Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: pgfbPFIjbI3C1XGWO5iwTJZfVpWBcxP7Yvdp7XIVeMY=
Subject key identifier: 81:C9:FD:9F:24:6C:05:72:51:F4:BF:6C:CD:6C:2B:01:38:C4:A3:34
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019D98BD2A9B67DD170D75EF9FC93BB2EAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: 4MB/5CLNREPXqm9P7gA6k3xPtxGsa2eE9+NB05dOXec=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2a:9b:67:dd:17:0d:75:ef:9f:c9:3b:b2:ea:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=81c9fd9f246c057251f4bf6ccd6c2b0138c4a334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:dc:76:ab:da:0b:85:45:ed:f5:7c:2c:95:
ac:b2:d9:21:c1:2b:4a:09:b8:61:89:26:d3:fb:b2:
61:51:67:4a:7b:64:9c:21:80:7b:a7:46:3a:fa:27:
71:ef:50:5f:d7:46:d4:3a:f2:21:f2:ef:77:b2:26:
2a:b5:5d:ea:b2:e2:03:0b:ed:df:99:db:00:12:76:
06:3b:3f:e4:46:6f:9e:64:2f:3f:6f:d7:58:4e:f2:
a9:17:2c:2e:95:48:39:9e:1c:9e:63:f1:04:02:f2:
fa:1f:43:63:62:dc:e5:31:35:7e:34:0d:a8:0b:26:
7f:92:08:b8:1f:9c:52:3a:7d:a4:6c:12:4e:5a:08:
05:80:a2:60:75:34:6f:74:a0:4a:40:fc:48:a6:57:
4a:a2:64:51:e8:48:5f:f0:fc:54:10:c6:3c:c2:d1:
ba:87:e8:c8:9c:3a:1e:bb:34:a8:9f:56:96:34:10:
08:32:e1:6c:78:d3:55:c2:39:af:e4:99:84:ab:26:
50:00:52:91:1a:26:1f:bc:1b:bb:e2:89:65:07:13:
64:ad:62:49:9c:36:83:57:b7:d5:53:20:57:e7:f6:
ee:ac:26:5e:54:f0:f8:f9:cf:3a:98:85:ff:01:8f:
d2:ac:8a:69:08:b1:8f:c0:c3:2c:c6:19:11:84:ea:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:FD:9F:24:6C:05:72:51:F4:BF:6C:CD:6C:2B:01:38:C4:A3:34
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c3:b0:66:91:5f:01:eb:73:13:88:51:72:37:a6:91:8a:37:
be:38:43:67:53:07:bf:de:fb:6d:0f:25:98:1f:e4:7e:33:e9:
ba:75:58:f1:c6:9b:80:17:ab:d6:62:f7:a6:5b:c6:90:53:c5:
c1:32:d3:38:81:71:e6:3a:c8:6a:fb:67:aa:64:b4:69:be:e2:
11:fe:b0:77:6b:8f:ea:b7:2b:92:bc:02:86:ff:b4:4c:7b:4f:
c0:40:b8:50:85:fa:d5:4d:9b:da:3c:ae:5d:e3:19:59:ea:97:
b5:de:52:e8:39:d1:fe:b6:49:52:42:90:08:9b:e6:cb:19:c9:
32:35:d0:03:e8:2a:e1:6f:90:f5:0c:dd:a2:46:10:67:89:0c:
c2:6e:6d:29:14:ad:29:05:5d:3f:f0:ed:e1:19:82:05:f4:64:
b6:35:06:36:3e:f8:97:34:02:9e:f3:f8:27:a1:fe:36:5b:d9:
d9:dc:71:4d:21:c1:1f:b7:15:13:3a:7d:c9:1d:e7:1b:0b:67:
71:52:c0:51:dc:30:db:d5:77:80:dc:bd:bd:8d:2a:fc:12:16:
4f:cf:f8:d1:1e:35:6e:e2:34:01:78:b3:11:8c:b4:db:e2:d5:
1b:95:1f:18:4c:14:8d:28:41:ed:be:96:32:5f:65:90:9e:09:
42:63:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:55 2026 by rpki-client