Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: lI6K/eDk3WcWkT8u2MtDdA3rdPvWp6nbKo7ffGwCoiY=
Subject key identifier: 7E:A6:13:6F:45:D2:56:7F:AD:55:82:A1:41:53:CA:A7:8B:01:92:D2
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019D984F8BBE07E4A4E79BD484459D78BE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 10A2
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: xuCfz6WkEnI0cjovsEhccn5SxmjW++UpyoKZrYu3jnw=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8b:be:07:e4:a4:e7:9b:d4:84:45:9d:78:be:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=7ea6136f45d2567fad5582a14153caa78b0192d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:ca:a7:f0:50:5d:43:f0:7d:7f:18:6b:bb:
00:37:82:de:59:7a:6e:84:64:de:69:2b:20:6e:68:
ac:05:d4:53:c5:3d:41:b4:33:67:41:85:a2:ab:13:
c7:d1:2d:81:ee:09:11:d3:79:bd:0f:3f:81:93:f2:
e4:61:43:f6:cc:f4:de:d2:1a:86:7c:88:ad:fc:24:
72:2b:8d:8d:86:d0:4e:59:19:80:c5:67:3f:fd:73:
00:6a:e4:1b:ed:b3:c4:07:84:77:ce:26:9c:04:17:
72:65:8c:50:05:10:dd:b3:03:70:56:13:cd:43:2b:
ce:65:72:e9:9d:3d:6f:f5:a0:24:1d:b6:92:e2:03:
7c:18:0e:75:14:b6:75:b5:ee:aa:b9:18:20:2a:d3:
5d:16:91:0e:68:6e:3b:72:ab:b7:d5:32:96:86:2f:
63:84:7d:80:98:df:b3:9c:70:b5:43:61:37:3d:d7:
04:0c:fe:42:7c:04:b6:ac:58:68:bb:35:86:ff:6a:
86:97:67:65:e6:8f:35:95:97:ed:dc:33:0a:87:e3:
97:15:fb:ad:ba:30:9e:5e:14:41:09:cb:85:64:76:
16:4c:66:00:c9:14:d0:8b:7e:15:18:0c:0c:a0:cb:
42:db:9b:16:2a:db:68:d4:fa:1a:e0:77:25:b0:bd:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:13:6F:45:D2:56:7F:AD:55:82:A1:41:53:CA:A7:8B:01:92:D2
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e0:22:d8:30:6a:57:79:13:65:9a:a0:f1:75:a3:f7:c1:a8:
6f:a4:55:73:91:cd:09:57:50:f2:36:fc:4e:28:c5:05:11:08:
ad:12:ae:98:25:0d:f9:87:bd:c0:3c:7d:7f:01:be:6a:6b:44:
bb:61:a6:04:6f:b9:15:c8:54:55:91:a3:12:67:c8:d6:a4:78:
7c:3c:35:5f:9e:c4:16:86:d2:bd:f4:04:90:b6:ff:70:b1:ee:
ce:34:7f:92:4e:44:b3:f9:e1:c9:03:dc:d7:47:5e:2e:38:f0:
26:df:17:22:bc:bc:db:be:c4:c4:58:01:d2:04:5d:83:e7:35:
24:14:36:3a:1c:26:74:13:e6:33:ae:b8:94:89:94:7c:8c:10:
e1:95:01:6f:a1:71:10:4c:af:31:a9:ff:e0:a0:e1:57:bf:f2:
21:ed:33:00:04:27:38:b7:7b:96:9e:72:7b:ff:2b:09:b9:bf:
41:c9:f8:ba:88:a4:92:57:eb:98:ec:77:57:99:e6:3d:50:bf:
b5:80:5a:63:7d:41:09:f7:95:7b:12:46:d7:95:f2:cb:64:d6:
10:bc:64:a4:bd:4e:97:7f:3d:73:42:1e:63:5c:39:41:6e:f5:
6c:c4:9a:8a:24:76:46:f0:63:f3:06:bd:8e:fa:d9:1e:4f:da:
4f:cb:69:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT4u+B+Sk55vUhEWdeL5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjYwNDE2MjIwMDQzWhcNMjYwNDE3MjIwMDQzWjAzMTEwLwYDVQQD
Eyg3ZWE2MTM2ZjQ1ZDI1NjdmYWQ1NTgyYTE0MTUzY2FhNzhiMDE5MmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8rKp/BQXUPwfX8Ya7sAN4LeWXpu
hGTeaSsgbmisBdRTxT1BtDNnQYWiqxPH0S2B7gkR03m9Dz+Bk/LkYUP2zPTe0hqG
fIit/CRyK42NhtBOWRmAxWc//XMAauQb7bPEB4R3ziacBBdyZYxQBRDdswNwVhPN
QyvOZXLpnT1v9aAkHbaS4gN8GA51FLZ1te6quRggKtNdFpEOaG47cqu31TKWhi9j
hH2AmN+znHC1Q2E3PdcEDP5CfAS2rFhouzWG/2qGl2dl5o81lZft3DMKh+OXFfut
ujCeXhRBCcuFZHYWTGYAyRTQi34VGAwMoMtC25sWKtto1Poa4HclsL0HEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6mE29F0lZ/rVWCoUFTyqeLAZLSMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOAi2DBq
V3kTZZqg8XWj98Gob6RVc5HNCVdQ8jb8TijFBREIrRKumCUN+Ye9wDx9fwG+amtE
u2GmBG+5FchUVZGjEmfI1qR4fDw1X57EFobSvfQEkLb/cLHuzjR/kk5Es/nhyQPc
10deLjjwJt8XIry8277ExFgB0gRdg+c1JBQ2OhwmdBPmM664lImUfIwQ4ZUBb6Fx
EEyvMan/4KDhV7/yIe0zAAQnOLd7lp5ye/8rCbm/Qcn4uoikklfrmOx3V5nmPVC/
tYBaY31BCfeVexJG15Xyy2TWELxkpL1Ol389c0IeY1w5QW71bMSaiiR2RvBj8wa9
jvrZHk/aT8tpQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:44 2026 by rpki-client