Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: f4Gr1bnwPwoj1X0m04iOVwcMaTetLNUzircdVFQ3QjQ=
Subject key identifier: 13:ED:A1:E4:34:5E:49:2F:D3:20:72:11:76:0D:9D:FB:8C:49:30:DD
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019D99993D52F748581A0BB5035BA3AFC25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:49 +0000
Manifest this update: Fri 17 Apr 2026 04:00:49 +0000
Manifest next update: Sat 18 Apr 2026 04:00:49 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: QwVQC12kV9wo5cE3+GBfl1xY3h4/2zYs/+S2UEIouXM=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
3: SQYU9I8icjC1PnXxoUMPA7hZuuQ.roa (hash: os/3JTQZo5v32/YUHuB42SkbCkSG8rkSt1h0Yz40ENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3d:52:f7:48:58:1a:0b:b5:03:5b:a3:af:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Apr 17 04:00:49 2026 GMT
Not After : Apr 18 04:00:49 2026 GMT
Subject: CN=13eda1e4345e492fd3207211760d9dfb8c4930dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:de:b9:8b:b8:1e:b9:de:c1:45:38:61:dc:
a3:2b:b6:d3:9f:50:de:b3:2a:94:3c:60:8c:dd:83:
5c:a0:18:32:ee:f5:65:b6:87:48:01:ff:d6:44:8b:
69:f6:61:cd:cd:d2:cb:ae:03:1d:01:0e:26:71:4c:
09:71:4f:72:24:59:aa:b2:70:26:c8:86:32:64:c2:
a5:36:23:74:fb:50:3e:1d:ec:6f:62:c3:1e:e1:09:
28:98:ab:e1:be:b3:e3:d7:d7:99:34:eb:84:fd:d3:
2a:69:ab:d7:9d:04:71:29:37:55:6b:7a:dc:83:33:
ca:56:03:18:9b:56:c2:3f:15:b2:80:c1:89:b0:e9:
0b:f9:8c:d3:a4:57:c7:5e:7f:c4:88:1f:2d:4b:af:
60:db:cc:ce:fd:1c:ce:01:92:62:9b:3f:77:9d:fb:
1b:41:43:52:9e:0f:3b:5e:f8:d6:6d:7c:93:08:e9:
d3:5a:24:ae:88:a2:8d:e6:4a:d3:91:81:86:55:a1:
86:0d:0a:bd:c7:db:40:3a:0c:0e:58:99:e7:de:1f:
23:82:46:4b:57:5a:93:1c:9b:c1:80:46:18:6d:cf:
2f:f3:ab:fd:94:d1:29:70:f9:5e:13:42:47:2e:f1:
3c:52:89:db:e8:63:45:8c:d5:0f:0a:07:1f:69:e4:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:A1:E4:34:5E:49:2F:D3:20:72:11:76:0D:9D:FB:8C:49:30:DD
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:99:f6:27:e0:8a:71:39:85:48:e0:3c:6e:c0:20:f9:f0:da:
6c:b5:d9:f7:d5:1f:9c:cb:d7:6e:43:c4:78:93:64:91:7f:b6:
d0:2b:05:2f:34:b0:97:ca:11:1c:df:87:8c:2a:0e:b8:45:ae:
d2:5c:a2:70:ee:9e:98:5e:63:0a:de:53:b9:5a:75:a1:e9:1d:
8b:65:46:de:76:5d:06:ba:61:d5:81:7d:8d:5e:19:f4:4b:01:
82:15:3a:30:45:c3:a8:08:77:b5:d1:a4:07:40:af:46:fc:6e:
38:1d:6f:4c:4b:3a:73:b9:83:79:9d:4c:dd:6b:ed:24:eb:e4:
ec:ea:2e:8f:2b:6c:76:8f:da:a4:90:95:fc:80:bf:3e:4d:1c:
36:1d:80:75:1f:02:df:7b:02:63:3d:eb:ba:9f:d8:8f:e0:ff:
c3:39:cf:e0:f2:a2:05:0f:37:f5:ec:c1:fc:77:70:10:f8:60:
c1:91:04:b2:3d:a1:14:a6:cd:e6:2c:90:a6:02:01:2e:00:a4:
33:95:98:f6:13:b6:58:a0:e0:58:b4:e5:dd:87:ab:1e:f4:7b:
3b:42:5c:d7:2b:cb:33:ad:c7:4d:ae:73:31:3e:97:de:d2:95:
67:93:57:cc:da:f0:f7:4b:73:c2:98:ef:e0:f6:bc:25:a8:a1:
da:f9:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:57 2026 by rpki-client