Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: Jo+Hh0fCKx4auZGYC2Jr5/hV+4xBk4Gi3A8naVRs4Lw=
Subject key identifier: 3C:D2:C9:59:4D:09:BB:8E:1C:22:86:2F:C8:8E:3C:E9:3E:22:C1:73
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019D99D0647CF7C742E161EC0130972F9566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: /nkaDUDEADB94RWxY8TpdIewMZaIpDa2GQYNdIvPsu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:64:7c:f7:c7:42:e1:61:ec:01:30:97:2f:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=3cd2c9594d09bb8e1c22862fc88e3ce93e22c173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:7b:9f:be:d2:5f:41:59:a9:bc:ba:79:40:
f9:c5:c1:3b:df:cc:07:6e:65:d8:b1:12:56:f7:22:
87:98:c9:76:d1:f3:d5:a5:2b:92:08:84:46:32:b4:
af:4d:bb:bd:36:72:7c:87:28:bc:0d:ec:e3:40:c4:
36:80:3e:e6:22:40:36:37:ad:ea:ba:72:64:7e:b2:
15:5e:f9:e8:84:e1:2b:c8:a0:e4:bc:0f:6e:3e:e1:
83:58:84:3c:6a:35:ef:05:99:de:f3:04:b0:6a:ba:
b1:da:29:f3:4b:9e:03:05:46:40:18:96:e4:0d:52:
40:4e:db:21:d9:c0:04:41:cd:08:4d:14:61:95:f0:
a0:6b:4f:4b:4d:94:85:0d:e0:5e:2e:47:8b:21:32:
02:e5:b0:5a:06:99:46:fd:60:48:b2:0d:49:73:f5:
fb:c6:27:91:94:b8:d1:9c:e6:24:d8:bb:c6:ec:68:
96:82:1f:c1:11:12:e4:d4:05:19:c8:e8:dc:bd:49:
2a:a9:46:29:7c:d4:90:f9:56:21:c4:9d:89:5b:b4:
f1:4e:fd:45:0c:00:e4:9d:63:a5:67:e3:4a:e2:d6:
71:e2:87:0a:b9:30:45:f6:2d:c6:65:fd:3d:cc:37:
c9:5f:e0:39:8c:58:5a:bf:61:b6:1d:9a:20:e8:b6:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:C9:59:4D:09:BB:8E:1C:22:86:2F:C8:8E:3C:E9:3E:22:C1:73
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:b9:11:46:5f:79:1a:a0:88:52:fe:1a:d1:c8:79:0a:91:
c4:ac:e7:18:7d:ef:85:3c:b3:b1:87:5f:fa:3c:63:ed:b0:41:
46:3f:b5:7a:fe:86:19:96:3b:8d:a8:92:6f:96:73:f2:85:d6:
30:9a:e7:f3:b7:75:a4:06:f0:c9:b1:45:a8:dc:ec:88:0e:e6:
c1:4a:91:21:5e:5d:62:a7:ad:d7:00:bc:67:5e:e5:92:aa:27:
44:42:8d:bd:24:71:8c:bc:fe:c0:e5:a2:cc:a6:77:9f:b1:b3:
15:9b:33:d4:0a:ab:54:18:6d:a6:43:79:1c:a7:10:f4:17:38:
62:77:0d:d3:9f:85:c5:1b:d6:c4:f1:ff:dc:85:c8:c1:c7:6d:
05:82:0a:c5:38:ef:5e:2f:78:90:20:9e:c1:c5:a6:14:1e:a9:
1b:00:8e:2a:71:17:ef:16:71:6c:7e:92:22:d0:65:db:86:1d:
fc:eb:d7:25:04:89:f8:4a:c9:a3:68:01:d1:97:21:ce:e0:28:
a5:25:36:ea:83:39:49:48:f3:56:7a:41:7b:db:51:75:49:57:
df:c4:13:07:66:1a:57:b1:95:a7:a0:5b:de:9e:15:a9:dc:ac:
d0:ee:01:c8:5a:2a:03:3f:c4:27:3a:53:c9:52:61:85:7c:27:
d0:18:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:09 2026 by rpki-client