Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: GsEQDbOs0cpDi7kpGn0TD1DGTlr8YRzrogA6Y4OtCKY=
Subject key identifier: 27:21:AD:4B:FB:11:55:AF:55:43:7A:50:C1:D1:E6:23:92:BC:AA:6C
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 019D999934D67A4B49D1120F244DFC41E2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0D2D
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: SuKhQ+u/+FRD0IGL7QZsOolrzQKSK6MoNUTIuSEvjk4=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:34:d6:7a:4b:49:d1:12:0f:24:4d:fc:41:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=2721ad4bfb1155af55437a50c1d1e62392bcaa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:5c:9a:84:05:73:f7:57:01:54:c0:49:e7:
ef:0c:ef:47:d4:63:f1:73:f8:8d:49:f0:4d:80:22:
24:36:63:e0:f2:e2:89:25:5b:07:9a:2a:a6:53:c5:
68:23:32:e7:14:c0:7e:5e:6f:81:82:7f:5b:4b:58:
80:96:cf:b9:e9:5c:d3:26:ff:39:1a:4e:78:ea:d9:
ad:75:96:cc:44:3b:89:18:4e:5c:07:9c:97:bb:c9:
22:37:00:af:ad:61:02:94:7f:42:7c:67:1d:ef:ec:
6f:f3:fa:6d:72:08:a1:ab:39:9b:51:0d:47:42:90:
f7:a3:d0:72:0a:33:06:40:98:eb:2c:82:62:91:b8:
57:b7:ab:5a:b1:84:cd:cb:e2:97:96:29:f3:8e:d5:
dc:a5:b7:0a:e0:1c:71:d7:56:a1:63:2c:29:a7:07:
8f:3d:db:2c:19:5e:3a:e5:41:98:f9:63:e4:bd:27:
0e:31:65:b3:1c:65:ae:49:da:80:88:a8:38:19:06:
51:40:f9:40:22:da:c2:bc:0b:b2:8e:89:9b:6c:cf:
b0:db:a5:97:d7:62:4b:86:2e:04:2c:79:6e:17:4f:
e2:fa:27:54:80:01:ff:44:7b:80:3c:ab:08:98:44:
d5:a0:8e:19:6c:42:55:31:f0:30:97:f7:b7:c5:58:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:AD:4B:FB:11:55:AF:55:43:7A:50:C1:D1:E6:23:92:BC:AA:6C
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:8a:c6:c8:d3:b8:3a:b0:48:e0:16:45:50:f6:cb:83:bf:
40:8a:f0:8a:47:cd:ed:f7:82:df:d0:2f:9c:1b:49:58:ca:de:
fb:c8:1f:64:27:ce:55:f1:fb:56:8e:41:1b:4f:77:bc:6d:de:
47:fc:21:fb:f7:83:91:7d:2e:b1:2d:13:30:b9:51:5b:8c:03:
ec:77:fd:4f:a6:64:db:3c:b9:4e:6f:41:5b:af:6b:c4:9f:bd:
b4:d3:f7:15:e3:05:4c:5b:a2:0c:b0:9a:a4:6a:14:b2:5a:09:
75:49:dd:41:a9:f7:ac:d4:78:eb:8f:5e:f5:b6:22:5b:6b:73:
a5:bd:4c:25:d3:a7:ec:65:7c:72:0d:41:83:dc:6a:60:87:ed:
d1:5a:a9:c9:cc:38:e2:b6:49:c7:22:8d:f8:a2:84:64:db:cd:
35:ec:cf:12:75:11:e3:7a:88:6f:99:52:d1:4b:75:65:f8:45:
23:86:0c:75:eb:f5:ed:28:5c:af:6d:91:29:12:e8:49:fb:a9:
b7:f2:56:f8:21:a3:48:10:d2:a4:db:36:7d:18:02:ba:d1:5f:
f4:95:4f:0c:4e:14:06:f4:84:4b:c3:fa:e9:02:74:25:19:55:
60:7c:5a:3a:dc:0c:97:58:e2:1d:2c:0a:5c:46:1f:d6:50:34:
c7:5c:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:08 2026 by rpki-client