Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: lSS+5ZnVsb2CMv1mW4uxTD03DQgwrXVMzmcxVQs2O/M=
Subject key identifier: 5B:42:A7:6D:DC:3F:80:B2:7A:E6:BF:5D:D9:93:7F:18:B7:D5:02:8E
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 019D9A3EE04FE21896A707BC7D7F1381EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: W+qXcNCJNL2FiiuM49zse8NPenfaNUNsFa+JhVQpFIg=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e0:4f:e2:18:96:a7:07:bc:7d:7f:13:81:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=5b42a76ddc3f80b27ae6bf5dd9937f18b7d5028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:d9:55:99:56:09:c4:17:1c:14:61:6f:8a:
24:34:4a:b6:9f:08:53:9a:45:a3:7d:c3:14:c8:ee:
e9:2c:a9:d5:2c:19:e7:76:85:98:57:71:9d:1c:0a:
60:8c:3b:38:17:f4:77:13:76:fa:3c:d3:a3:53:0e:
32:15:3e:88:53:fe:4a:88:3c:97:c7:4d:cf:ad:41:
6e:33:dd:1b:fe:c4:ae:d6:c1:d9:2d:68:00:e2:13:
9f:79:75:d0:9c:97:3f:11:13:c9:95:f3:24:2d:f2:
39:af:d7:df:1b:34:58:df:04:38:79:25:5f:6d:4e:
25:fc:f9:0e:46:2a:32:d9:0e:86:6f:67:54:18:4f:
20:19:26:18:fc:0d:db:77:36:e0:fb:00:bc:19:aa:
22:f3:9b:b3:2e:a0:62:26:ac:da:d4:d0:50:fe:cb:
94:4a:6a:2a:82:96:8c:8b:27:59:78:19:4f:9b:0d:
25:96:ec:f3:93:38:b2:4c:82:58:4e:02:15:4a:f4:
3b:06:9b:1e:e0:20:60:47:d2:d6:ef:fb:85:94:b6:
67:ab:8d:f5:c2:e4:9b:c6:bc:63:ca:23:f3:20:4f:
38:92:eb:f6:db:46:a0:8c:0b:ac:33:5b:71:6e:59:
43:e4:93:47:9e:8d:1e:23:48:a5:17:0d:6d:b2:19:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:A7:6D:DC:3F:80:B2:7A:E6:BF:5D:D9:93:7F:18:B7:D5:02:8E
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:87:f2:2e:22:c4:2a:23:1c:c8:2d:95:7b:90:10:a9:8f:5c:
50:00:87:0d:86:c7:40:3b:d0:11:c4:df:0c:aa:cf:cb:05:fe:
d9:f8:3d:03:14:76:62:3f:ff:c3:4b:3f:01:97:60:52:55:4e:
73:4d:ac:52:46:0c:4e:21:06:48:91:4d:63:81:6c:48:9f:30:
e7:84:55:1a:fb:e7:31:92:e4:72:39:3c:21:19:f0:65:46:63:
5b:35:41:7c:ce:77:ea:f1:be:9a:0c:5e:2c:ad:29:bf:46:bc:
f6:16:7f:99:64:be:00:15:ff:f7:d7:09:ca:38:ec:a1:12:de:
e1:5c:5c:ad:26:d4:64:e7:ef:ba:09:d5:3b:ed:d8:e4:1d:07:
38:6c:f6:68:78:d7:7a:17:b9:17:a1:4d:3a:88:bd:cc:99:2e:
5d:2b:8f:48:6f:7f:56:9e:b6:2a:19:e5:eb:26:10:a2:a0:28:
24:5c:c5:c7:d6:60:d7:83:a9:50:e2:96:cb:98:dc:27:1a:59:
33:d8:c8:15:dc:1f:c5:0a:5d:6e:44:91:13:98:59:1f:a4:01:
78:e8:b9:39:12:c9:00:57:8d:ef:75:af:0a:89:e9:d3:65:64:
a0:43:0e:91:2d:d7:e4:f1:18:1f:b3:d8:7b:bf:d5:01:73:f6:
c2:f8:1f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPuBP4hiWpwe8fX8Tge4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjYwNDE3MDcwMTQ0WhcNMjYwNDE4MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg1YjQyYTc2ZGRjM2Y4MGIyN2FlNmJmNWRkOTkzN2YxOGI3ZDUwMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomPZVZlWCcQXHBRhb4okNEq2nwhT
mkWjfcMUyO7pLKnVLBnndoWYV3GdHApgjDs4F/R3E3b6PNOjUw4yFT6IU/5KiDyX
x03PrUFuM90b/sSu1sHZLWgA4hOfeXXQnJc/ERPJlfMkLfI5r9ffGzRY3wQ4eSVf
bU4l/PkORioy2Q6Gb2dUGE8gGSYY/A3bdzbg+wC8Gaoi85uzLqBiJqza1NBQ/suU
SmoqgpaMiydZeBlPmw0lluzzkziyTIJYTgIVSvQ7Bpse4CBgR9LW7/uFlLZnq431
wuSbxrxjyiPzIE84kuv220agjAusM1txbllD5JNHno0eI0ilFw1tshkQCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtCp23cP4Cyeua/XdmTfxi31QKOMB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIfyLiLE
KiMcyC2Ve5AQqY9cUACHDYbHQDvQEcTfDKrPywX+2fg9AxR2Yj//w0s/AZdgUlVO
c02sUkYMTiEGSJFNY4FsSJ8w54RVGvvnMZLkcjk8IRnwZUZjWzVBfM536vG+mgxe
LK0pv0a89hZ/mWS+ABX/99cJyjjsoRLe4VxcrSbUZOfvugnVO+3Y5B0HOGz2aHjX
ehe5F6FNOoi9zJkuXSuPSG9/Vp62Khnl6yYQoqAoJFzFx9Zg14OpUOKWy5jcJxpZ
M9jIFdwfxQpdbkSRE5hZH6QBeOi5ORLJAFeN73WvConp02VkoEMOkS3X5PEYH7PY
e7/VAXP2wvgfhQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:26 2026 by rpki-client