Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: krkZeCtY83YwTR21o8cNQdV62vH11sSwqb2X99uNV7Y=
Subject key identifier: 42:CB:B1:18:9B:4C:5D:C2:2F:9B:9D:59:97:6A:20:D5:3D:66:28:09
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019D99995AFA4A1FC0283A82EC316E694350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0F56
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: R1fgTtKeZJHo0U4Pfo3OpR805hAKZHw7KakuC1WwHTA=)
2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5a:fa:4a:1f:c0:28:3a:82:ec:31:6e:69:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=42cbb1189b4c5dc22f9b9d59976a20d53d662809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:16:49:13:5f:47:58:1d:b3:bd:09:7e:73:
f6:97:22:18:49:4f:b3:1b:45:f0:b6:d0:75:3b:58:
fd:56:fb:29:35:0f:10:a1:c5:c1:e4:28:ac:5b:f8:
4b:eb:ed:ea:6e:96:0e:b1:0c:cd:b4:fe:eb:59:76:
ed:c4:aa:4e:03:a2:80:1f:a5:46:a3:a5:d8:94:b6:
74:6c:8f:64:dd:4d:c1:82:90:f4:84:b8:ee:8c:52:
8b:fd:30:a1:e3:bf:9f:23:8d:19:0c:69:80:f9:80:
38:e9:3c:12:31:d8:72:9c:66:e1:a5:5d:f5:1e:63:
f8:b8:7c:85:4b:fa:25:be:88:d4:87:4e:ac:54:eb:
3a:d2:a7:63:42:d4:7c:e4:18:b1:62:1c:fa:a7:79:
bc:69:a7:a4:d8:96:93:c2:44:b7:e5:5c:79:d5:d6:
a5:fe:48:fb:75:90:e4:c8:34:f2:45:51:06:0a:17:
6c:bb:8a:c9:59:34:cc:61:35:7c:d6:c7:0a:45:46:
a7:89:77:57:41:16:b1:9a:39:a7:a4:64:9c:65:b4:
cb:a6:f0:60:f3:60:20:95:9f:53:59:7f:e3:0c:cf:
56:10:18:42:a2:c8:11:1b:02:0f:c0:86:90:11:7b:
51:6c:99:28:8e:93:8e:2c:3e:66:a7:1c:9e:6c:f1:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:B1:18:9B:4C:5D:C2:2F:9B:9D:59:97:6A:20:D5:3D:66:28:09
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:41:d3:01:0f:f4:fe:00:e1:fe:21:24:28:64:b9:19:a6:d2:
06:84:bd:ba:06:0b:33:62:2d:8b:e2:6d:3d:27:e1:9e:1e:bc:
3c:40:36:e8:15:fa:c1:85:f0:c9:c4:bc:fa:43:00:c6:e1:74:
1e:22:6f:08:5c:bf:ed:90:e2:30:ab:e7:7e:ef:d5:fe:02:2a:
37:a8:3e:4e:df:fa:0b:45:4c:89:16:0d:21:e1:f8:1d:38:14:
b3:40:7c:5f:e7:b5:ef:38:5b:7b:ec:83:b8:0d:5d:14:a3:95:
2a:52:f1:77:20:36:27:46:cb:01:39:68:35:1a:14:0c:5b:cc:
80:1c:a8:52:2e:ec:4b:74:71:57:cd:ac:f3:0b:f4:32:e4:6d:
4c:b3:b1:11:4d:3f:14:25:2b:e7:eb:dc:81:4b:ea:f8:60:8f:
38:c5:ea:92:0c:e7:d4:f8:e1:e3:92:6c:6f:8e:ba:e5:69:ce:
41:d2:f4:5d:c5:9c:f7:f1:a9:1c:70:49:b2:57:9b:d7:25:12:
5f:d9:12:e8:38:6d:cd:f2:54:e3:12:3a:33:7f:db:62:3e:51:
40:c7:bf:1d:3b:e0:6f:18:be:19:92:5b:95:76:99:9a:f1:37:
b1:9e:1d:b6:ca:13:78:57:4c:bc:d0:e8:f2:6c:31:0f:20:e3:
2f:33:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:47 2026 by rpki-client