Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: k8BQswZe6IavlFi+e08yK9qjzXgSxGVS0prZFKPXZD8=
Subject key identifier: 49:90:27:5B:EC:4B:F3:88:3E:74:75:45:65:02:14:02:96:C4:9A:7A
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 019D9A750142B7FF688A244F05A970A76106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 093A
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: HGPTU+V/7+EKW1Y40aqMRRyUSvOsijcdSEgAIN/YRPE=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:01:42:b7:ff:68:8a:24:4f:05:a9:70:a7:61:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=4990275bec4bf3883e7475456502140296c49a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:6c:92:16:9e:27:34:30:3f:fd:1c:bc:71:
b0:89:1c:fb:9e:aa:70:08:03:96:0d:27:25:a8:c5:
41:59:3c:c9:83:c5:29:7e:20:bd:d4:d7:b9:1a:6c:
9d:19:c1:51:13:88:6b:6d:17:9e:30:34:9a:20:b7:
60:39:65:b0:1f:aa:99:fd:fb:01:28:1c:d6:77:2b:
6a:96:51:78:c6:9e:74:c4:82:4c:f2:d2:cb:bc:e1:
aa:1f:2b:cc:91:6e:e8:ac:a5:05:15:d1:fb:96:2d:
3f:ac:79:01:eb:3c:0d:e0:32:2a:36:bd:ae:b3:1f:
cf:10:43:b8:3f:b4:51:53:4a:e4:6a:f7:e9:33:ac:
01:95:68:e9:e4:af:24:72:01:e5:94:9e:85:f8:d8:
b3:47:0d:77:05:b9:cf:0e:aa:a9:93:c3:5e:80:48:
a8:b0:b3:48:f6:51:1c:32:dd:a8:06:cd:da:b0:e4:
1b:4e:9f:d1:f2:47:90:10:d4:71:92:7b:50:90:c0:
2b:1a:ad:b2:fd:25:81:a1:0e:c7:1c:90:08:e1:45:
e9:9c:9e:f8:85:ae:3c:7f:67:2b:37:94:4d:b5:3a:
1d:ce:8d:01:41:ea:f3:c6:90:4e:5e:74:44:09:46:
df:09:7d:54:0d:38:0d:ca:bb:68:d3:92:a9:c2:86:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:27:5B:EC:4B:F3:88:3E:74:75:45:65:02:14:02:96:C4:9A:7A
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a8:9a:27:be:b6:d5:54:b8:54:32:69:0d:76:79:db:68:72:
5c:c6:24:7c:65:85:d2:ee:19:6d:d9:0c:36:72:94:10:b5:47:
33:28:9b:a0:01:c8:3e:94:59:40:ca:18:94:ce:0e:b8:2e:54:
cd:5a:e7:97:0a:78:e1:fd:2b:91:cd:38:4a:e6:ee:56:85:20:
8c:21:4d:12:e6:bc:12:b3:41:12:6d:af:50:46:24:3f:b7:f3:
51:73:c1:4c:dd:5c:9f:f4:67:6f:b0:ff:e7:ab:a7:9f:fd:5e:
04:56:cb:4e:60:a7:d6:d8:de:2b:74:17:85:e3:19:d7:98:2c:
0d:e0:20:98:f8:2b:e2:c7:1a:76:40:5e:2c:d1:59:90:04:96:
70:36:9b:83:15:9c:dd:0c:e9:4c:84:b8:3f:e8:4d:e2:56:ee:
57:8c:6a:66:3e:f9:ac:b2:9c:d7:82:1c:f6:b4:8c:7c:a0:fe:
28:58:6a:a1:d1:a5:ce:13:6c:15:2f:17:b2:ae:20:fd:27:04:
fc:0f:a3:ca:5b:f2:7d:8b:d3:1c:95:6a:cb:31:5b:a0:4e:f5:
73:5a:e0:87:d7:0d:01:ed:1e:4a:f9:a8:bf:e2:c8:47:26:90:
91:37:5f:d2:d8:a2:8c:d9:c6:d4:88:75:a0:bb:f3:77:8e:55:
9a:0a:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:19 2026 by rpki-client