Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: 4KZdraIP+pRqTvFRQwCLc9PYDde9UQWc0QqUFd/7XZQ=
Subject key identifier: 61:98:A3:A4:AB:28:FA:2B:B8:09:CA:D8:59:90:62:E4:DC:61:FB:63
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 019D97AAE8ECBF5E9B114ACA4B22A4979D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 1597
Signing time: Thu 16 Apr 2026 19:00:53 +0000
Manifest this update: Thu 16 Apr 2026 19:00:53 +0000
Manifest next update: Fri 17 Apr 2026 19:00:53 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: 7q6BUw2ShscVK3wvec4f668EOkD2htX+5rldFY67UGg=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e8:ec:bf:5e:9b:11:4a:ca:4b:22:a4:97:9d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Apr 16 19:00:53 2026 GMT
Not After : Apr 17 19:00:53 2026 GMT
Subject: CN=6198a3a4ab28fa2bb809cad8599062e4dc61fb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:b6:c3:5a:d7:6f:65:14:38:6c:4d:f6:65:
be:e4:a4:ba:40:ec:0f:8a:be:00:b5:a3:78:dc:a1:
ad:5c:99:95:ed:8c:26:9b:4d:67:99:e6:db:6b:46:
09:d4:be:10:2b:95:a4:dc:66:d3:f5:72:c8:4f:b5:
58:94:ac:38:66:e6:09:7a:00:ab:a4:0c:be:34:c6:
e2:89:bd:e7:bd:3a:94:c6:77:09:ab:5f:5d:80:66:
00:ae:c8:2e:d5:87:55:cf:4a:01:18:05:79:d7:4a:
32:67:29:77:e7:3d:9e:2a:61:48:5f:cb:69:6d:5e:
c7:a8:9d:2d:7d:86:b7:40:46:50:4a:c9:bf:a5:d0:
99:44:8f:a0:92:a4:60:ff:8e:98:b4:eb:a9:ce:16:
c4:55:ec:87:b0:f6:6e:3a:24:8f:f8:ac:db:df:3f:
38:c1:60:2a:b6:7e:14:d6:c0:73:fe:f9:49:b9:e7:
16:38:e5:c5:e1:21:1d:37:4d:ed:bf:d9:f2:04:eb:
72:15:ae:0e:78:c5:7a:a1:59:a7:f4:fb:eb:b3:e2:
7d:87:9b:6e:5a:da:f9:8b:ee:7e:a9:d0:e2:3a:a2:
c9:6c:36:cd:d2:3f:0e:84:89:33:c5:31:0c:b8:8b:
03:9c:47:ea:9a:e9:5c:83:88:83:01:24:8b:85:09:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:A3:A4:AB:28:FA:2B:B8:09:CA:D8:59:90:62:E4:DC:61:FB:63
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:ad:0c:75:07:89:3e:8a:2e:aa:9f:c7:c8:ad:ac:86:9d:
08:33:8a:4a:b9:e7:5d:7f:91:d7:67:2f:3e:a9:7d:62:20:68:
4f:9d:47:30:95:d6:51:82:75:bb:e0:75:ec:a3:44:09:2c:7b:
83:ed:b0:05:27:fd:cb:c0:29:2d:7f:c7:b2:53:96:a1:84:e0:
d4:43:c1:e1:54:60:52:2f:7e:0b:7d:af:73:11:32:0c:77:1e:
95:9c:d2:d7:22:0a:ae:62:df:a5:7d:06:a9:e3:ba:84:e1:7e:
32:a4:6c:cd:74:ff:40:aa:4f:41:6b:7e:48:9c:a9:55:15:ad:
b6:c4:9f:d6:bd:7b:25:f5:eb:e9:53:72:10:c7:49:6f:a1:46:
47:88:6e:19:38:a9:1e:52:9d:51:c7:b4:0b:b2:c8:39:23:d6:
fe:b2:22:ed:13:80:14:7a:6c:40:5e:75:5f:90:30:01:1b:3a:
47:52:16:77:87:08:f1:15:d1:ce:32:66:9a:29:58:5f:ed:29:
b7:85:0b:a3:1d:c9:64:9e:95:48:15:00:9d:02:b0:77:f8:11:
36:d0:2f:18:9c:74:54:81:d4:e8:4e:51:53:73:7a:d3:a1:2e:
59:2f:5a:97:75:4f:32:3c:61:a6:a6:82:8f:b0:fe:0e:76:bb:
68:27:cf:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqujsv16bEUrKSyKkl51VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj
NzNhZmYwHhcNMjYwNDE2MTkwMDUzWhcNMjYwNDE3MTkwMDUzWjAzMTEwLwYDVQQD
Eyg2MTk4YTNhNGFiMjhmYTJiYjgwOWNhZDg1OTkwNjJlNGRjNjFmYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln22w1rXb2UUOGxN9mW+5KS6QOwP
ir4AtaN43KGtXJmV7Ywmm01nmebba0YJ1L4QK5Wk3GbT9XLIT7VYlKw4ZuYJegCr
pAy+NMbiib3nvTqUxncJq19dgGYArsgu1YdVz0oBGAV510oyZyl35z2eKmFIX8tp
bV7HqJ0tfYa3QEZQSsm/pdCZRI+gkqRg/46YtOupzhbEVeyHsPZuOiSP+Kzb3z84
wWAqtn4U1sBz/vlJuecWOOXF4SEdN03tv9nyBOtyFa4OeMV6oVmn9Pvrs+J9h5tu
Wtr5i+5+qdDiOqLJbDbN0j8OhIkzxTEMuIsDnEfqmulcg4iDASSLhQnt1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGYo6SrKPoruAnK2FmQYuTcYftjMB8GA1UdIwQY
MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt
YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw
LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNitDHUH
iT6KLqqfx8itrIadCDOKSrnnXX+R12cvPql9YiBoT51HMJXWUYJ1u+B17KNECSx7
g+2wBSf9y8ApLX/HslOWoYTg1EPB4VRgUi9+C32vcxEyDHcelZzS1yIKrmLfpX0G
qeO6hOF+MqRszXT/QKpPQWt+SJypVRWttsSf1r17JfXr6VNyEMdJb6FGR4huGTip
HlKdUce0C7LIOSPW/rIi7ROAFHpsQF51X5AwARs6R1IWd4cI8RXRzjJmmilYX+0p
t4ULox3JZJ6VSBUAnQKwd/gRNtAvGJx0VIHU6E5RU3N606EuWS9al3VPMjxhpqaC
j7D+Dna7aCfP9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:07 2026 by rpki-client