Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: FLRwC4aVb1a6TzupeUkuc7pebFFTjvBcqCKocB/a1JA=
Subject key identifier: 78:6C:C0:8D:52:1D:85:4A:50:8C:CB:53:3E:96:54:63:BF:45:E0:26
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 019D9850810AD802DBC11AB0DE5ACA588A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 11D7
Signing time: Thu 16 Apr 2026 22:01:45 +0000
Manifest this update: Thu 16 Apr 2026 22:01:45 +0000
Manifest next update: Fri 17 Apr 2026 22:01:45 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: WZfPOOUKgqEHXDtaUEyxU73GzASKfzZQLsvDXQl2Fr0=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:81:0a:d8:02:db:c1:1a:b0:de:5a:ca:58:8a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Apr 16 22:01:45 2026 GMT
Not After : Apr 17 22:01:45 2026 GMT
Subject: CN=786cc08d521d854a508ccb533e965463bf45e026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:4e:fb:a3:3b:3c:ff:e4:2b:e8:94:4f:1a:
6a:a1:35:90:cf:ff:bf:3d:03:46:a6:e4:3c:11:71:
83:83:81:4d:78:12:d2:4d:86:1d:fa:1c:5e:7b:a4:
c7:3d:4e:f5:11:36:eb:af:ef:76:3a:35:a7:9f:dd:
ab:8b:cd:3d:84:0c:08:5f:18:2f:a9:7d:51:fb:21:
24:79:1d:98:6b:48:78:7e:0f:6e:4f:68:aa:07:7c:
24:40:6b:78:c2:61:56:a8:b0:35:cc:69:92:e3:ed:
44:11:1f:95:51:52:07:d5:91:13:5a:2b:38:6f:b4:
83:c3:b2:67:65:1e:d3:8d:9d:97:7b:a7:65:01:11:
c0:31:01:f8:01:b8:ad:81:9f:3b:36:da:63:3a:f7:
78:ee:ba:87:a9:29:10:e2:db:03:1b:be:9a:a5:1b:
f3:8b:c6:24:0d:a7:4a:38:92:51:99:0f:20:7f:b7:
fe:5d:39:58:cd:60:8f:00:a9:1e:cc:98:52:cd:3d:
7e:bc:c4:44:66:c4:28:96:0a:b3:88:0e:e6:6c:88:
74:4e:a1:a7:0d:75:ba:29:ee:2a:f1:6d:33:61:df:
bf:6f:f7:4f:bc:3f:8e:1e:80:ef:2a:f2:53:78:82:
db:9d:c2:ff:f9:ae:1e:e4:6d:e9:1d:96:f7:6d:01:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6C:C0:8D:52:1D:85:4A:50:8C:CB:53:3E:96:54:63:BF:45:E0:26
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:b4:93:26:25:be:49:1f:78:bc:09:06:9e:cc:45:c9:39:
94:7f:7f:98:d4:33:8b:7b:1f:92:20:bc:e7:40:0a:e1:40:81:
13:7e:63:2e:04:df:80:29:b0:ff:ca:27:19:61:02:90:70:eb:
98:22:e0:5e:97:3e:60:86:9c:7c:0e:fa:c8:d2:6f:30:70:98:
cc:6e:41:74:e8:7f:44:12:c6:0c:a7:d2:a0:91:ed:ad:9a:40:
07:c7:ac:bb:09:b8:b0:6f:72:00:6e:ed:ab:ff:52:38:84:a7:
03:9f:04:40:bf:97:5a:65:65:14:f3:7d:0a:fa:cf:a9:ad:78:
a1:9b:dc:d5:fb:4b:5f:e3:d3:21:41:24:0a:bc:93:31:68:cf:
36:51:71:6d:90:11:51:22:9f:8e:da:60:5e:bf:f4:b0:ab:2d:
d7:e4:82:f0:7d:b6:ea:96:5f:72:94:52:d6:ef:4e:0a:3f:35:
a4:d3:c6:74:a8:89:18:e3:70:6d:56:dc:e2:c4:e7:db:14:90:
e5:14:93:24:5b:bb:cb:7e:e4:a4:c2:0a:36:a8:36:91:7b:c3:
ae:bc:db:08:58:58:4e:bf:b1:8d:e0:c6:01:95:66:34:e7:50:
df:e0:ee:97:ac:5e:99:35:fd:d1:28:ff:65:79:fd:e9:ee:cd:
31:d7:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:17 2026 by rpki-client