Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: nkM/dgOW2R42O/q3d9IE1gaNU0br7eUrSppAsjkpz+M=
Subject key identifier: 30:3D:D6:C3:78:6D:C2:91:7C:6D:44:85:B9:C7:5B:92:29:3D:44:A3
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 019D9C9A371EC8B6263BBD9F5859B02DBB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 18:00:45 +0000
Manifest this update: Fri 17 Apr 2026 18:00:45 +0000
Manifest next update: Sat 18 Apr 2026 18:00:45 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: kB34PY4tztNvygr/bWFq11elq4zwIczxVFEaDhY6Iek=)
2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:37:1e:c8:b6:26:3b:bd:9f:58:59:b0:2d:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Apr 17 18:00:45 2026 GMT
Not After : Apr 18 18:00:45 2026 GMT
Subject: CN=303dd6c3786dc2917c6d4485b9c75b92293d44a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:17:c9:61:f7:a4:8d:82:a1:34:4b:c6:cf:
5f:17:e7:28:57:9a:4a:a7:56:f7:66:8d:42:4c:73:
1a:63:83:1e:e5:24:b5:92:5a:8f:11:60:4a:a5:8f:
f9:43:49:fb:c5:71:9a:35:c4:2e:7e:67:e5:7e:25:
a9:82:91:83:f3:56:6b:06:ba:13:05:c0:e3:df:c8:
ab:8c:55:8a:4a:f0:7b:14:e6:91:ac:75:50:97:a7:
5e:eb:fa:4d:7d:a8:b3:e7:2e:24:05:c2:ee:e2:a7:
e7:ee:0d:96:9a:01:30:18:f3:6e:33:29:1a:38:7e:
4e:3a:b2:99:ef:a5:df:a6:a0:78:31:66:74:df:ea:
2a:b3:b6:b0:e0:16:2f:0b:22:87:c5:c2:f5:4e:a3:
a1:2a:27:f5:c5:6f:07:71:2a:ea:ce:dc:c7:88:8e:
bf:52:41:12:3f:19:7f:54:18:80:ce:fe:91:0a:9c:
0b:7a:36:23:d3:08:0d:b8:bc:5a:b8:41:97:91:39:
61:47:ba:69:50:16:57:08:b4:85:12:36:a5:8f:f8:
a5:bb:95:85:43:80:3a:9c:d7:ab:e7:3d:61:f7:91:
cc:16:8f:76:89:3d:f4:c6:af:bf:2a:73:bb:9b:f4:
91:6a:3e:de:99:25:bc:25:b4:e0:bd:2a:68:7e:90:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:D6:C3:78:6D:C2:91:7C:6D:44:85:B9:C7:5B:92:29:3D:44:A3
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3c:bf:9c:d1:48:6b:6b:87:0c:dd:f1:7d:15:88:00:22:31:
aa:f4:88:d8:12:7d:84:17:47:e3:b4:fd:19:30:b8:1c:eb:d7:
50:d1:7f:14:48:a7:c2:7e:be:1b:ac:6a:1c:40:f2:f2:e2:2f:
2d:74:57:c8:63:81:13:6d:c5:48:d5:99:81:42:54:a8:6f:f5:
a7:90:e7:03:a0:0a:9b:cd:fc:ed:3d:db:1f:d6:0c:25:36:f2:
78:3e:40:1f:a0:c2:86:35:fa:fc:23:47:f8:a1:05:53:ad:8f:
a6:cf:4c:76:9f:b1:1d:34:5d:ce:bf:52:76:3e:56:8e:f2:01:
d9:f4:9f:8a:85:c1:91:2e:3f:60:8d:65:16:b5:69:2e:21:20:
22:ed:3c:f9:46:77:66:3e:91:70:5b:27:30:ad:84:85:1f:da:
94:46:60:a4:cd:cd:f2:69:33:a1:ef:5c:22:2c:94:9e:73:92:
b7:a7:88:e3:62:df:e1:ca:b9:95:fe:6b:30:41:70:9b:51:b8:
91:da:94:41:a6:98:6e:12:00:c9:9f:da:6c:b8:ab:d4:c3:54:
8c:2b:2a:33:42:9c:10:02:d1:b8:e9:04:42:c2:05:85:9e:ba:
2b:04:18:6d:33:a8:7d:87:2b:72:21:c4:0b:19:22:a9:1f:08:
c2:3f:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:31 2026 by rpki-client