Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: VxNajBayhNbe21YYzVYG6/N/OVcKOUdM6lXrjvZ/poo=
Subject key identifier: 4C:C4:59:4E:7A:70:11:46:CE:33:DB:5B:8E:27:86:49:6B:AA:F5:4C
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 019D9818C441C464C657416059E339E161B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 1023
Signing time: Thu 16 Apr 2026 21:00:53 +0000
Manifest this update: Thu 16 Apr 2026 21:00:53 +0000
Manifest next update: Fri 17 Apr 2026 21:00:53 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: AhwhVRFmzD4dzi+meRaekeL2ySIjV+NGvlKcbTtgASo=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c4:41:c4:64:c6:57:41:60:59:e3:39:e1:61:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Apr 16 21:00:53 2026 GMT
Not After : Apr 17 21:00:53 2026 GMT
Subject: CN=4cc4594e7a701146ce33db5b8e2786496baaf54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:ff:37:f4:cb:a0:a9:7f:04:d9:e0:f0:fa:
eb:34:77:0f:b3:15:15:80:33:0a:1f:16:17:1e:a2:
71:23:35:5a:61:2e:7f:a1:d9:fe:cb:62:56:e7:47:
40:02:c1:fb:e1:2c:76:a4:68:be:73:b8:e6:46:65:
7d:fb:78:17:f1:f7:f8:98:70:10:b6:6f:34:42:b6:
93:b2:63:92:00:c6:4f:74:06:e9:7f:0d:c9:da:e7:
ba:9c:ce:86:50:7d:51:42:fe:39:f7:6a:30:7a:53:
20:9d:ff:14:b4:01:98:f4:be:c3:ab:60:f5:27:11:
dd:b1:fa:6d:db:e3:9c:8a:ec:07:74:79:8f:21:13:
64:e8:44:3f:e3:27:20:9b:68:4b:2b:9a:17:5a:eb:
8f:ce:8b:70:c5:48:0f:b5:1e:c1:23:77:d9:a9:75:
08:16:a1:fb:78:a3:d8:b1:bf:79:36:ed:89:18:00:
1d:3f:8e:52:73:a7:71:c2:6e:25:8d:22:ea:12:76:
55:b3:eb:46:42:87:49:08:d6:2b:23:47:d2:28:3e:
55:0d:7d:27:cb:ac:bc:58:19:b6:db:14:17:36:97:
2e:a7:da:a6:a8:3e:d6:d2:c1:43:0e:e8:53:a8:62:
b4:bb:00:76:2b:e5:fd:15:c7:e3:0c:7e:b7:01:6a:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:59:4E:7A:70:11:46:CE:33:DB:5B:8E:27:86:49:6B:AA:F5:4C
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2a:40:6d:a9:6b:60:20:b1:f2:07:89:18:6c:29:b8:11:af:
50:21:b2:04:06:74:88:99:45:f9:43:09:53:0e:f9:b9:82:7b:
cb:13:99:37:9f:1b:d4:42:5a:22:23:60:31:ad:6d:36:21:6e:
7d:b4:aa:27:0c:f7:49:e0:ef:a9:a0:20:8a:9b:d1:86:b1:6d:
0e:63:c8:ca:d8:8b:db:eb:85:56:fa:3b:89:96:10:ca:83:41:
d9:ba:65:62:01:c6:f8:6c:47:ec:8d:a6:33:18:8a:2a:24:30:
19:eb:af:85:48:57:d5:63:3a:4e:7c:63:a4:b6:8a:27:6d:32:
28:4e:2c:36:2a:8f:76:68:90:28:9b:e8:19:b4:b6:00:02:8a:
c0:46:52:d8:e1:1a:00:8a:ab:49:fa:81:ce:35:e3:93:a1:63:
3c:bf:54:ce:d2:39:8c:1b:d7:84:87:b2:36:05:50:4c:02:b1:
2b:e0:e6:44:60:2e:27:e5:c0:27:35:dc:7f:af:e7:e5:5f:3d:
d5:5e:04:26:6c:87:34:4a:e9:4f:f6:d2:7f:db:ac:6c:c2:61:
7e:96:d5:4d:f3:90:75:87:1f:66:b9:7f:3c:eb:91:58:af:16:
39:eb:5d:9a:5b:d1:a6:9f:6c:06:aa:33:9a:59:fc:d2:e7:2e:
3e:24:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:47 2026 by rpki-client