Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: CvrrtZWM4bvTqpyKKk6P8eykrH1N509zNueyVIGeei0=
Subject key identifier: 9D:54:8E:A6:78:1C:63:7E:94:5D:A1:06:AF:B9:27:9E:FD:2B:94:8A
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019D97AAD37B84817F113250CEA94865E744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 19:00:47 +0000
Manifest this update: Thu 16 Apr 2026 19:00:47 +0000
Manifest next update: Fri 17 Apr 2026 19:00:47 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: 6SCDWHZxzFVIHOcxMqRchr00A+Us28G6cwKpI/3V2dc=)
2: cny5YunWoGOPcvtGZLymBoSxvc0.roa (hash: z2k+kuA2gEPwCUj1PQs/NjdvAeEDMEfFxUJYpvTthlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:d3:7b:84:81:7f:11:32:50:ce:a9:48:65:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Apr 16 19:00:47 2026 GMT
Not After : Apr 17 19:00:47 2026 GMT
Subject: CN=9d548ea6781c637e945da106afb9279efd2b948a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:34:ee:6d:d2:bf:07:d8:5d:5b:77:72:50:
27:45:a7:a7:b5:e0:8e:0f:6d:9b:77:88:cb:5f:c2:
41:09:a8:8f:bf:24:76:95:f1:68:9c:b9:b5:ad:59:
8b:e4:af:08:88:4c:b0:0d:ea:f6:ce:f0:89:28:41:
e8:22:0d:49:2e:ff:e8:1d:e5:ad:97:8d:ba:dc:29:
8c:6d:3c:05:0a:0a:cf:2e:65:6d:e6:a1:b2:ea:d6:
4f:e1:3e:dd:20:07:c2:64:69:c0:54:aa:f5:b6:1c:
9c:2a:a3:f3:9f:c8:11:f6:2e:a6:4b:80:65:59:a8:
78:8e:c3:82:76:29:f1:bb:4f:c3:ec:f3:04:b1:43:
f9:83:45:ff:e2:ea:b1:4f:23:53:f8:61:83:d0:b4:
e3:65:eb:c3:da:eb:e4:9b:86:ee:7f:71:bb:86:23:
72:03:fd:06:e5:81:63:c5:21:3c:c9:79:f7:59:68:
84:2c:05:9a:04:90:d8:0d:02:90:2b:41:af:2c:fe:
3f:d1:48:a3:6d:e5:04:e1:4f:71:f8:e7:23:ed:47:
03:cd:54:58:67:67:2e:44:73:9f:e6:17:36:b0:d7:
fd:92:3f:6d:11:f4:40:53:ea:8b:d6:95:db:91:e9:
3d:9f:38:4d:26:05:bb:b9:de:4a:c7:a0:69:94:20:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:8E:A6:78:1C:63:7E:94:5D:A1:06:AF:B9:27:9E:FD:2B:94:8A
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:f9:b7:87:48:1d:90:76:cc:40:3e:d5:fa:88:9d:8d:51:
14:de:0f:6e:ac:06:7c:d2:cb:f8:44:49:a9:6f:a4:9b:6a:9e:
04:8a:b6:48:2f:58:37:e2:d8:c5:5f:ca:2f:08:3e:21:c2:82:
78:65:2f:46:9e:2f:25:e6:2b:62:78:e8:68:5a:f0:1f:2c:fb:
25:70:ca:d7:8b:ed:b8:f4:29:b5:cd:dc:6f:e5:47:b7:0c:9c:
00:e0:ed:ae:d4:07:76:ac:ac:11:d4:07:47:eb:85:57:71:76:
51:f6:32:ec:6b:87:da:18:87:0b:86:9c:61:ed:23:af:c1:06:
51:1e:ec:9d:4a:b3:58:43:48:5c:17:bc:25:45:97:82:43:ae:
dc:ed:8f:76:e6:fc:a6:2c:92:e8:16:5d:44:04:9e:e4:3f:57:
f7:05:de:ee:62:03:ab:09:05:cc:79:1f:25:e9:9d:fd:5d:5e:
01:1b:9e:2a:0f:ed:bb:91:3b:33:fc:ad:80:f1:8c:56:90:b2:
82:14:84:61:d2:2a:fd:d0:ee:cc:4c:11:38:10:dd:47:a8:a6:
ca:ca:08:f8:14:1b:6f:60:c8:45:84:c3:c2:56:94:34:3a:06:
fa:c3:37:00:65:b2:41:17:c1:ea:dc:58:0d:fe:5f:34:d8:c6:
9f:27:fa:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqtN7hIF/ETJQzqlIZedEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm
NGQxZWUwHhcNMjYwNDE2MTkwMDQ3WhcNMjYwNDE3MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZDU0OGVhNjc4MWM2MzdlOTQ1ZGExMDZhZmI5Mjc5ZWZkMmI5NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEg07m3SvwfYXVt3clAnRaenteCO
D22bd4jLX8JBCaiPvyR2lfFonLm1rVmL5K8IiEywDer2zvCJKEHoIg1JLv/oHeWt
l4263CmMbTwFCgrPLmVt5qGy6tZP4T7dIAfCZGnAVKr1thycKqPzn8gR9i6mS4Bl
Wah4jsOCdinxu0/D7PMEsUP5g0X/4uqxTyNT+GGD0LTjZevD2uvkm4buf3G7hiNy
A/0G5YFjxSE8yXn3WWiELAWaBJDYDQKQK0GvLP4/0UijbeUE4U9x+Ocj7UcDzVRY
Z2cuRHOf5hc2sNf9kj9tEfRAU+qL1pXbkek9nzhNJgW7ud5Kx6BplCBPpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1UjqZ4HGN+lF2hBq+5J579K5SKMB8GA1UdIwQY
MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt
Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx
LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKr5t4dI
HZB2zEA+1fqInY1RFN4PbqwGfNLL+ERJqW+km2qeBIq2SC9YN+LYxV/KLwg+IcKC
eGUvRp4vJeYrYnjoaFrwHyz7JXDK14vtuPQptc3cb+VHtwycAODtrtQHdqysEdQH
R+uFV3F2UfYy7GuH2hiHC4acYe0jr8EGUR7snUqzWENIXBe8JUWXgkOu3O2Pdub8
piyS6BZdRASe5D9X9wXe7mIDqwkFzHkfJemd/V1eARueKg/tu5E7M/ytgPGMVpCy
ghSEYdIq/dDuzEwROBDdR6imysoI+BQbb2DIRYTDwlaUNDoG+sM3AGWyQRfB6txY
Df5fNNjGnyf6KA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:04:21 2026 by rpki-client