Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier: oU4HJiT95ClS21nK/LJKK5Jl4PgNaX9SeA806TwpuCs=
Subject key identifier: 4A:9E:3D:C4:B1:64:B0:65:F8:A7:6E:C3:33:7A:6E:11:B6:14:4A:54
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial: 019D98BDD17EF6887DC75DA565A86DE537D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 00:01:09 +0000
Manifest this update: Fri 17 Apr 2026 00:01:09 +0000
Manifest next update: Sat 18 Apr 2026 00:01:09 +0000
Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: YGE7UI3+DHsDdpO9NOTFceVhosxBTwpPE/8OhaL2WMU=)
2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d1:7e:f6:88:7d:c7:5d:a5:65:a8:6d:e5:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Validity
Not Before: Apr 17 00:01:09 2026 GMT
Not After : Apr 18 00:01:09 2026 GMT
Subject: CN=4a9e3dc4b164b065f8a76ec3337a6e11b6144a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:34:d1:db:7d:be:f5:2b:d3:0c:3d:bf:b3:d2:
b0:75:98:6e:07:b4:4a:b8:91:80:20:45:18:95:c9:
11:92:3b:1c:85:e9:aa:81:07:37:b9:37:3c:12:b4:
a9:4d:78:af:e4:3f:6a:b7:29:87:b9:2a:56:7d:b3:
e3:1e:88:c6:01:f0:69:c1:e7:d7:6a:3a:8c:62:e3:
07:ce:67:10:99:87:70:95:14:86:ae:29:32:09:e6:
62:cc:be:72:c5:26:4e:e5:de:64:73:4f:37:5c:8f:
de:1f:1e:1e:62:58:3d:0b:92:95:48:84:38:3e:7f:
ea:ca:c9:1f:a3:c7:84:af:a3:64:36:23:8e:82:82:
65:58:93:bb:cd:ba:c5:f3:46:1a:cf:62:f1:f7:2c:
9c:2a:8c:9c:ff:32:de:73:91:7c:78:71:bd:06:8d:
d2:78:61:69:e9:ef:bc:91:8a:b6:08:91:f8:12:c2:
cd:c5:63:f6:e5:d2:e8:bf:52:27:54:9f:d7:72:ef:
14:fb:b7:97:12:43:8e:54:c8:2c:75:82:9c:36:ec:
25:79:e3:62:d8:4c:50:07:a5:51:a0:f5:31:5e:a8:
d7:99:e1:87:06:d6:6f:f5:f3:79:3a:16:7c:01:c4:
e1:d7:d7:9c:d0:95:5d:a3:57:83:e5:5e:d3:aa:2f:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:3D:C4:B1:64:B0:65:F8:A7:6E:C3:33:7A:6E:11:B6:14:4A:54
X509v3 Authority Key Identifier:
keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:86:73:3a:62:40:d2:7c:bf:53:b6:5d:31:d9:3e:91:09:2a:
7d:ff:b1:e1:5a:e3:a7:47:5e:86:80:a8:cc:75:29:83:e3:48:
ea:35:37:14:3d:25:7d:ce:da:d6:29:93:66:46:23:b0:c8:ed:
dc:7d:85:e0:e6:69:8a:a6:c0:ec:6f:a5:24:0c:85:e4:e0:cf:
e0:00:4d:ed:f9:ab:b8:b5:ed:d5:d5:7f:ee:62:5d:50:4c:77:
2a:7f:c5:ed:96:98:07:d4:6e:17:d2:2f:e0:a6:20:67:14:5b:
48:89:44:cf:24:9f:dc:fc:cc:7a:3f:b3:c1:84:31:9f:54:65:
f8:3d:4a:53:ec:83:b1:da:8f:c5:bb:15:f8:ea:a1:79:54:05:
3a:1e:51:e3:96:4b:c4:6a:5d:1d:c6:65:21:3b:e9:1f:49:d9:
77:e3:ba:9f:fa:2b:47:0b:59:5a:8a:1e:cf:ca:53:13:ac:6a:
8a:71:10:d7:7b:ba:dd:4b:a6:a0:3e:f3:53:be:91:ce:69:d6:
d1:74:40:19:0c:1f:a7:d9:fb:2b:51:60:f2:d5:50:67:cd:72:
33:7f:f5:b4:e9:9d:8e:1a:07:4e:f2:3e:df:65:2e:6b:05:95:
f5:57:f8:b7:bf:47:a7:de:16:1d:19:84:3b:aa:64:16:c5:26:
e5:10:d8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvdF+9oh9x12lZaht5TfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5
ZWQ0NDgwHhcNMjYwNDE3MDAwMTA5WhcNMjYwNDE4MDAwMTA5WjAzMTEwLwYDVQQD
Eyg0YTllM2RjNGIxNjRiMDY1ZjhhNzZlYzMzMzdhNmUxMWI2MTQ0YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTR232+9SvTDD2/s9KwdZhuB7RK
uJGAIEUYlckRkjschemqgQc3uTc8ErSpTXiv5D9qtymHuSpWfbPjHojGAfBpwefX
ajqMYuMHzmcQmYdwlRSGrikyCeZizL5yxSZO5d5kc083XI/eHx4eYlg9C5KVSIQ4
Pn/qyskfo8eEr6NkNiOOgoJlWJO7zbrF80Yaz2Lx9yycKoyc/zLec5F8eHG9Bo3S
eGFp6e+8kYq2CJH4EsLNxWP25dLov1InVJ/Xcu8U+7eXEkOOVMgsdYKcNuwleeNi
2ExQB6VRoPUxXqjXmeGHBtZv9fN5OhZ8AcTh19ec0JVdo1eD5V7Tqi8fhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqePcSxZLBl+KduwzN6bhG2FEpUMB8GA1UdIwQY
MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt
OTNjNjQ1N2NhZjMzLzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz
LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIZzOmJA
0ny/U7ZdMdk+kQkqff+x4Vrjp0dehoCozHUpg+NI6jU3FD0lfc7a1imTZkYjsMjt
3H2F4OZpiqbA7G+lJAyF5ODP4ABN7fmruLXt1dV/7mJdUEx3Kn/F7ZaYB9RuF9Iv
4KYgZxRbSIlEzySf3PzMej+zwYQxn1Rl+D1KU+yDsdqPxbsV+OqheVQFOh5R45ZL
xGpdHcZlITvpH0nZd+O6n/orRwtZWooez8pTE6xqinEQ13u63UumoD7zU76RzmnW
0XRAGQwfp9n7K1Fg8tVQZ81yM3/1tOmdjhoHTvI+32UuawWV9Vf4t79Hp94WHRmE
O6pkFsUm5RDY6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:03 2026 by rpki-client