Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: d29l20Gw62bkSBLnf8+J+8VZzS85zXSmy0n3Kf9zvdE=
Subject key identifier: B7:2C:F8:49:0C:42:13:9D:91:7A:6A:21:4E:F9:86:AA:18:BD:90:16
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 019D99D0A00F4D63E27A03C9AA7B7287B0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: sMIwRAhRLmgquFcjE9nmWbsaVYj39vqhyH1iELjXCHs=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a0:0f:4d:63:e2:7a:03:c9:aa:7b:72:87:b0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=b72cf8490c42139d917a6a214ef986aa18bd9016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:47:86:f4:40:5f:ce:ac:e8:33:c9:70:de:
eb:d0:0e:0b:5b:96:cd:2b:79:5d:b9:70:3e:01:bb:
a7:14:8a:a5:fe:94:ae:c5:55:77:d1:01:57:a5:ad:
cd:e1:a6:ce:66:2e:7f:b3:62:64:68:67:75:c5:7b:
e0:89:a4:ff:38:94:aa:16:25:da:a2:4c:f8:2f:59:
f6:80:3d:94:ec:ff:bb:1a:75:12:d5:a9:c6:d8:79:
e6:92:41:05:a2:c7:1a:86:7d:c8:f7:c7:28:c8:01:
a3:93:16:04:dc:31:32:42:70:da:4b:2f:08:db:4e:
03:ed:53:51:4b:4b:5c:66:60:27:c4:70:86:66:6e:
62:80:e4:4f:f3:51:ac:b3:ff:1d:08:e9:57:80:2b:
b1:df:bb:05:32:2a:7a:d2:95:ca:99:95:a0:ff:5c:
55:cb:44:5e:10:ab:5d:e3:7d:56:cd:5a:a6:b4:d3:
8f:d0:2d:6b:2b:b9:0f:89:7c:0d:c5:aa:96:4c:00:
41:09:3c:b6:cf:c5:73:37:05:de:ec:87:d5:94:b2:
d4:30:16:90:ce:bb:13:73:5a:dc:f0:30:6e:93:6d:
91:81:2a:23:c7:11:60:b5:f2:2b:16:b1:d8:09:b2:
0b:2c:01:7c:af:6c:e4:b0:27:21:3d:9e:b2:9c:53:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:F8:49:0C:42:13:9D:91:7A:6A:21:4E:F9:86:AA:18:BD:90:16
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:06:4b:6c:b8:7a:aa:57:c9:f9:52:91:4e:2c:f4:16:cf:
76:e0:39:9a:84:00:ca:d2:78:43:5d:fd:36:92:bf:29:73:9f:
83:46:2d:12:66:25:83:80:99:12:de:8d:76:53:ba:59:e7:08:
15:1a:03:de:00:c1:dc:ad:db:b2:3c:50:ec:cb:0c:a8:6f:26:
d3:75:06:f5:c0:09:f4:b1:5c:e4:4c:f6:96:66:63:55:0e:1a:
69:8b:94:06:1d:29:ee:35:f0:f7:9f:36:06:d8:7a:4c:9d:01:
d4:ad:3a:14:a4:cc:3c:8c:3b:68:6b:fb:78:af:f5:b3:65:ed:
ea:85:8a:87:a4:81:ee:37:df:32:08:c8:f0:ac:a8:a1:d8:3b:
2c:de:9c:d7:60:dd:90:88:6d:79:6d:13:b2:a9:b0:22:11:b3:
04:08:32:1f:f2:94:58:01:80:9a:7e:8a:59:3b:db:ae:c3:51:
e6:df:a5:75:d0:8b:ed:e8:8b:aa:ae:77:4e:94:23:4b:4f:bf:
c7:d3:73:c2:02:37:2c:91:c7:8d:0c:f8:98:a5:05:0a:be:45:
dd:dc:91:1a:5a:20:b3:0e:f4:35:eb:8c:bc:fc:55:c1:02:29:
e4:a9:43:a6:ed:92:49:44:88:f7:6d:fb:3d:5c:a5:38:89:19:
d8:f8:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:06 2026 by rpki-client