Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: ukH5v1yzAYd086AdVMvk3kPg9hjrxSOyTjr5bpthfCQ=
Subject key identifier: E7:5A:2B:A5:1F:F4:66:6A:C4:F6:74:E3:88:E5:72:FE:3E:1D:E5:0A
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019D98BDD45133D988A9FC7058488B120CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: pR5Q6BCd6C4kJVWlm8X2m2dVpSFnEvSSiG47BNrE8Gs=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d4:51:33:d9:88:a9:fc:70:58:48:8b:12:0c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=e75a2ba51ff4666ac4f674e388e572fe3e1de50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:64:77:4d:10:f2:29:3d:2d:5b:c1:66:5d:99:
20:2b:21:cb:e2:ef:aa:1d:fe:61:bb:75:91:03:46:
24:d9:fc:c0:50:b9:34:6e:fd:bf:1c:fb:f3:3e:83:
e7:b8:2d:5b:46:ac:c7:c4:3b:59:c9:71:3b:4f:9e:
02:4a:c5:95:a9:b2:da:1f:c8:b8:c5:d1:51:c3:66:
04:02:04:67:d5:33:a3:11:26:89:1f:1c:16:b3:d3:
7b:9f:21:e9:1f:16:28:95:b8:87:dd:25:62:48:b6:
8e:39:b0:27:e1:04:b8:52:20:88:e3:c1:09:b7:57:
cc:93:6c:f3:3c:54:ef:0d:08:a7:83:21:e4:9b:bb:
b0:d3:6f:62:c9:55:ff:38:ef:4d:71:60:3f:40:8a:
a4:a3:69:92:fd:2e:95:b7:f7:a9:e9:ac:e6:e0:79:
80:46:4d:76:2b:23:54:67:10:0c:31:40:ca:a0:58:
a3:ca:5b:5f:28:90:e8:71:dc:77:29:19:0c:54:c6:
0f:c2:56:5e:5a:53:25:02:fa:1e:8f:c3:8f:fb:26:
36:29:04:1e:a7:9f:33:ab:67:0e:71:92:ca:0b:c9:
02:d0:a6:14:fd:76:87:d0:9e:10:fa:c0:b8:33:01:
27:20:9b:33:df:0d:e4:0e:ea:e5:67:2c:02:97:eb:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:2B:A5:1F:F4:66:6A:C4:F6:74:E3:88:E5:72:FE:3E:1D:E5:0A
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:98:ff:ee:42:ba:95:01:bf:70:1d:52:d7:ea:b3:09:bd:a8:
50:02:e8:40:b2:f4:87:9d:88:da:33:0d:ca:4d:d1:ad:02:79:
e8:78:f2:a9:f0:9a:30:4e:fa:49:e6:50:74:4f:73:af:c7:b2:
37:c6:57:9c:2e:4c:ec:c1:c4:21:d7:3d:63:03:06:d6:ed:bc:
a9:2a:14:e6:3c:04:b9:b7:ae:d0:d4:aa:2b:8a:40:d0:7c:87:
4e:3b:b5:76:17:53:8a:e8:6b:f5:9c:e6:88:5d:99:1b:5d:21:
fe:7d:cb:79:ed:37:f4:a4:38:a5:14:cd:ae:67:e1:e0:48:c9:
75:21:6e:60:52:aa:c1:9b:c1:46:a6:4f:1f:1d:cf:52:ef:3c:
19:be:51:eb:af:4a:cf:a8:db:c0:8f:d0:92:1c:43:ed:ff:a0:
37:46:42:da:94:89:5e:bb:74:ba:e1:b6:f2:1e:eb:8f:9e:5d:
ae:55:9f:40:7c:62:47:fe:78:12:49:0f:b1:a6:57:fd:f6:cd:
4d:77:09:cd:a7:b2:9f:cf:37:9c:23:83:ac:b4:99:df:02:e5:
d1:bc:43:4d:08:44:de:e5:45:31:d5:cf:85:91:6e:08:a5:25:
8b:7b:2b:b2:1e:86:40:de:9e:2f:4a:b7:66:24:d5:1d:11:a2:
27:40:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:03 2026 by rpki-client