Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: dhgbB56Nf+b0xR2eipaVzFHgfrA5yPHYme1k+E7atKI=
Subject key identifier: 5A:68:7F:6E:02:13:F9:97:B4:E0:EC:70:EF:9B:40:A6:0E:54:5E:A2
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019D9818CC8F1535AA023FF6F1EB4396E9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1205
Signing time: Thu 16 Apr 2026 21:00:55 +0000
Manifest this update: Thu 16 Apr 2026 21:00:55 +0000
Manifest next update: Fri 17 Apr 2026 21:00:55 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: OZ0AkuanYrSpbNRQCW+DVplhNsQgOZ5859NLXuZy324=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:cc:8f:15:35:aa:02:3f:f6:f1:eb:43:96:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Apr 16 21:00:55 2026 GMT
Not After : Apr 17 21:00:55 2026 GMT
Subject: CN=5a687f6e0213f997b4e0ec70ef9b40a60e545ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:ff:db:c9:6f:b5:c1:76:e3:79:32:36:cd:
f3:b0:90:2f:75:67:98:77:af:16:02:c4:0b:c8:80:
50:60:16:97:dd:d2:54:84:7f:69:03:53:42:af:83:
0d:7c:6e:a0:69:8a:2b:1d:0b:1b:cf:6f:65:c0:ca:
fc:3c:91:fb:f0:f0:aa:81:90:60:05:85:52:fd:9d:
07:02:7e:40:ba:ad:04:85:06:0e:6b:31:53:c9:29:
82:f4:b0:c6:19:9f:50:bd:01:27:bf:cf:0f:0b:b6:
14:1c:58:79:31:cb:75:46:b4:73:4e:b7:e5:5d:10:
cf:d2:1e:2c:30:8f:74:d0:a4:75:b8:2d:09:46:f7:
73:05:49:24:bb:2b:72:85:5e:f1:d8:df:22:fd:eb:
1e:0f:30:8d:f6:6d:bf:9e:d8:77:1f:de:d1:8c:14:
66:c6:5d:14:2d:77:c2:0e:38:c4:bb:63:b6:00:e6:
4f:78:35:a9:b7:10:53:08:5e:9e:49:16:2a:a1:64:
e1:a4:7d:f1:db:36:07:2b:95:6c:79:5a:32:49:15:
9b:91:50:05:23:12:93:32:e2:22:79:93:99:07:34:
b6:2b:37:82:3e:de:06:ed:43:84:99:6a:70:0c:e4:
12:e8:d5:37:d0:3d:df:f5:45:8a:8a:1c:eb:32:34:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:7F:6E:02:13:F9:97:B4:E0:EC:70:EF:9B:40:A6:0E:54:5E:A2
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:fe:83:85:ed:7d:7d:2f:73:cb:b8:3d:aa:5e:67:d2:5a:
b8:54:1f:c7:af:f2:42:38:79:35:3c:de:66:29:50:1f:72:eb:
da:39:3b:63:2b:2b:24:b8:cb:43:c9:d3:e1:5d:8b:4c:b7:f5:
da:82:21:0c:7e:9c:d6:49:9a:65:b4:4f:04:f3:59:20:91:5d:
0d:de:e1:eb:96:7d:be:16:f3:2b:61:56:ba:88:29:31:2d:30:
d7:d1:fe:d0:b1:45:ce:52:70:8f:7d:84:7f:7c:2d:11:4c:06:
97:e2:fc:6a:62:81:65:6d:a4:fa:99:69:3d:dc:4f:4c:6e:90:
f0:50:a1:f0:20:37:82:4d:1c:d2:64:c4:b1:93:65:4c:e6:c6:
46:2c:af:c6:4f:92:61:a1:b0:6e:89:44:ce:84:c9:e7:af:a3:
e7:a8:66:5d:75:f1:55:5e:46:91:bf:5c:0b:9f:4a:71:a4:26:
bf:ad:10:5d:82:01:43:02:9a:32:d7:c8:5e:4e:18:66:0c:74:
00:36:f3:50:35:a0:3b:c3:c7:9c:7e:dd:20:4a:b7:2c:bc:17:
dd:64:21:ca:a8:35:50:56:9d:ff:cb:6b:28:47:00:39:7b:8a:
90:5b:96:19:42:46:7c:b6:19:bd:3e:84:a8:ec:eb:48:95:67:
11:cc:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:23 2026 by rpki-client