Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: 13LiR7XhGJIhvzcW9rVxNz+qBfsmBQpqgw27dAXW2Io=
Subject key identifier: D7:5D:19:24:E5:6B:B6:58:FA:92:A9:90:76:6E:7B:4E:70:BC:85:36
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019D98509FECB964FC78A81EC18D94BF6178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 16CE
Signing time: Thu 16 Apr 2026 22:01:53 +0000
Manifest this update: Thu 16 Apr 2026 22:01:53 +0000
Manifest next update: Fri 17 Apr 2026 22:01:53 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: vUnUMd6u8BNnW/RWU8VoQyx4Y1xjqhEtjo51TRdoD4M=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9f:ec:b9:64:fc:78:a8:1e:c1:8d:94:bf:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Apr 16 22:01:53 2026 GMT
Not After : Apr 17 22:01:53 2026 GMT
Subject: CN=d75d1924e56bb658fa92a990766e7b4e70bc8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:7f:cf:cb:58:f2:5c:a7:ac:06:f7:95:79:
88:ef:37:c5:6d:f4:7d:14:89:b6:d5:76:ea:f4:cb:
0c:96:fc:6f:2f:d8:e0:43:e3:2a:b3:04:dc:1a:1a:
df:1d:76:b6:32:17:ed:f5:fd:be:7c:2d:6b:77:20:
02:b3:2a:a4:08:c2:56:0f:e4:a4:36:8f:fc:c7:69:
c9:c0:0c:52:96:68:05:0f:de:dc:8d:70:fb:17:41:
14:7b:06:03:5f:91:45:3c:61:7e:19:3b:fe:5e:b5:
b6:e3:9e:86:93:91:09:e8:82:5d:eb:78:df:d2:bd:
3f:3e:f2:7f:45:3f:ee:4f:f4:77:92:e8:82:96:2c:
14:78:0a:85:be:0c:aa:26:ef:ba:fa:59:ef:41:a7:
76:9e:77:d5:5c:1b:ae:1c:e0:c4:c5:5b:5f:72:bb:
ff:8f:f0:1e:9a:95:2d:b0:5f:15:68:d9:5f:f4:8c:
f7:fc:4c:9d:d4:34:59:f7:4a:10:39:09:79:e2:8a:
17:bd:6b:a4:4b:37:b2:52:42:3c:68:5a:34:c0:65:
1f:37:6a:1a:3b:37:98:d5:e3:de:7b:56:74:c9:61:
3a:0b:3e:f5:0d:80:7d:48:47:0d:6d:00:48:97:07:
0a:6f:a5:e4:83:fa:ec:48:60:4b:79:4a:af:6a:e4:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:19:24:E5:6B:B6:58:FA:92:A9:90:76:6E:7B:4E:70:BC:85:36
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:70:8e:20:fc:49:3e:ce:2e:d7:03:0d:89:1c:a5:2f:87:
c0:1c:e4:7c:34:96:1d:b2:08:61:e6:1d:6f:39:90:bf:a1:d6:
64:3f:65:a5:75:33:76:23:2f:81:71:eb:5f:99:85:88:34:22:
a3:c0:02:17:50:d0:3a:fe:fc:44:d4:71:41:ab:e0:e4:c0:ca:
06:1a:8e:46:df:78:e4:0a:09:f4:ac:bb:8f:7e:1a:3a:a5:f2:
e4:e8:73:0f:e9:bf:94:c0:34:a4:7f:05:c6:e2:ce:ad:e2:96:
27:2c:45:a2:d9:08:a2:94:02:a9:29:24:e9:07:03:5d:29:7c:
a6:19:bf:78:76:10:ff:ec:33:6e:bc:0c:47:bd:71:ec:9e:4d:
ea:66:55:bb:c7:18:57:a6:f6:10:b9:af:8a:77:ee:71:b9:b7:
73:cf:1e:fd:f2:d6:d1:e9:67:72:80:42:f8:98:56:e4:ab:08:
a5:b9:ea:91:5a:32:bb:f0:a3:36:37:a1:cc:68:2b:a7:4d:2b:
a4:16:82:be:6a:33:ae:6d:87:08:8b:02:da:29:8c:b9:c9:cd:
73:61:8d:17:f4:d9:71:6b:79:90:ce:61:ad:4b:c2:c9:19:13:
7a:66:2d:bd:91:f3:65:e6:12:f2:f8:06:29:68:8c:ae:9f:a7:
d9:a5:58:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJ/suWT8eKgewY2Uv2F4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjYwNDE2MjIwMTUzWhcNMjYwNDE3MjIwMTUzWjAzMTEwLwYDVQQD
EyhkNzVkMTkyNGU1NmJiNjU4ZmE5MmE5OTA3NjZlN2I0ZTcwYmM4NTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxd/z8tY8lynrAb3lXmI7zfFbfR9
FIm21Xbq9MsMlvxvL9jgQ+MqswTcGhrfHXa2Mhft9f2+fC1rdyACsyqkCMJWD+Sk
No/8x2nJwAxSlmgFD97cjXD7F0EUewYDX5FFPGF+GTv+XrW2456Gk5EJ6IJd63jf
0r0/PvJ/RT/uT/R3kuiCliwUeAqFvgyqJu+6+lnvQad2nnfVXBuuHODExVtfcrv/
j/AempUtsF8VaNlf9Iz3/Eyd1DRZ90oQOQl54ooXvWukSzeyUkI8aFo0wGUfN2oa
OzeY1ePee1Z0yWE6Cz71DYB9SEcNbQBIlwcKb6Xkg/rsSGBLeUqvauR1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNddGSTla7ZY+pKpkHZue05wvIU2MB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgpwjiD8
ST7OLtcDDYkcpS+HwBzkfDSWHbIIYeYdbzmQv6HWZD9lpXUzdiMvgXHrX5mFiDQi
o8ACF1DQOv78RNRxQavg5MDKBhqORt945AoJ9Ky7j34aOqXy5OhzD+m/lMA0pH8F
xuLOreKWJyxFotkIopQCqSkk6QcDXSl8phm/eHYQ/+wzbrwMR71x7J5N6mZVu8cY
V6b2ELmvinfucbm3c88e/fLW0elncoBC+JhW5KsIpbnqkVoyu/CjNjehzGgrp00r
pBaCvmozrm2HCIsC2imMucnNc2GNF/TZcWt5kM5hrUvCyRkTemYtvZHzZeYS8vgG
KWiMrp+n2aVYbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:46 2026 by rpki-client