Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: RDfMVQo1+Vteby79Ag3K8BpG0xWsIPrTlpag1QQdTE4=
Subject key identifier: B3:B6:1D:E2:83:E9:89:4E:B6:97:6C:9D:44:66:93:05:93:9C:82:5E
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 019D99D09B0676715F6242D42A6CED23517E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 13C9
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: zSkC+NK/QBws6uvif1otklF6aJyZDJfr66+5as9BMx8=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9b:06:76:71:5f:62:42:d4:2a:6c:ed:23:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=b3b61de283e9894eb6976c9d44669305939c825e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:44:c6:03:e5:86:8f:e3:e7:37:9b:3f:17:
15:75:5a:4d:f3:65:96:ef:92:c6:36:75:71:aa:67:
01:ca:3e:6e:47:58:6c:a4:52:98:d5:94:1e:1a:d4:
5e:ce:14:68:a0:cd:6d:17:96:99:28:cf:48:1e:05:
b7:48:b3:fc:6e:15:08:1c:05:f5:b9:59:72:3c:32:
e7:98:fd:5f:70:2c:43:2c:87:a0:8e:b8:06:8e:b5:
d9:71:3a:e4:94:53:3b:be:b5:e6:73:cd:5a:a8:e2:
09:3d:72:8f:e5:7c:de:6d:ab:cd:a9:26:4a:dc:42:
4c:7f:65:3c:fd:bd:6d:07:e4:37:8a:6b:ff:0e:b8:
24:9e:7f:db:67:1c:55:51:f4:65:47:f3:30:c6:e2:
35:d4:83:72:2d:c6:e2:ad:62:00:d5:c2:60:9c:92:
cd:9e:f3:53:e5:3f:71:b8:d2:6b:99:33:12:73:1e:
5c:67:72:af:eb:55:25:f8:23:ba:6f:8e:25:0a:dc:
bb:88:6a:08:06:8e:ac:32:77:22:52:05:a7:88:70:
4b:b1:bf:26:a2:80:3d:d7:3c:51:bd:33:7c:32:71:
90:41:a8:78:fa:96:8a:c7:4e:98:fb:a1:63:a2:85:
d0:a8:9b:65:b4:0b:77:f5:44:8d:60:fe:33:f8:c3:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:1D:E2:83:E9:89:4E:B6:97:6C:9D:44:66:93:05:93:9C:82:5E
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:47:f4:59:ce:cc:9f:21:e4:d6:83:cb:6e:14:3f:6c:bf:
a9:d7:84:d9:e6:80:fa:f3:9b:cd:94:df:c7:98:ba:65:56:fe:
4b:48:6e:af:db:f5:50:9a:60:56:f6:66:3b:ff:f8:bd:5d:f3:
20:c1:b4:b5:96:87:6f:56:44:01:9c:65:99:aa:30:ce:ff:27:
ed:a7:ba:7f:d5:c5:e0:ae:9b:c2:b6:b3:d2:aa:58:4f:da:d6:
ee:e5:20:31:f2:62:3c:14:85:83:8d:65:b8:94:d4:15:2a:e7:
6c:a4:99:fa:11:72:6a:a9:e5:b6:e0:86:98:8b:69:bf:cc:ac:
e6:13:86:92:a5:a6:5f:19:77:e3:4a:fc:18:11:9b:67:c1:8b:
aa:55:f2:6f:7c:a0:36:d3:12:6c:cf:df:e6:a6:22:5e:ad:b9:
79:9f:50:e0:35:f9:aa:4d:e2:26:e5:84:14:f5:9c:0b:1d:21:
b6:3b:87:8e:83:75:fa:35:25:03:fb:3c:d9:bf:5c:35:f2:ba:
6d:64:a0:c0:7f:fa:02:53:09:09:ba:2d:a7:f2:48:b8:bf:73:
71:36:27:31:59:6d:84:cd:49:d8:21:26:a3:4d:18:3a:b0:54:
52:ac:f9:62:6d:ec:0f:a0:01:3c:8e:2d:e0:6d:46:65:72:3c:
a1:68:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:33 2026 by rpki-client