Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: q8SEYKIiLLK84j3sraEOUTEg+7Pt2Kl1M+WgufxPu5s=
Subject key identifier: E7:0B:67:E6:A8:E6:34:63:32:C7:A0:12:E6:04:14:79:3F:74:75:28
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 019D99D07146DDB5B8B3F2CB98B99C062E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1276
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: PUcCYtr42cxfrpzW16+BV8nOzCuHS9E1Pnwv9VDP+j8=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:71:46:dd:b5:b8:b3:f2:cb:98:b9:9c:06:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=e70b67e6a8e6346332c7a012e60414793f747528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:2a:33:97:f4:83:dd:52:84:55:4b:1e:35:
6e:b7:ce:91:91:a0:33:d5:e4:64:be:a4:83:eb:e4:
c9:5c:c1:74:87:ae:d6:00:4a:10:b2:9a:e0:7d:00:
99:91:81:63:2f:d4:84:71:e8:99:33:bd:2e:99:35:
12:af:33:80:5e:12:5c:8f:67:a7:25:95:81:b4:5f:
17:41:6f:7f:d4:70:dd:1f:0b:cf:40:1e:49:80:33:
6d:fe:21:4d:b0:60:d4:6d:8b:eb:a3:ae:03:94:b8:
90:50:bb:c2:95:d0:b5:6a:16:6b:f1:d5:f8:37:ba:
20:f1:62:9e:ef:ed:5c:b0:79:d8:f3:57:8a:08:d8:
a7:e5:37:82:29:47:2f:a8:fe:fd:9a:8d:ff:6b:b3:
0f:d0:98:01:b6:8b:85:8f:24:4d:28:4b:a3:62:cb:
18:9d:be:59:e0:da:7a:e0:13:4f:30:aa:0e:33:52:
9a:e0:6d:43:c2:ed:b2:e0:ee:0d:78:8b:56:d8:74:
d7:52:12:a5:08:39:5e:67:a4:c1:d8:05:f3:60:d6:
ac:ea:57:69:cc:31:79:42:6a:9a:e1:28:c7:85:cb:
c4:7a:2a:fe:6a:b8:10:d0:77:46:1b:76:38:3a:31:
e7:eb:c1:c6:cd:4d:bc:23:dd:5c:9d:0f:3a:cd:61:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:67:E6:A8:E6:34:63:32:C7:A0:12:E6:04:14:79:3F:74:75:28
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:50:9e:6f:bb:b4:ed:40:8e:64:b7:67:ea:3d:5d:f5:32:88:
67:ce:12:9a:6c:82:2d:31:1c:06:08:23:73:bd:23:0c:79:8f:
8c:e1:21:cb:a4:b0:01:34:e6:28:6c:ad:fd:32:ec:8a:9e:9b:
48:da:fd:1c:b3:81:e0:84:33:4c:d3:ac:21:bd:89:ff:51:f6:
43:87:30:6b:23:ed:da:bf:ec:c6:6d:3b:8b:e6:3d:12:85:99:
1a:f2:5e:d2:a0:4b:57:92:1c:0e:a1:c6:81:94:de:6e:7c:f1:
5d:f2:a0:c1:50:aa:0d:ee:18:53:e5:89:5d:d0:0b:32:89:31:
d5:d3:23:ea:6b:83:0b:ff:5a:5b:83:d3:e0:82:ab:46:fb:0f:
20:48:05:41:24:d7:4f:a4:98:77:d8:6c:b1:02:d3:11:ce:6b:
d0:cc:ae:a1:87:72:54:f4:3a:a3:6b:51:02:94:81:58:45:a0:
80:4c:b7:ff:75:8a:32:83:63:36:50:cc:4f:4b:95:57:96:c1:
ec:54:2d:14:92:89:ee:80:77:96:96:cb:8d:fd:fe:62:7b:b3:
4e:77:3f:5e:e0:91:1f:a9:fa:6e:b9:1d:dc:f8:7e:64:81:b8:
f7:67:6e:c8:4d:a7:c8:69:52:13:e2:7b:e8:1c:ca:7c:a3:02:
0b:a0:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:56 2026 by rpki-client