Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: sMAxz+zxfsrYN6bZUZiwBoiquXzt/CmlUR4B3Gtkq/I=
Subject key identifier: 19:E1:DE:F0:94:34:FA:50:90:B6:57:43:0B:FF:83:76:9F:25:CF:47
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 019D9AE333EDE66251649E4C9026DE369644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:14 +0000
Manifest this update: Fri 17 Apr 2026 10:01:14 +0000
Manifest next update: Sat 18 Apr 2026 10:01:14 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: gU/Vce8+JBJjnr0+eQ44bP8j9jFa8tcNtST/ePxp6B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:33:ed:e6:62:51:64:9e:4c:90:26:de:36:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Apr 17 10:01:14 2026 GMT
Not After : Apr 18 10:01:14 2026 GMT
Subject: CN=19e1def09434fa5090b657430bff83769f25cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:ac:df:b5:87:11:68:58:dd:2a:2d:64:f8:
a5:a5:96:1d:92:ed:25:bf:49:3c:04:4d:51:36:b5:
8c:07:d8:d4:2a:42:2b:12:4d:9d:1d:5a:9d:29:49:
48:c2:3f:16:03:7b:a3:40:6f:0d:1f:f7:0c:c1:4d:
dc:c7:b4:80:4b:bb:d9:6a:a2:7c:d6:6c:75:f8:c1:
79:b4:b6:51:68:51:46:0c:17:a1:29:b9:80:c9:b0:
09:44:60:5d:61:10:15:64:f6:bf:22:86:6a:b0:13:
32:32:56:20:3f:6c:8f:12:db:49:00:6f:91:df:00:
93:e8:4e:00:bc:0a:5e:c1:f0:b6:54:e1:ef:16:c2:
94:cd:70:9d:3f:55:9d:9d:c8:21:eb:11:92:50:bf:
c9:86:64:b2:d8:ba:a8:7c:b9:e8:06:78:52:04:8d:
15:8a:5f:ab:dd:00:7b:c8:a4:b6:5a:91:aa:55:ee:
9e:f7:c7:1e:71:87:1e:66:50:d6:70:e2:1b:3d:2a:
50:5b:4b:ec:8c:2a:33:76:5b:be:81:99:41:b3:6d:
2f:0e:fe:f5:b7:83:24:0b:fe:cc:76:8f:bd:4e:e2:
2c:d0:bb:64:a9:c9:f5:ed:c3:04:24:e8:d2:e6:bf:
46:a2:08:27:e3:9f:6c:40:73:ca:83:d4:a8:a9:47:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:DE:F0:94:34:FA:50:90:B6:57:43:0B:FF:83:76:9F:25:CF:47
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:9f:08:9e:b7:c1:fc:0c:54:b3:ea:b2:a8:8f:74:28:ed:
db:5c:2c:d5:bd:2b:90:2e:05:a9:ac:07:59:47:55:3a:75:96:
4e:f1:e0:a1:0d:7a:94:53:7f:f2:b1:4d:9f:46:df:51:78:d7:
ef:5c:bd:2e:51:16:14:04:9c:96:c3:ff:e0:47:d9:3c:cb:cc:
02:9d:33:2a:f8:9c:08:83:e7:bf:41:5e:7b:05:af:3e:ef:d3:
9c:e7:e8:b8:88:94:0b:83:6c:12:ca:2f:98:e9:ae:8e:b8:f8:
2d:9a:4f:8f:07:d7:2e:94:fe:af:33:34:6a:3d:04:a5:dc:39:
fd:b5:78:d8:8f:66:47:01:8b:d8:a7:8d:3c:a2:80:35:7b:e8:
6e:3d:52:95:62:9f:f8:db:c5:20:35:5c:91:7b:01:b4:6d:db:
8c:a2:d5:6b:c4:30:ac:65:89:19:73:8a:90:b7:74:f2:18:f8:
04:3e:36:7d:f5:0d:81:09:80:5a:3a:4e:81:ba:1c:1a:84:1b:
dd:2d:53:e6:8c:1d:40:fa:1f:a6:31:ba:83:1a:ff:62:57:25:
c5:02:70:45:46:70:6a:7d:77:93:63:18:6e:e5:08:e4:05:56:
9c:1c:5e:dd:2f:a1:f6:74:ca:19:6d:ef:32:74:b1:d2:22:a2:
43:cb:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:27 2026 by rpki-client