Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: ygNcQIUg95zry2677kBZVGoM8u6tm3U9a9P1W1fAzNQ=
Subject key identifier: 0B:36:D3:6D:67:E8:0B:67:7A:53:96:DE:0B:7F:F9:26:17:F6:2F:18
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 019D9A3E1B9643E91901F85C863D7C543FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: bo+HfDMrDDSyKqp2of1q4yJR4MZ1Fsdxes9Lh6m8Z78=)
2: gPlEqEZzfnSTUwltcGMsedRBQ1E.roa (hash: 38esTkQDBO03GfM8yJINP0QbftSi3sYtaXAqJp+R6Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1b:96:43:e9:19:01:f8:5c:86:3d:7c:54:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=0b36d36d67e80b677a5396de0b7ff92617f62f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:44:d1:b0:48:87:5d:f0:46:49:fa:2b:9b:
fe:2d:df:13:67:63:ce:6a:9a:64:16:7e:57:89:ef:
42:06:db:6e:96:cb:0d:4e:e2:75:8e:af:1c:d3:ed:
69:c1:b8:72:5a:0c:b5:a1:cf:5e:3d:d8:9d:f2:2e:
f8:a7:8a:48:cd:10:6b:5e:de:dd:ec:0f:a6:f9:c4:
e0:62:21:91:b7:e9:1a:c4:78:0f:06:cf:ff:6e:4b:
e2:f9:82:21:42:f1:b3:af:70:ff:a1:a5:33:78:2e:
50:0e:13:51:10:8a:20:f1:3c:b2:c6:b2:84:6f:92:
03:b5:85:1f:d3:42:00:08:84:c4:6d:39:2b:2e:a8:
ed:ae:fc:9a:9e:e7:bc:c1:52:17:a8:3d:1d:20:0e:
ea:70:33:68:07:66:07:5c:e5:5b:94:e1:14:a6:1d:
47:f0:37:a8:56:eb:db:0e:1b:a3:a9:88:2d:7b:5d:
0b:07:f5:55:1b:e5:b6:d9:fd:d6:dd:ca:21:e5:cd:
30:45:d7:41:36:51:f0:19:24:dd:6f:a2:63:dc:db:
41:55:ae:2e:34:60:e2:4e:b1:33:bf:8f:ae:2c:f5:
ea:22:a7:b6:8a:3c:a4:5e:e2:3c:da:47:d2:85:86:
5f:89:ac:9e:e7:0c:44:a0:80:48:97:09:93:b6:5d:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:36:D3:6D:67:E8:0B:67:7A:53:96:DE:0B:7F:F9:26:17:F6:2F:18
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:fd:a8:4f:0b:ae:99:cd:ed:f6:09:c5:ba:3b:1f:93:47:
48:54:0c:f9:e7:da:b9:16:e1:6a:88:9c:84:9b:fa:e8:64:bf:
7a:23:de:9f:d7:a8:d2:2a:43:77:7f:d0:31:8c:e0:c3:cb:4b:
3c:25:47:4f:b4:ef:92:1a:d6:3a:90:58:07:30:af:40:57:2b:
14:bc:15:4d:a3:52:f0:b3:50:0d:d5:a5:f6:49:c2:7f:1a:74:
39:8b:d2:37:c6:e2:56:53:16:e4:41:7b:ee:34:23:b9:20:5c:
35:c9:49:e4:55:b7:d3:d2:da:02:10:f4:2c:2c:41:63:9a:f9:
0c:31:0f:c4:08:33:6a:f1:23:9b:aa:1c:fb:b1:5f:a3:8c:ae:
a7:49:5c:a1:8c:3e:3e:c4:cd:fd:15:31:65:5a:6f:0e:ae:50:
79:bb:89:e2:ee:dc:ec:0b:a9:4e:64:3c:42:42:20:c8:fc:cc:
42:e5:09:09:d9:fa:e1:5f:8e:57:3a:4c:4a:43:5d:08:a8:32:
7d:74:40:45:ba:df:8d:63:ef:db:ef:99:c0:16:d8:83:d2:52:
76:8f:ff:bc:d3:b8:4e:fd:ef:59:b6:d3:11:2f:8d:89:5f:da:
9b:37:fb:e6:73:52:73:b6:a7:60:93:b4:54:82:56:b4:ed:6f:
a7:73:a0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhuWQ+kZAfhchj18VD/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz
Yjk0NDIwHhcNMjYwNDE3MDcwMDU0WhcNMjYwNDE4MDcwMDU0WjAzMTEwLwYDVQQD
EygwYjM2ZDM2ZDY3ZTgwYjY3N2E1Mzk2ZGUwYjdmZjkyNjE3ZjYyZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp9E0bBIh13wRkn6K5v+Ld8TZ2PO
appkFn5Xie9CBttulssNTuJ1jq8c0+1pwbhyWgy1oc9ePdid8i74p4pIzRBrXt7d
7A+m+cTgYiGRt+kaxHgPBs//bkvi+YIhQvGzr3D/oaUzeC5QDhNREIog8TyyxrKE
b5IDtYUf00IACITEbTkrLqjtrvyanue8wVIXqD0dIA7qcDNoB2YHXOVblOEUph1H
8DeoVuvbDhujqYgte10LB/VVG+W22f3W3coh5c0wRddBNlHwGSTdb6Jj3NtBVa4u
NGDiTrEzv4+uLPXqIqe2ijykXuI82kfShYZfiaye5wxEoIBIlwmTtl2IWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs2021n6AtnelOW3gt/+SYX9i8YMB8GA1UdIwQY
MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt
ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2
LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDX9qE8L
rpnN7fYJxbo7H5NHSFQM+efauRbhaoichJv66GS/eiPen9eo0ipDd3/QMYzgw8tL
PCVHT7TvkhrWOpBYBzCvQFcrFLwVTaNS8LNQDdWl9knCfxp0OYvSN8biVlMW5EF7
7jQjuSBcNclJ5FW309LaAhD0LCxBY5r5DDEPxAgzavEjm6oc+7Ffo4yup0lcoYw+
PsTN/RUxZVpvDq5QebuJ4u7c7AupTmQ8QkIgyPzMQuUJCdn64V+OVzpMSkNdCKgy
fXRARbrfjWPv2++ZwBbYg9JSdo//vNO4Tv3vWbbTES+NiV/amzf75nNSc7anYJO0
VIJWtO1vp3OgpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:18 2026 by rpki-client