Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: Q/dP8+f0D5QnqiSHovj0spP3gPQ8cWIM+pUz/7BxrxQ=
Subject key identifier: A3:67:5B:88:29:FD:55:4F:B4:A2:90:54:94:B3:34:D1:19:F5:2E:B6
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019D97E1A2AED69C220090EAD83269C686DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1853
Signing time: Thu 16 Apr 2026 20:00:39 +0000
Manifest this update: Thu 16 Apr 2026 20:00:39 +0000
Manifest next update: Fri 17 Apr 2026 20:00:39 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: Tvc72n+GYkrMqQd7H1vSj/QJSQzMxd1ZqEQYt7T5m7Y=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:a2:ae:d6:9c:22:00:90:ea:d8:32:69:c6:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Apr 16 20:00:39 2026 GMT
Not After : Apr 17 20:00:39 2026 GMT
Subject: CN=a3675b8829fd554fb4a2905494b334d119f52eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:18:a3:93:9c:16:6a:6e:0e:67:03:27:1a:
47:71:72:d2:c6:ac:36:da:d5:fd:ba:48:cc:19:9e:
1f:fa:1e:90:aa:da:5f:0e:f6:2a:2b:70:94:03:27:
5a:e1:b6:85:7f:b6:4e:1e:db:f4:db:ba:25:fb:2a:
cd:5f:ff:96:33:ff:f2:0b:e9:5b:78:d0:58:72:06:
bb:64:71:08:53:0b:8d:2d:c5:90:62:84:df:17:2e:
a2:be:ca:f4:ca:ab:43:6e:76:c0:c6:83:1e:68:65:
0e:f8:b5:2d:17:4a:9d:e6:fb:4b:2d:aa:bb:dd:6c:
bc:59:6e:24:e6:07:b7:fd:62:7b:09:1d:74:77:79:
ef:40:d1:14:ac:cd:8d:00:27:f9:bc:5b:29:e0:e7:
6a:04:17:51:86:44:8d:f0:77:fa:a3:cd:f6:c9:f1:
6c:f2:f7:d4:24:ff:1c:e6:bb:b9:6a:4a:c3:2b:56:
42:af:46:17:3b:62:0d:d3:dd:63:80:1e:ea:80:f4:
ba:10:af:f3:7b:5f:32:fb:42:54:76:4b:72:d5:77:
77:17:20:74:f2:44:e9:6b:b7:2e:dd:4f:19:34:0a:
6c:1e:94:25:08:18:a1:90:b4:79:12:8c:4f:a3:5e:
f2:a8:83:ae:d9:59:d8:fa:8e:89:2c:4c:97:98:e6:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:5B:88:29:FD:55:4F:B4:A2:90:54:94:B3:34:D1:19:F5:2E:B6
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:40:0c:35:34:8b:0c:86:bc:e5:69:68:1c:00:6e:df:5a:
aa:05:ef:55:65:48:fe:21:f4:4c:a1:9c:78:46:1e:5a:f9:0f:
fe:33:fa:15:1d:01:58:96:82:9e:c2:c2:40:11:02:82:32:b4:
ab:fd:7a:38:fa:b7:ed:3c:9b:2c:8f:43:30:38:70:74:e6:d7:
95:4c:d3:84:88:e2:e5:cf:6a:54:ed:5a:e3:c0:92:c3:af:14:
e2:3e:d4:0e:70:d8:3f:d6:cf:d2:2e:db:1b:93:85:62:66:df:
13:60:35:14:ad:6e:b8:66:c5:b7:d4:6f:31:16:6d:3a:92:9c:
0f:87:d4:f7:7a:55:d2:5a:9b:45:5b:07:48:79:a9:95:dd:62:
14:6d:13:78:3a:73:96:3e:c1:d8:5c:77:f3:65:ce:55:97:a7:
cd:f6:95:41:9b:57:7a:40:f4:28:af:e8:0a:53:b9:28:ab:2b:
16:0b:ae:f4:aa:1a:4b:9e:f3:9d:30:bf:9f:f6:0c:93:a0:1e:
50:21:8b:32:0f:a8:f9:29:9a:c1:e8:f4:cf:70:47:54:b1:38:
6f:60:02:0a:12:f8:5f:8e:ac:86:d0:3c:54:c4:7f:1b:e8:cc:
8a:2d:29:34:c9:58:2e:fa:bb:05:df:1b:bf:40:02:bf:7b:83:
a1:4d:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:08 2026 by rpki-client