Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: CB5X4SMuPn43v4LixbspDsTu7mS7Q9dvtkhfo0eMSwc=
Subject key identifier: 4D:74:15:CC:2B:01:59:4F:EB:06:76:14:0D:49:BA:C6:0F:2B:23:78
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019D99D09FE3294021817AEDC5651F636284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: 7E7fvvHOomgRyKfA0P6RQWignOpSy75AYcpekyjkaSg=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: CcbOPSFowzuVmbQQQVUT4gQZao4.roa (hash: QoVwdK39dtT9IvoLSexiLLdImyTyxwcjHq7QNn6fGOA=)
6: Nmra5MQ90P6ykkpupDiPaVY1kco.roa (hash: iXU9Ga0vhV6ku1r3OaZ+HmJepE5UeaNFpriSH+GfUVo=)
7: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9f:e3:29:40:21:81:7a:ed:c5:65:1f:63:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=4d7415cc2b01594feb0676140d49bac60f2b2378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:99:f3:78:7f:a2:6d:0b:e7:75:69:1e:bf:
10:ff:6a:dc:a9:3b:ee:53:8f:70:5f:49:0f:f0:32:
be:31:d8:e6:20:1e:89:80:92:4f:c2:4b:d0:aa:39:
9a:2f:c6:80:ee:7f:ce:4b:f0:c7:99:ee:45:36:49:
85:80:8a:37:dd:e3:85:70:38:ad:76:2e:c0:79:71:
3b:9e:3c:8c:47:03:8c:5c:7e:63:17:59:3d:b4:f6:
69:93:4c:20:22:53:be:6a:cc:c1:c9:63:44:b2:34:
21:66:4e:ef:8b:6e:27:09:4e:16:67:a0:ad:d2:98:
99:11:a6:7e:14:0e:62:a2:18:76:68:cd:b7:ab:bb:
27:29:11:30:3f:2f:ff:99:3f:1f:d3:31:19:d1:38:
c1:ea:40:2e:ce:80:75:eb:fa:14:99:30:f0:d1:1d:
18:e4:7a:4b:ab:46:cc:8a:d3:c3:32:57:45:e7:72:
83:ea:a2:cd:a0:e8:22:70:64:cf:d1:78:30:94:7b:
37:57:0b:8a:78:6c:2d:48:58:f3:e1:42:35:03:ad:
b7:1e:f4:29:6b:ad:6b:19:5e:b8:2f:50:fe:52:1f:
a7:7c:2b:6b:94:90:02:8d:5a:81:b9:6f:18:79:22:
87:2a:9f:e9:98:d0:2c:e7:1c:f4:81:8b:37:f0:69:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:15:CC:2B:01:59:4F:EB:06:76:14:0D:49:BA:C6:0F:2B:23:78
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:77:23:56:5b:24:e8:43:3e:cf:9b:aa:9f:6f:24:e5:9b:f2:
4d:d1:3c:0d:2c:5b:22:80:6d:86:cc:99:4f:9f:94:d2:0f:ed:
d0:73:90:5a:86:c4:e9:e9:4c:24:14:8d:34:b7:b8:a4:2a:70:
d1:b9:bf:08:4b:22:a3:d7:3f:16:4d:19:0d:1d:82:79:83:b2:
bd:89:83:07:dd:50:6f:fe:fb:12:18:18:f9:86:08:71:d0:17:
81:79:cf:d8:da:3e:29:0b:cb:6a:19:79:ca:cf:bb:b9:ba:60:
96:bd:e3:fb:57:9b:fe:8e:4a:f7:db:76:93:a6:e3:a0:fb:bd:
c3:17:43:d3:66:a6:d9:40:68:b3:c1:5e:1a:c2:c2:2e:c7:48:
d0:20:80:e8:fc:4f:cd:ec:c2:8d:10:1c:75:1e:d0:fb:fd:6a:
dd:b3:af:b1:ce:47:8b:a3:21:60:da:06:52:ea:ca:2d:b2:7e:
ae:d0:df:96:9a:e2:ed:40:b7:ee:54:85:b2:98:fb:31:22:ce:
1f:6a:f1:a1:ad:60:34:77:23:c0:6b:2c:1d:0e:4e:00:9e:0c:
59:04:85:34:5c:15:5e:1d:44:b8:d5:8c:99:45:97:61:96:d7:
04:1f:25:af:74:4e:11:96:aa:bb:5a:de:c1:fd:73:74:45:50:
0f:7a:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:18 2026 by rpki-client