Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: WKdNPj7fZMezQVLG73/RL0p9/I6f0CIOsJ8PzammSVs=
Subject key identifier: 1B:0F:2A:A5:7E:C3:68:01:57:F0:BB:39:C7:AF:97:8B:1E:EE:9E:5B
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019D992B8C9D9BAA5FE9DA626F6BFD2B1E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:01:01 +0000
Manifest this update: Fri 17 Apr 2026 02:01:01 +0000
Manifest next update: Sat 18 Apr 2026 02:01:01 +0000
Files and hashes: 1: 1-XW1Sz2PaZ2CH23FH35lEDI1Dvg.roa (hash: OwzM/XrJoESuDpIjRWGFQ9kHnBpSBVpQxsgx+bma9vw=)
2: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (hash: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=)
3: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: RwUHjxh/nKtN9SdAVZNgK9xzqVT45CHKQSi1BapWDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8c:9d:9b:aa:5f:e9:da:62:6f:6b:fd:2b:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Apr 17 02:01:01 2026 GMT
Not After : Apr 18 02:01:01 2026 GMT
Subject: CN=1b0f2aa57ec3680157f0bb39c7af978b1eee9e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:ad:56:35:08:5f:98:fc:a5:b4:ea:0e:f7:
2a:ab:69:47:ce:8a:dd:99:d9:14:f1:32:c0:60:cb:
bf:d6:47:27:56:d2:c1:47:20:5b:8e:98:3b:4f:39:
b4:43:6c:5f:ef:4e:bb:5d:60:75:23:04:e9:90:38:
b0:f5:b6:8b:e5:54:88:e7:69:f5:d1:c8:6c:6b:5e:
5b:e6:ce:ce:4d:26:60:4f:ca:61:89:2a:8b:0d:40:
f1:94:9f:32:87:7b:23:f9:b9:94:f4:f6:a2:4f:e5:
32:d3:73:2a:df:b7:64:01:7e:9a:d7:d3:87:1c:f1:
9a:7e:16:b9:bd:bc:22:4b:82:27:25:51:74:01:7e:
88:25:4a:e0:3c:7a:1e:fc:2e:03:79:60:14:f6:9e:
a9:3c:a3:7c:2d:67:91:d6:cb:31:0c:e3:c2:e8:c9:
7b:7e:77:c4:21:e7:66:ca:66:76:08:6b:79:5b:e5:
02:1a:c7:2f:28:8c:a6:06:33:dc:cf:52:d6:ad:58:
2b:84:b1:4e:85:1b:db:18:4d:10:b1:09:99:f7:86:
b7:76:e1:2c:f1:85:1d:80:29:c8:c9:14:76:f9:9b:
43:9a:fb:99:c6:ec:0d:f6:32:5e:46:15:ac:77:24:
6b:33:35:4f:73:6c:b2:c8:94:ac:5a:50:fa:8e:bb:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:2A:A5:7E:C3:68:01:57:F0:BB:39:C7:AF:97:8B:1E:EE:9E:5B
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4b:df:52:b7:99:17:52:b5:09:8c:00:60:ff:03:52:c7:4f:
26:8f:71:b2:27:4a:65:16:aa:34:bb:f6:73:90:ef:5d:04:eb:
e6:8d:d5:44:30:2b:c7:68:5c:67:43:d1:dc:d7:5a:ac:fc:88:
fe:90:94:5c:1a:b7:49:84:a7:5a:81:5f:29:f2:d5:57:8d:be:
d7:7c:bf:5b:df:34:05:31:bf:27:e6:ce:5f:32:e1:79:32:d9:
07:6e:02:66:c0:ea:79:e6:0c:01:88:d5:a5:de:5c:a3:92:8b:
4b:cd:3d:67:95:0c:24:0f:03:62:04:54:86:d3:1d:ab:8c:5e:
b2:16:8c:0a:8a:4c:26:bf:4b:2d:13:87:23:07:0c:4f:8a:08:
81:89:84:74:2f:47:d8:51:6e:f4:da:52:71:cb:f1:5f:69:28:
04:e2:35:73:5d:af:52:aa:09:61:c4:67:34:26:a1:2d:c6:af:
1f:8d:47:ef:e3:5b:e4:11:36:42:97:c2:d6:8d:90:11:92:87:
84:30:8d:52:52:29:fa:28:bd:6e:c9:fd:96:7c:0b:a5:2e:76:
ac:a5:71:a9:66:22:0a:dc:16:5c:9b:30:56:07:82:c4:24:ac:
b8:ec:65:ea:b0:82:24:a8:20:0c:71:d1:dc:c7:a5:dd:46:17:
04:4f:3d:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK4ydm6pf6dpib2v9Kx4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjYwNDE3MDIwMTAxWhcNMjYwNDE4MDIwMTAxWjAzMTEwLwYDVQQD
EygxYjBmMmFhNTdlYzM2ODAxNTdmMGJiMzljN2FmOTc4YjFlZWU5ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdGtVjUIX5j8pbTqDvcqq2lHzord
mdkU8TLAYMu/1kcnVtLBRyBbjpg7Tzm0Q2xf7067XWB1IwTpkDiw9baL5VSI52n1
0chsa15b5s7OTSZgT8phiSqLDUDxlJ8yh3sj+bmU9PaiT+Uy03Mq37dkAX6a19OH
HPGafha5vbwiS4InJVF0AX6IJUrgPHoe/C4DeWAU9p6pPKN8LWeR1ssxDOPC6Ml7
fnfEIedmymZ2CGt5W+UCGscvKIymBjPcz1LWrVgrhLFOhRvbGE0QsQmZ94a3duEs
8YUdgCnIyRR2+ZtDmvuZxuwN9jJeRhWsdyRrMzVPc2yyyJSsWlD6jrsaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsPKqV+w2gBV/C7Ocevl4se7p5bMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskvfUreZ
F1K1CYwAYP8DUsdPJo9xsidKZRaqNLv2c5DvXQTr5o3VRDArx2hcZ0PR3NdarPyI
/pCUXBq3SYSnWoFfKfLVV42+13y/W980BTG/J+bOXzLheTLZB24CZsDqeeYMAYjV
pd5co5KLS809Z5UMJA8DYgRUhtMdq4xeshaMCopMJr9LLROHIwcMT4oIgYmEdC9H
2FFu9NpSccvxX2koBOI1c12vUqoJYcRnNCahLcavH41H7+Nb5BE2QpfC1o2QEZKH
hDCNUlIp+ii9bsn9lnwLpS52rKVxqWYiCtwWXJswVgeCxCSsuOxl6rCCJKggDHHR
3Mel3UYXBE89BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:23 2026 by rpki-client