Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: lIkrITykwNpPT7y7VFbYJRWMIAGYwsmZ+4ePPEWbdSg=
Subject key identifier: 63:23:8F:09:5F:28:AE:B7:DA:B8:32:E2:44:97:EF:E2:3B:D5:9A:68
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 019D9999B094642E6E47F1FA774E9C9A7E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: JLz8GO2m0an/QY3/zDK8T9V5sRiinoiicWD6LyTqUx4=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b0:94:64:2e:6e:47:f1:fa:77:4e:9c:9a:7e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=63238f095f28aeb7dab832e24497efe23bd59a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:4a:e8:6b:c6:8c:6a:2e:27:ee:1f:c6:8b:
33:47:f0:d6:7a:6c:f8:c7:74:f2:e0:7b:3f:67:e5:
d7:79:c3:c3:8c:2e:2f:96:8b:18:14:8a:f7:ee:35:
7b:03:8c:32:fe:c8:b0:09:02:86:62:bb:c3:50:41:
9b:79:09:78:83:54:01:15:6a:67:e8:f5:a4:28:a9:
12:56:b1:9f:ef:b1:97:c7:6b:6a:81:a7:a3:1e:a2:
a3:e2:0c:84:82:94:72:6b:5b:f9:ff:ee:23:ab:0e:
ac:ac:83:25:ab:d5:ca:3f:c1:22:e2:0a:b3:dd:c4:
56:94:e6:66:4d:12:4e:05:36:2d:3b:7d:4b:78:93:
55:23:30:cf:e8:4e:ac:39:8e:c2:5a:8d:a1:5f:56:
07:be:f3:6a:e1:dc:5d:2d:9e:ba:d7:8c:49:ce:98:
17:49:87:90:b4:da:60:8d:88:3c:23:c6:51:2a:dc:
d8:e6:b4:98:82:46:8f:b5:56:fb:ac:1e:de:7f:46:
12:bc:ed:d6:02:13:87:2c:0c:33:58:4a:5a:46:c4:
71:f5:7d:26:2b:58:a7:1c:5c:64:03:0e:e0:17:d4:
3e:f3:c9:0e:e4:03:bd:c8:03:f6:ff:07:75:4e:90:
31:13:8d:c1:61:74:be:a4:70:5d:fd:6a:85:cf:be:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:23:8F:09:5F:28:AE:B7:DA:B8:32:E2:44:97:EF:E2:3B:D5:9A:68
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:b3:01:b4:38:4b:bc:9a:bd:b0:89:4c:6e:96:ee:46:60:
8c:79:3e:d0:1b:b6:6d:9c:9c:37:cd:07:0d:6f:ea:04:76:d2:
fe:f7:80:5b:b6:f7:3b:ac:e0:ee:4c:6b:a9:aa:c6:1a:2e:07:
c8:9b:fd:25:1b:9e:7e:1e:db:12:3b:28:11:6a:3c:c0:10:e3:
02:8c:d9:3d:7d:7d:c2:ed:f4:13:a7:6b:93:90:15:e1:6f:41:
d1:c7:0f:97:96:a0:66:36:3a:53:14:d1:23:97:76:64:5a:2e:
8c:f0:b3:40:40:05:dc:a4:7a:6c:d2:c2:40:1a:36:95:80:5f:
59:53:0a:63:97:eb:21:76:42:36:a7:17:fa:5d:e9:00:c0:d8:
d8:c5:f6:11:b1:f5:e5:5a:c0:7a:67:c7:68:be:c1:83:90:a7:
85:9e:92:58:d0:f2:4c:50:24:6b:e1:bb:8d:2b:33:58:56:4d:
77:dd:0e:73:89:e1:4b:66:15:e0:a8:68:c1:f3:4c:8d:71:5b:
41:1d:4a:7c:75:79:66:92:25:3f:6d:a7:fb:e7:e7:c9:7b:d7:
2d:85:e7:83:07:f9:c5:2d:b6:19:8e:0d:79:d2:35:7c:44:69:
ff:dd:dd:c9:fa:e9:5d:c4:eb:37:bd:ce:21:f2:8a:43:42:41:
53:a6:51:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmbCUZC5uR/H6d06cmn5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2
ZGJkZWYwHhcNMjYwNDE3MDQwMTE5WhcNMjYwNDE4MDQwMTE5WjAzMTEwLwYDVQQD
Eyg2MzIzOGYwOTVmMjhhZWI3ZGFiODMyZTI0NDk3ZWZlMjNiZDU5YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnElK6GvGjGouJ+4fxoszR/DWemz4
x3Ty4Hs/Z+XXecPDjC4vlosYFIr37jV7A4wy/siwCQKGYrvDUEGbeQl4g1QBFWpn
6PWkKKkSVrGf77GXx2tqgaejHqKj4gyEgpRya1v5/+4jqw6srIMlq9XKP8Ei4gqz
3cRWlOZmTRJOBTYtO31LeJNVIzDP6E6sOY7CWo2hX1YHvvNq4dxdLZ6614xJzpgX
SYeQtNpgjYg8I8ZRKtzY5rSYgkaPtVb7rB7ef0YSvO3WAhOHLAwzWEpaRsRx9X0m
K1inHFxkAw7gF9Q+88kO5AO9yAP2/wd1TpAxE43BYXS+pHBd/WqFz75urQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMjjwlfKK632rgy4kSX7+I71ZpoMB8GA1UdIwQY
MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct
ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5
LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwazAbQ4
S7yavbCJTG6W7kZgjHk+0Bu2bZycN80HDW/qBHbS/veAW7b3O6zg7kxrqarGGi4H
yJv9JRuefh7bEjsoEWo8wBDjAozZPX19wu30E6drk5AV4W9B0ccPl5agZjY6UxTR
I5d2ZFoujPCzQEAF3KR6bNLCQBo2lYBfWVMKY5frIXZCNqcX+l3pAMDY2MX2EbH1
5VrAemfHaL7Bg5CnhZ6SWNDyTFAka+G7jSszWFZNd90Oc4nhS2YV4KhowfNMjXFb
QR1KfHV5ZpIlP22n++fnyXvXLYXngwf5xS22GY4NedI1fERp/93dyfrpXcTrN73O
IfKKQ0JBU6ZRLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:10 2026 by rpki-client