Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: ZQPsv3tJSIEOYu4855M4LCO13Ztxu+zMveCZs+8Lezw=
Subject key identifier: 66:FD:2B:C2:9D:44:9D:F1:D0:5D:89:32:F4:67:55:0E:A8:48:68:3F
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019D9BBEC7DAFEDE85EA5560CB8B0D56C5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 186F
Signing time: Fri 17 Apr 2026 14:01:04 +0000
Manifest this update: Fri 17 Apr 2026 14:01:04 +0000
Manifest next update: Sat 18 Apr 2026 14:01:04 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: JxETd0jOqjYsKFPQZoKmFSjp/fAnfz6fkTCTcsNR5C4=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:c7:da:fe:de:85:ea:55:60:cb:8b:0d:56:c5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Apr 17 14:01:04 2026 GMT
Not After : Apr 18 14:01:04 2026 GMT
Subject: CN=66fd2bc29d449df1d05d8932f467550ea848683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:d1:f2:85:05:27:8c:c1:d2:77:b4:ba:22:
a1:a4:1c:e5:fc:9c:50:be:b3:9d:0d:d9:0c:f5:5b:
a8:6d:44:75:2c:d4:79:c4:e2:6c:ad:fd:b0:cc:e9:
cc:4b:74:0e:40:a8:3f:22:94:dc:52:c1:aa:41:92:
ea:b8:e0:f4:19:08:e9:8e:c8:7c:85:45:70:a8:b1:
87:4d:25:04:59:db:68:63:77:d9:c7:7e:18:85:6a:
34:aa:3f:48:84:d1:87:2f:84:0b:6e:08:cc:bf:e9:
56:cb:68:0a:ee:7d:a5:af:8f:a8:c4:47:e2:e4:44:
e9:32:fb:b2:2b:60:4a:ba:5b:34:55:85:29:c2:c9:
fa:aa:3d:e6:a2:7c:fa:fd:3e:ce:cd:08:58:df:f2:
b2:c4:64:5e:1f:f5:d0:6f:f5:45:57:22:e3:c9:6c:
88:e5:61:c1:4a:a5:46:96:5a:b7:d1:f2:21:34:3c:
7d:50:ec:fe:5d:66:00:a4:b6:e8:ab:a4:66:d6:d2:
29:bb:df:91:43:a8:70:51:a9:4e:c5:03:92:6a:dd:
bd:f4:7a:f1:0e:5b:50:25:b8:23:ec:59:00:17:6d:
96:a0:79:db:c2:f5:1a:3c:b3:3d:ee:d9:e9:a8:39:
fb:f9:5b:b4:91:91:16:3e:f4:59:be:4d:23:62:8c:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:2B:C2:9D:44:9D:F1:D0:5D:89:32:F4:67:55:0E:A8:48:68:3F
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:47:bc:d6:e5:74:e0:5c:93:09:73:55:02:6d:2b:e4:09:1c:
dd:78:13:9d:f8:f8:cf:78:e0:23:53:bf:0a:c7:9b:9c:15:f8:
07:40:89:e2:55:ec:88:8c:65:34:37:02:60:0b:a5:12:3b:3e:
65:3e:58:d7:ed:86:db:0b:00:70:62:0e:ea:4a:b1:39:cb:5b:
8e:17:01:8e:bf:4c:07:c7:5f:17:a2:f1:b2:21:e6:09:09:a9:
38:31:9b:02:ce:89:3d:e1:c8:58:58:e2:2a:33:f8:e9:4b:96:
b9:c8:ba:c0:3b:dc:c5:51:55:f9:c7:ef:14:b6:e2:82:b2:92:
bb:53:dd:8d:00:88:39:0f:2d:5a:10:b4:09:23:5b:e1:b0:54:
a2:61:78:d6:f4:69:57:73:fb:bf:03:34:0e:de:e3:72:07:e1:
1c:6b:ac:46:e4:dc:ae:4f:f3:e4:dc:0f:5e:3a:4c:6d:30:93:
5f:65:46:eb:b0:01:39:e3:26:de:48:a8:df:1f:eb:1f:32:10:
ab:a5:7d:d3:a5:a4:c7:4f:4e:8d:51:64:b8:f5:15:10:4c:0b:
9b:02:56:07:47:76:9f:bb:39:66:b2:dc:ef:ec:c7:08:2f:41:
f3:8b:14:87:36:93:33:42:b9:0b:b1:c8:46:30:6b:0c:4c:ef:
c3:56:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:42 2026 by rpki-client