Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File: 3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier: QtdQhi26pxyk6O/Cwm0oTuMOUT9nlHu2A6QnXs4uTzU=
Subject key identifier: A3:37:1A:63:23:04:F2:39:F7:CF:2F:F2:03:D6:1E:51:A6:7C:A1:63
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019D9C638D5201689DA0098847B4C01BB69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 17:01:03 +0000
Manifest this update: Fri 17 Apr 2026 17:01:03 +0000
Manifest next update: Sat 18 Apr 2026 17:01:03 +0000
Files and hashes: 1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: nKEx99Es1AsHmZbeapWH/cTxcZz9TCXdBJ5PEUCSARo=)
2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8d:52:01:68:9d:a0:09:88:47:b4:c0:1b:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Apr 17 17:01:03 2026 GMT
Not After : Apr 18 17:01:03 2026 GMT
Subject: CN=a3371a632304f239f7cf2ff203d61e51a67ca163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:1f:5a:22:7c:4a:44:64:25:f2:32:e5:98:
bd:90:7e:22:d3:aa:0d:94:26:90:2b:bd:57:6d:d7:
30:59:5f:52:58:bf:7c:30:cd:43:47:ea:0e:82:e0:
5d:16:fa:1a:01:6e:f0:f4:87:77:3a:ec:24:0b:b5:
2b:2b:b2:7e:09:26:16:52:0e:c5:bb:cf:95:04:dc:
0f:c1:a3:35:69:c4:63:3b:0d:05:12:23:6e:24:ff:
e2:23:51:62:bc:3b:b5:e4:a9:a9:35:f7:23:b0:cc:
f3:db:1b:d8:58:34:6b:d0:b9:4d:5a:7f:41:57:28:
43:9b:cc:64:d1:3c:52:ed:0b:af:ac:e4:87:f8:23:
e2:ff:03:32:f5:8d:bd:de:70:b1:5b:95:f7:42:c2:
b9:43:78:a7:0b:2f:7c:c2:ca:99:6e:e0:9e:da:16:
0e:3e:a5:af:ab:38:db:21:bc:a7:62:ca:92:dd:57:
3c:41:76:91:26:b7:73:38:74:88:12:cc:b7:77:f2:
b5:a8:1b:d9:ed:0d:3e:2d:90:7a:37:1d:10:aa:8c:
f4:8a:2a:bb:c2:c4:26:2a:79:b0:07:96:2b:c7:02:
66:cc:f6:2e:e2:46:1a:e5:20:f3:63:77:c6:ef:88:
fd:e0:98:e4:d9:e8:6e:41:47:d6:1b:6c:a8:7b:07:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:1A:63:23:04:F2:39:F7:CF:2F:F2:03:D6:1E:51:A6:7C:A1:63
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0c:8b:07:99:b7:73:53:9b:56:98:b3:8b:5d:c8:f5:6a:b1:
f4:1c:4f:e2:d6:f3:3b:24:3f:bc:4e:bc:ca:0a:80:de:1b:73:
28:ff:59:71:5f:af:9f:a2:d1:fa:6a:ae:73:d4:60:9d:3e:25:
0d:b2:52:90:03:51:a1:7d:fe:0a:54:7e:44:3f:4c:15:06:c5:
4c:6b:80:dc:34:d7:f0:51:7a:3f:24:99:d7:d2:fd:fe:96:a0:
2d:9d:5e:df:90:2c:ea:00:1d:8f:fa:d6:0d:2c:2e:89:ea:36:
d2:96:51:ee:73:24:8e:da:ad:86:74:55:b8:ff:82:7d:17:d3:
a6:f8:2c:64:b0:c0:a2:33:a9:7b:93:18:61:ce:5d:19:d1:50:
4b:d0:62:b7:f4:b5:a2:e9:cf:a5:78:0a:18:cd:83:27:26:70:
74:30:f1:92:9b:68:54:2b:6e:54:a1:c4:e1:75:c6:1f:07:ad:
ea:c8:02:3f:4d:bf:39:dd:48:9b:b6:bc:44:d1:13:47:7e:81:
f1:f9:5a:75:b9:58:9c:6e:0b:e4:6c:34:66:69:ca:c1:47:f6:
b7:c7:cb:d1:ba:a1:4c:a8:6a:54:ef:e1:47:ed:bf:16:94:4c:
93:07:4b:34:56:cd:00:48:39:a2:c9:e0:0b:02:d8:8c:81:f1:
ae:2d:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:31 2026 by rpki-client