Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: JQ2OoQlLc9Xq//0EKvdmY6uw6thydmaePdEgM2Um+3I=
Subject key identifier: 10:B1:3E:EF:1E:F1:69:17:F8:CF:DD:F5:86:25:0B:DF:20:68:B2:9E
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 019D9A070F8D1EC43B6D37F8E4E3EE6E0A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 11F1
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: PN4RXRtxNM6ybvlCA3SniWa1kFUIKpYkF3k+3Cd1cYY=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0f:8d:1e:c4:3b:6d:37:f8:e4:e3:ee:6e:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=10b13eef1ef16917f8cfddf586250bdf2068b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:26:14:a1:fe:d6:f2:3c:10:2a:76:de:04:4d:
26:a0:58:53:57:e7:c0:e9:f5:fb:1a:b1:28:46:ad:
e9:ac:3c:7b:d8:8a:ff:34:30:a0:bd:47:15:c7:09:
2a:c1:79:c3:27:c2:b1:30:a3:2a:0e:77:a5:8a:75:
de:92:6d:cc:2c:62:b3:48:c6:9a:b9:3e:51:f4:e7:
52:50:77:c0:db:fa:38:d6:9e:94:6c:a8:16:31:2a:
ff:b6:aa:ec:59:ab:b5:69:32:e1:ef:28:18:98:77:
12:99:b6:46:25:29:28:65:20:68:75:23:28:c2:42:
43:b9:79:d4:61:a3:3a:c2:f4:28:60:17:6f:b7:a6:
d8:5c:b6:dc:a8:97:d1:aa:33:af:33:74:fd:a0:25:
e6:f4:e5:dd:f0:8d:29:14:f5:ae:2b:5a:ff:90:a9:
e2:67:9f:fb:a3:b7:87:27:34:01:2e:e6:df:86:93:
1a:ea:d2:7c:4f:f4:21:66:dd:df:17:37:5e:66:5f:
44:59:17:29:13:f1:31:65:b9:d5:aa:d4:ca:6b:a9:
ea:9b:0b:4f:6d:24:ce:00:c8:3d:88:63:d9:9b:77:
a8:c7:f9:f8:9a:ce:a0:f9:40:a9:1b:f3:fb:e1:b4:
7b:5a:44:89:a8:d3:5a:1d:b3:98:73:1d:80:4c:cc:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:3E:EF:1E:F1:69:17:F8:CF:DD:F5:86:25:0B:DF:20:68:B2:9E
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:96:15:b7:d1:00:d2:19:c4:32:0f:e9:aa:29:51:e3:2f:
87:3c:6b:43:6f:c6:19:03:b2:ec:20:65:d7:43:ce:fa:cb:06:
ae:39:b8:ac:73:c4:62:a5:1a:ed:f1:47:8b:04:43:76:48:31:
1c:11:e7:2a:19:05:2a:42:0c:01:56:a3:eb:c6:98:40:7a:11:
0a:86:19:da:4d:b8:22:11:7b:32:20:8a:36:11:dd:ec:d8:75:
de:71:cf:e2:c5:92:5a:bc:16:08:d2:8a:a0:f6:3e:d3:71:ef:
f2:86:6e:c2:66:3f:8c:ba:cd:65:70:8d:75:50:59:1a:f4:de:
36:30:85:dc:79:e8:67:ea:da:6c:be:30:de:65:0b:b0:c0:3d:
a9:1e:05:77:3f:9c:94:f3:83:97:9f:22:d0:f7:0d:1b:97:6c:
72:1a:fd:92:44:f8:b5:ca:65:ee:cf:6a:ce:5b:78:68:0a:83:
ef:7a:3e:bd:30:68:dd:de:6f:cb:a8:55:fb:ec:a9:66:d9:13:
18:6a:79:06:b6:fd:c3:97:2f:ff:76:97:17:50:b1:84:ab:35:
2e:17:cb:70:53:95:47:e1:d6:04:bc:81:67:25:5e:fa:44:e7:
75:4b:be:46:b6:da:5f:78:73:67:4a:84:9d:f8:88:2e:57:30:
d4:3d:2f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBw+NHsQ7bTf45OPubgpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDc5NGQ5ZmNhYjIzZWMwNWRkZGQ1MDQ4YTNmYzcyMDQw
MDJhMmEwHhcNMjYwNDE3MDYwMDQ3WhcNMjYwNDE4MDYwMDQ3WjAzMTEwLwYDVQQD
EygxMGIxM2VlZjFlZjE2OTE3ZjhjZmRkZjU4NjI1MGJkZjIwNjhiMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iYUof7W8jwQKnbeBE0moFhTV+fA
6fX7GrEoRq3prDx72Ir/NDCgvUcVxwkqwXnDJ8KxMKMqDnelinXekm3MLGKzSMaa
uT5R9OdSUHfA2/o41p6UbKgWMSr/tqrsWau1aTLh7ygYmHcSmbZGJSkoZSBodSMo
wkJDuXnUYaM6wvQoYBdvt6bYXLbcqJfRqjOvM3T9oCXm9OXd8I0pFPWuK1r/kKni
Z5/7o7eHJzQBLubfhpMa6tJ8T/QhZt3fFzdeZl9EWRcpE/ExZbnVqtTKa6nqmwtP
bSTOAMg9iGPZm3eox/n4ms6g+UCpG/P74bR7WkSJqNNaHbOYcx2ATMyk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCxPu8e8WkX+M/d9YYlC98gaLKeMB8GA1UdIwQY
MBaAFN5HlNn8qyPsBd3dUEij/HIEACoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDIt
ZjAxMTI5Mzk1M2Y1LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDItZjAxMTI5Mzk1M2Y1
LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOKWFbfR
ANIZxDIP6aopUeMvhzxrQ2/GGQOy7CBl10PO+ssGrjm4rHPEYqUa7fFHiwRDdkgx
HBHnKhkFKkIMAVaj68aYQHoRCoYZ2k24IhF7MiCKNhHd7Nh13nHP4sWSWrwWCNKK
oPY+03Hv8oZuwmY/jLrNZXCNdVBZGvTeNjCF3HnoZ+rabL4w3mULsMA9qR4Fdz+c
lPODl58i0PcNG5dschr9kkT4tcpl7s9qzlt4aAqD73o+vTBo3d5vy6hV++ypZtkT
GGp5Brb9w5cv/3aXF1CxhKs1LhfLcFOVR+HWBLyBZyVe+kTndUu+RrbaX3hzZ0qE
nfiILlcw1D0vQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:40 2026 by rpki-client