Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: LemogQX9hdH94pbz2QSpwSLWGra19EdiNZkx7Sme+qs=
Subject key identifier: FF:7B:85:61:2C:0E:D5:2B:57:27:7E:94:1A:61:D8:FC:89:31:05:7E
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 019D9C63777EF98DE401B04C86DE07C6CAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 17:00:57 +0000
Manifest this update: Fri 17 Apr 2026 17:00:57 +0000
Manifest next update: Sat 18 Apr 2026 17:00:57 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: wEixvQ+sXwZUoRg3lwEekQ9GtQ8/NJCvIEuGZSBTMTU=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:77:7e:f9:8d:e4:01:b0:4c:86:de:07:c6:ca:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Apr 17 17:00:57 2026 GMT
Not After : Apr 18 17:00:57 2026 GMT
Subject: CN=ff7b85612c0ed52b57277e941a61d8fc8931057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:ff:7a:7a:df:d2:6a:22:3d:85:8c:f5:7c:
18:54:f7:05:1f:83:45:4f:c2:80:38:92:78:cc:a4:
47:2e:f0:7d:7f:7b:c0:8f:ea:90:05:9e:68:5d:ac:
42:2d:ae:fa:41:a9:74:dc:d9:a1:4b:6f:e0:ff:3e:
01:d5:11:fe:27:36:f2:1e:68:d5:75:38:dc:a4:3e:
cf:b2:5c:ba:5a:87:ac:70:6b:71:a2:e3:1e:20:b5:
bc:dd:c4:bb:1e:d5:af:54:6a:3e:b5:d8:3d:aa:73:
c9:22:a0:e6:cd:a7:c2:a6:67:10:12:f7:77:ba:3e:
db:5b:08:a0:8a:10:29:37:75:95:ea:6e:68:fe:3c:
b1:e5:0d:ae:4d:5c:13:dd:d0:27:00:de:04:e8:7a:
54:6e:23:65:ec:45:62:a9:a7:5b:7d:a5:d9:04:2b:
25:d0:d7:a8:7a:bd:59:2b:61:89:32:13:1e:57:53:
4e:b6:f4:62:a1:a5:30:a5:5a:46:08:43:d5:19:c9:
89:53:32:75:37:f2:76:f0:23:4c:82:6b:b2:b4:5d:
80:af:f9:a1:cc:99:dc:86:fc:8e:0c:22:c1:cb:d0:
62:ef:14:ea:15:34:f7:cf:69:43:71:db:d8:c1:35:
53:7b:89:5a:6b:43:d5:ce:ac:89:63:b5:95:3e:6f:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:85:61:2C:0E:D5:2B:57:27:7E:94:1A:61:D8:FC:89:31:05:7E
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:08:a6:74:73:60:de:40:af:86:63:e2:4a:96:12:a3:0d:8e:
37:a6:f2:3d:e8:52:b6:4d:e4:bb:8e:e3:5d:cb:35:7a:1f:6c:
43:24:2b:98:90:c7:3a:03:67:45:48:8b:f1:73:36:93:1a:1b:
a2:b9:50:d7:53:db:96:61:5b:21:ca:ad:4c:b7:31:cc:3c:b6:
db:40:1f:ae:01:af:dd:68:55:6d:c2:8f:44:06:78:13:54:c5:
4b:b2:0c:9a:60:78:7d:1b:af:b4:93:81:b2:94:d5:c1:ac:21:
7f:dd:e2:c7:f4:b2:16:9d:a6:70:bf:bf:a1:92:e6:46:66:e1:
96:f5:d9:a4:b1:33:03:47:4b:19:75:1d:36:a3:87:6f:a3:9c:
10:48:53:ee:1b:a4:bb:07:b5:a7:05:2a:dc:91:66:14:4b:db:
fe:75:5b:06:ce:81:61:94:d4:bc:eb:c5:d2:32:d2:fe:d4:7b:
ad:e0:a4:3c:46:ae:60:5d:cb:84:4c:89:c8:ea:0d:5f:1c:21:
da:14:88:4a:7a:74:6f:7c:29:95:4c:fb:cf:13:7b:a7:50:fe:
01:c1:81:e2:de:30:79:bd:3f:17:24:22:9f:89:e8:b0:c5:39:
fc:e7:26:ad:c2:bc:90:05:a5:e1:9f:f9:48:0e:50:5e:07:84:
5d:97:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:30 2026 by rpki-client