Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: Vc0B6PknZPI0v4fb5pnPGkY3o5XFZRg5ZODJvMwP6Y0=
Subject key identifier: D8:F7:62:EE:A0:16:2E:5E:57:E3:A9:80:A1:1C:83:6C:C5:E7:D3:7F
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019DA453EE351DCA544B1628FD8AFDD77E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: YFz4vlhkBHy/SMJe/1Y29F7qJMALQjk8VwyjKB8FsAY=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ee:35:1d:ca:54:4b:16:28:fd:8a:fd:d7:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=d8f762eea0162e5e57e3a980a11c836cc5e7d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:2c:b5:af:7e:e3:d8:34:77:c5:f5:6c:31:
b9:02:6e:3e:93:10:4f:e9:8e:7d:80:bb:32:6c:07:
84:b3:2e:ee:ea:d0:45:c4:45:27:cf:e3:c3:9f:cf:
b7:ad:bc:30:ec:fe:58:25:66:ff:e8:ff:8c:0c:b5:
3a:a2:9d:75:d1:de:4a:51:5b:70:28:98:b8:ec:b4:
7e:e5:85:70:76:b3:96:1c:60:f4:24:05:1b:9d:83:
47:89:c6:fe:b7:15:8e:1d:20:24:e1:f9:fb:b3:4f:
4c:97:bc:2a:54:71:66:89:d1:75:17:61:1b:60:b0:
07:fa:42:7a:32:14:be:35:52:c7:ae:38:9a:c7:80:
35:59:14:b7:3f:13:71:73:61:ca:0c:28:1a:07:cb:
98:5b:b5:78:eb:40:c8:ed:b4:c9:36:db:87:a7:ec:
03:61:b6:e3:d5:fd:ed:d9:47:09:3e:4d:d4:3e:a6:
a1:d5:78:02:1c:f4:72:d2:2d:a8:34:e8:de:83:80:
a4:f4:34:39:75:af:55:54:74:69:fe:0d:f6:97:2b:
8c:33:50:ec:eb:8b:ca:40:e1:55:b0:1e:80:61:b4:
5a:07:c8:e2:1c:94:da:c3:cb:a3:7c:79:bf:99:95:
f7:59:ca:a4:f0:ed:3b:93:5d:40:d5:3a:04:df:a3:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:62:EE:A0:16:2E:5E:57:E3:A9:80:A1:1C:83:6C:C5:E7:D3:7F
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ef:52:b4:56:e0:7b:69:20:2a:66:81:e1:e3:35:12:4f:2e:
12:5f:08:a8:3a:0a:d4:40:60:af:0a:8c:ac:b9:76:e2:47:4f:
a7:18:44:9b:3c:6e:57:5a:6d:34:3a:3d:26:85:ca:f7:61:6f:
8e:0b:83:d3:5b:6c:20:5e:55:b6:c6:05:77:d2:e2:98:f8:68:
1c:a0:b4:b0:de:64:7f:a7:7f:1d:f6:98:a3:6e:c0:e0:6c:40:
b3:8f:7b:a1:d8:2e:ea:1b:95:82:f7:2f:0a:c6:85:06:ca:00:
56:c4:e2:9c:58:85:51:a1:7b:51:84:46:c3:f1:8e:7f:6f:0e:
eb:f8:bb:d6:50:76:4b:b6:b1:5c:db:cf:ca:37:10:6b:2f:e1:
95:0c:a5:05:6e:15:25:89:b6:e5:07:3c:a5:ff:55:33:0a:4a:
1e:ea:36:46:69:2b:0a:fe:9a:d2:42:01:c5:35:4a:de:a3:11:
dd:55:0c:89:44:bb:24:02:6a:b5:ff:60:92:56:ca:da:28:be:
98:59:87:9c:55:b8:74:29:92:1f:30:9c:bd:e7:67:f2:83:8e:
c8:ca:58:57:24:f3:d1:a5:eb:4d:d1:49:77:a0:15:13:b7:f2:
15:fb:67:96:c6:4e:f5:2f:68:ec:10:a6:99:2c:c5:c8:f1:dc:
8f:1f:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:53:11 2026 by rpki-client