5:79:b7:7b:99:b8:10:3a:65:d5:6e:eb:
79:0b:b6:0c:51:6c:07:74:f9:77:12:f8:88:97:7a:
be:b0:05:9f:02:bc:67:87:5f:59:fb:ca:4e:26:bd:
2e:6a:c6:4d:18:23:b8:ee:10:fd:8e:5f:39:e9:e0:
31:c5:e5:42:20:e1:ea:ab:3d:73:2d:99:a9:72:34:
16:f1:45:d8:23:14:2c:e4:49:81:5f:89:29:44:8c:
f9:0b:11:22:8c:c5:9c:b8:ce:82:e9:55:19:c5:04:
57:13:e9:1d:b6:51:59:38:2a:81:f7:ab:4a:62:0a:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:46:AB:6E:99:11:0C:5E:A2:3A:85:F4:6D:98:85:57:1F:F1:9C
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:4f:cc:86:73:96:d2:0a:aa:a1:f1:12:17:0d:9a:2a:34:
fc:67:47:2e:4c:04:51:9a:c9:a5:db:89:b5:a9:74:1b:a3:4b:
d9:c8:17:41:55:27:77:76:ca:cb:2c:ba:f8:b3:f0:6e:2d:24:
ee:3d:d4:d2:89:40:5c:60:d5:3a:dc:81:80:b2:ce:1d:dc:8a:
ac:7d:23:58:3f:3c:13:ce:69:41:35:fc:54:64:58:e3:7e:bb:
8a:8d:1f:81:ab:5b:a2:eb:b8:43:4c:2f:be:50:6d:a7:aa:79:
80:ad:0b:95:6f:2e:97:e3:4a:fd:16:9c:6c:a9:46:47:62:1e:
4e:34:89:2e:85:91:c4:25:cf:19:0b:40:f2:ac:ce:f3:a1:c7:
27:48:c1:bc:34:1d:5d:53:b4:b0:72:8a:e5:da:4e:50:1b:8e:
e3:7f:4a:6e:fb:e4:3e:f4:e4:41:ec:1c:91:08:34:7a:32:2e:
98:06:c6:01:23:2a:38:20:86:69:75:d0:83:3e:d5:2b:76:e8:
8c:2c:cb:ad:58:d0:13:5a:5b:f2:26:7f:47:78:aa:32:26:78:
49:4d:d3:f2:81:6a:87:6a:6b:8f:6b:ee:46:7d:dd:78:9a:ca:
a4:77:4c:34:16:cd:39:9e:ba:88:3b:81:06:eb:d0:4a:c0:04:
1a:c0:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:47 2026 by rpki-client