Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 5Lzy4dvaCyfZv0qczvJ7GSPgcvAoY44bGSclQI2sSSQ=
Subject key identifier: 19:07:06:EB:1F:F1:C7:38:3D:64:EA:F9:17:24:4B:22:43:F9:77:9C
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019D9B8776E6C340C74A61C75326EFCAE298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 13:00:39 +0000
Manifest this update: Fri 17 Apr 2026 13:00:39 +0000
Manifest next update: Sat 18 Apr 2026 13:00:39 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: YMgla+0HrmrVWgWL+3GoBsj7u5axvP/x6hNvly/BwoE=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:76:e6:c3:40:c7:4a:61:c7:53:26:ef:ca:e2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Apr 17 13:00:39 2026 GMT
Not After : Apr 18 13:00:39 2026 GMT
Subject: CN=190706eb1ff1c7383d64eaf917244b2243f9779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:a6:fd:af:21:10:23:45:03:52:dc:96:2f:
67:2f:1d:5e:b6:f1:83:7c:6f:d9:e9:07:74:7d:86:
da:59:c5:ed:9f:29:7d:3f:ab:9b:bf:16:e4:14:d4:
ef:0a:e6:dd:d1:0b:e2:57:8e:0e:da:6e:9b:a1:2d:
45:f9:8c:11:a3:d5:35:d2:13:52:d9:d1:61:9a:0f:
57:b2:d4:c9:6e:22:18:22:b3:1e:8d:05:7e:ee:70:
14:36:56:9d:b8:d6:2b:c6:ba:ba:ee:60:e3:90:29:
02:4d:30:a9:6f:9d:eb:be:6b:7a:57:f4:f4:e7:22:
27:34:0a:34:42:73:c3:2a:84:97:c9:51:5b:15:c8:
24:9f:a4:0b:f3:20:0a:46:0c:21:9e:55:94:c8:e1:
34:f9:5d:e4:9d:d0:bf:14:00:fb:1e:26:cc:fb:f0:
f5:76:20:23:fd:50:e0:1d:6e:6f:6b:44:8f:90:15:
77:54:c3:ee:bd:d2:80:01:50:9c:e4:20:cb:15:09:
c4:62:94:97:69:2b:16:8a:17:c4:ac:f9:e4:c6:90:
86:30:78:a0:e3:34:2e:46:be:5b:e0:eb:56:3c:0d:
ff:ee:b6:b0:a9:91:73:b9:8c:f7:25:51:c8:d6:85:
ca:60:4f:9f:a2:8c:14:2d:19:4f:30:d1:d4:3d:2d:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:06:EB:1F:F1:C7:38:3D:64:EA:F9:17:24:4B:22:43:F9:77:9C
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:f2:31:71:93:1d:73:04:96:f5:f7:53:c9:c6:c9:1e:27:
a4:e7:60:87:6d:8d:12:00:b9:78:0e:de:56:47:0d:de:d1:ff:
44:fc:93:f4:9b:d6:68:da:d1:94:9e:06:b5:01:4f:86:4f:18:
6e:75:08:4a:c8:0a:45:ca:02:b9:e7:0d:06:8a:46:d6:73:23:
dd:fe:72:b6:89:54:5a:80:d9:7f:38:3c:d2:d9:85:b9:6b:2b:
18:20:62:0a:e5:24:82:e5:49:ea:85:83:8a:56:45:a5:7e:4a:
5d:6f:50:5e:a6:fd:bf:8f:6d:7a:6c:e1:dd:c8:16:7d:75:c3:
1c:44:48:c2:6d:10:ba:37:7e:4c:a5:a5:c6:c2:dc:a1:56:22:
f9:a7:de:ea:26:cc:77:49:ee:76:3d:c7:e5:b4:68:5b:28:50:
7d:fe:54:bf:97:cd:9f:a7:27:e9:57:be:85:ce:a8:70:4d:3a:
57:0b:57:e3:ca:96:4b:08:e9:b1:2a:3f:ad:94:7e:b0:8a:33:
fa:66:d6:20:ec:f7:1d:6e:0a:30:e5:a0:cb:f3:45:d1:f2:7c:
e7:8c:ce:fe:dc:4e:62:76:04:fa:f8:63:18:b5:ce:24:af:dc:
7f:56:3a:40:33:26:b6:d4:49:39:a6:0b:79:33:16:bf:65:92:
c6:e4:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:49 2026 by rpki-client