Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: V5Lm+q0OlChYkcLP/Mqrt0RtB9PHeKZDzKKU5dFIZV0=
Subject key identifier: 52:08:E3:30:6D:CD:70:25:0A:39:3B:27:3A:CE:96:66:9C:7F:15:29
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 019D9AE2A2B76241F9022D9AB4D6419D8630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:00:37 +0000
Manifest this update: Fri 17 Apr 2026 10:00:37 +0000
Manifest next update: Sat 18 Apr 2026 10:00:37 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: 85etXtBo1+vQ+qY6c4LwTrOsHNew7rhEuC6rF2ze9Xs=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a2:b7:62:41:f9:02:2d:9a:b4:d6:41:9d:86:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Apr 17 10:00:37 2026 GMT
Not After : Apr 18 10:00:37 2026 GMT
Subject: CN=5208e3306dcd70250a393b273ace96669c7f1529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:41:61:ca:c7:c0:1f:c3:5c:be:e5:40:42:
68:9e:66:95:d4:7a:e2:82:41:ba:37:0c:da:27:68:
1c:5e:b1:ab:e9:a8:e0:c7:25:90:39:03:eb:20:1f:
66:31:db:a5:5e:3a:17:25:68:d7:60:15:ab:c1:50:
46:f6:d3:2d:de:45:bb:8f:bd:8a:ae:12:58:41:84:
46:40:23:b2:bf:25:87:9c:02:7a:50:c5:6d:4d:4a:
36:e0:43:b6:48:a8:9c:8c:3d:d2:89:62:ae:d0:f0:
29:ea:fc:ef:24:8d:71:0d:9b:ff:14:78:dd:e4:61:
4e:b1:7b:a4:a1:0f:02:89:19:9f:10:cc:b9:34:ad:
7b:5a:aa:42:18:53:77:3b:3d:67:36:9c:34:28:79:
31:58:dc:33:f5:fd:67:2d:71:0e:39:3d:32:f1:61:
c9:0a:f5:fd:61:64:53:25:d5:a4:90:b0:9e:4d:40:
0f:26:ac:fd:96:ca:f3:dc:47:45:11:38:71:cb:4a:
ca:85:d6:94:98:78:29:0c:1e:d6:01:88:ff:c5:44:
22:94:57:9d:f8:43:a5:d8:dc:15:f8:c7:07:43:42:
b2:d0:29:88:7a:e6:18:e4:58:78:4f:bc:2c:40:52:
c5:b6:7e:9d:74:e9:b5:30:76:c6:88:9b:b2:91:1b:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:08:E3:30:6D:CD:70:25:0A:39:3B:27:3A:CE:96:66:9C:7F:15:29
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:59:7e:c3:53:82:d2:88:29:6a:8c:de:d3:b6:19:10:b8:ef:
88:ed:99:a0:75:fa:65:19:cd:bb:a2:13:a8:a0:78:59:d6:01:
d5:76:e1:82:86:92:40:7c:69:60:46:e0:30:f6:14:60:b9:8b:
99:eb:12:53:99:21:ec:71:15:7a:44:07:e8:3f:aa:c3:f7:b1:
eb:42:5d:bc:47:2f:a2:67:92:cd:03:14:1c:36:19:31:cd:ae:
8c:4c:d6:fb:43:e9:cc:33:78:a4:8e:8c:5f:c9:f6:fb:3e:73:
22:08:ff:cc:06:4f:63:ed:c8:d2:38:b7:d1:f8:f6:57:22:2c:
1c:e3:2b:de:a4:ce:f9:0d:51:a9:5b:29:39:7f:50:b7:d8:5b:
01:75:d3:23:4f:19:74:c0:9e:b7:16:36:a4:34:1d:35:6b:ff:
70:a9:90:09:41:c6:f9:11:87:ba:7e:d1:54:6e:59:ab:64:07:
6f:2d:26:35:d0:9b:de:55:95:e5:9a:e3:1d:f3:29:69:b0:ea:
0e:d2:98:63:fb:96:e8:5b:b1:8a:6b:ab:58:a5:32:d1:32:84:
dc:87:46:ae:95:8e:04:25:a3:f1:9c:94:df:96:bc:6c:13:25:
73:16:84:ad:29:d3:81:61:b2:2b:55:8d:e6:4e:48:3e:0d:a9:
9a:9c:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:10 2026 by rpki-client