Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: DLjHRmPVOgB2yJ1ev1MsBGOSsEJdcCpzaVl1iCO6ZKg=
Subject key identifier: CD:83:34:09:B0:71:78:9F:7D:25:F3:9C:6B:99:18:A0:94:92:39:47
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019D9886B7D057D2A35C157A00E71AB46C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 189D
Signing time: Thu 16 Apr 2026 23:00:58 +0000
Manifest this update: Thu 16 Apr 2026 23:00:58 +0000
Manifest next update: Fri 17 Apr 2026 23:00:58 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: YiUzCKEUSOCBl+fO97wxTw5lOeQrNpmm1g3FOMmcuyQ=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b7:d0:57:d2:a3:5c:15:7a:00:e7:1a:b4:6c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Apr 16 23:00:58 2026 GMT
Not After : Apr 17 23:00:58 2026 GMT
Subject: CN=cd833409b071789f7d25f39c6b9918a094923947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:10:db:b7:e4:a2:63:0d:f3:e0:ce:3d:1d:
6c:49:ce:e5:31:e1:d7:84:11:73:03:cb:c0:51:98:
33:89:4d:5d:0b:f8:44:11:e7:8a:c7:46:ae:57:7a:
1e:ac:b2:f7:bc:62:c3:0d:a0:f3:90:c1:da:89:26:
90:ec:98:9f:4e:6a:14:07:d1:fd:79:fe:87:b4:a9:
c0:d7:17:8b:61:b9:f6:a0:e6:ab:c0:c5:22:e5:ce:
51:23:a1:28:3c:f1:fe:6d:0a:76:61:e0:81:42:ac:
d4:a8:db:ba:3f:f7:46:d6:cf:6b:e7:5b:4a:e2:14:
88:37:bf:ba:d8:2d:4e:f5:d1:36:9a:5f:2a:75:ad:
e2:5e:d4:9e:29:dd:13:77:73:7c:93:f6:a6:f4:b6:
61:2b:81:7f:f1:5d:42:fa:4d:8a:7e:dc:e3:8c:e9:
04:89:21:fd:d3:76:07:90:d6:20:c7:cd:9a:66:9f:
59:3c:c0:bb:96:45:8e:14:67:a7:a7:44:3e:a3:83:
8c:20:c9:81:b3:a6:3a:94:f4:bf:90:87:2e:23:a4:
e0:65:ab:23:bb:97:e0:47:28:ae:eb:67:8a:5e:bc:
bc:4f:90:c1:77:d9:be:4d:d6:20:9d:64:ae:dd:0a:
6a:39:f1:82:84:60:5f:53:38:fd:5f:7a:39:02:97:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:34:09:B0:71:78:9F:7D:25:F3:9C:6B:99:18:A0:94:92:39:47
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:58:d7:3c:2d:30:b1:0d:7c:68:00:8d:fc:9c:46:07:96:
28:e8:b0:91:11:e0:7a:d4:11:72:af:e3:23:78:1d:67:fe:af:
7d:e5:eb:5c:32:3d:a5:5f:4b:a2:db:ce:7e:a6:9c:df:9c:94:
e1:40:8f:aa:eb:0d:23:91:ad:2f:84:dd:4d:61:30:7c:1e:d8:
84:52:12:ca:9e:e4:2c:00:9c:de:f6:78:64:26:82:d8:41:93:
ff:5f:63:c8:20:e3:f1:34:19:07:72:7b:86:15:2b:0d:b0:df:
99:7a:f0:36:b5:02:50:d5:0f:d7:d3:1a:52:37:a4:bb:cd:fc:
c1:cb:79:00:10:f2:55:35:4e:19:22:5c:12:0b:22:a2:e8:01:
76:42:f6:5c:cd:f6:6f:99:a0:29:0e:5e:1b:b8:60:91:d9:6e:
63:14:87:ea:71:f0:c9:f4:3e:3c:88:6e:e7:3d:d9:a3:b8:f4:
f9:13:d7:a4:c7:43:14:03:e2:aa:55:5c:2c:7d:53:b1:07:f8:
a4:8a:2c:83:49:04:6a:13:f3:1c:5f:d0:e4:c8:1c:83:a6:d8:
b7:4a:3a:85:49:5d:90:f8:a3:90:ce:50:20:2e:1d:69:9a:1f:
27:9e:85:f6:a0:38:4e:7d:c6:27:12:29:2a:96:01:0f:77:b9:
6a:63:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:08 2026 by rpki-client