Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: Cjgk4iZpcRPl3qQjEtzZX5devMMYGVhvhN54pIbicXk=
Subject key identifier: FC:2D:85:38:D0:06:20:B6:FF:50:6A:1D:D5:84:CF:4F:02:34:2B:F0
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019D9A070A33DE03A88E097EFFA7CA4133F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: pB3voqk8/yirXHMsL4YBbf5yHlMHnNMokUfY5tQ1spc=)
3: K3NmFuOPAddd8mCVtQYOCkx1jh0.roa (hash: SrLTNGPGVS2F82EZUaVR6hJ6RB2NsvkrSon85JqFkV8=)
4: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: fhRyE_K269sQWrdJhqkhEA-v5ko.asa (hash: 9+eBnbSBimBu4HwMZ224XRHi7r8hcPQzKz3/KA+alHc=)
7: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0a:33:de:03:a8:8e:09:7e:ff:a7:ca:41:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=fc2d8538d00620b6ff506a1dd584cf4f02342bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:fc:ee:cf:ff:9b:d3:88:6d:c7:13:3e:20:
20:c8:83:97:7a:01:df:55:b0:3c:b2:d9:cd:52:1e:
99:4e:00:7d:61:49:15:b5:a5:25:82:68:2c:81:e1:
56:18:02:75:7b:e8:b7:3d:29:e7:f6:23:54:2e:6f:
19:86:b7:9f:dd:2f:d7:72:5a:81:1b:a2:02:df:72:
ac:f2:23:ea:21:cd:c1:8f:b7:fa:f7:aa:62:f3:ba:
ea:ed:ba:f1:64:65:f6:30:87:a3:42:57:8a:87:95:
b7:5e:5c:6d:70:6a:9c:81:a9:d4:82:5b:53:c8:0a:
9c:1c:cf:27:c0:c8:c0:0f:ed:a1:8a:49:e8:28:60:
dd:03:98:aa:1a:07:26:c7:70:6f:3a:03:f7:2b:a3:
42:f1:72:09:c6:cb:3e:ad:e5:e5:2c:90:53:2e:59:
4b:c7:ba:59:44:73:dc:aa:28:ba:d5:53:5f:9c:cc:
d7:66:cb:87:24:cd:28:d4:e9:bd:f3:63:aa:c9:9b:
ce:0a:c4:13:d4:7a:35:84:e7:f4:14:58:a4:d0:83:
53:9a:cc:00:af:83:c8:7a:c8:f6:0f:d9:76:d1:32:
57:67:15:4a:aa:6b:2e:5b:e5:fe:2c:e6:3c:38:67:
93:be:96:1a:48:85:6c:a1:75:a0:1b:15:32:22:af:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:85:38:D0:06:20:B6:FF:50:6A:1D:D5:84:CF:4F:02:34:2B:F0
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:a0:1f:dc:3d:eb:ec:af:94:15:a3:56:d1:6b:d2:78:e6:
4b:96:e2:f0:b9:6a:64:2a:ed:9c:5e:5d:7d:1b:68:89:39:dd:
f2:0e:01:78:03:e0:f3:a8:ef:23:46:26:98:90:28:bb:d2:db:
dd:bc:60:b7:e0:8b:dc:0d:31:eb:36:f5:1e:13:61:11:4f:b8:
36:a8:9e:d9:06:06:70:0b:ce:33:2f:59:83:cf:94:ad:b4:e5:
6d:b8:7f:5d:12:2b:4c:6f:2a:f6:ce:30:be:3d:fc:2f:e5:c3:
39:43:04:a7:4f:ba:c3:1e:58:ee:fd:cd:52:15:25:79:2e:57:
25:45:70:7c:5e:38:12:03:75:55:05:31:41:69:16:76:ab:98:
2e:56:8a:19:39:81:f4:61:99:e5:cd:8e:11:69:b8:d5:99:7b:
92:94:c3:50:79:7a:1d:79:07:05:be:56:f5:33:d5:6a:70:61:
9b:46:db:e4:70:20:48:9c:36:5c:21:1e:4a:54:70:a3:fc:02:
8c:4e:f6:6f:23:e5:5c:8f:ac:38:b4:b3:54:52:ec:42:39:54:
85:e4:24:67:33:bb:7e:2e:fa:be:53:e9:cb:d7:4a:51:ee:00:
bb:5b:da:1e:34:37:a9:83:3d:f6:70:97:a7:9e:74:da:1c:7f:
91:c5:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:10 2026 by rpki-client