
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: Bem7o+kznmpe2DswvRu7zBSdM3aM46D1GZnRpUJkap4=
Subject key identifier: D0:D3:E2:B2:9D:0A:52:58:34:C5:6B:06:9D:E4:7E:45:5D:35:AF:9A
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 019D9A74F857F73C82F7EA7BD2D8FC5519F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:50 +0000
Manifest this update: Fri 17 Apr 2026 08:00:50 +0000
Manifest next update: Sat 18 Apr 2026 08:00:50 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: LamefOdvTFGSIzv4vkQzCg5Np+LP8PONUyHDxn5sCp0=)
2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f8:57:f7:3c:82:f7:ea:7b:d2:d8:fc:55:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Apr 17 08:00:50 2026 GMT
Not After : Apr 18 08:00:50 2026 GMT
Subject: CN=d0d3e2b29d0a525834c56b069de47e455d35af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:55:fa:b3:64:2b:8a:05:1d:4a:39:d9:f7:
3c:d0:c8:8f:17:03:ec:59:97:54:6b:48:f6:88:5a:
84:86:43:50:4d:14:e0:ec:38:72:c1:21:ad:d8:b6:
55:96:6c:d4:6f:a7:4e:c4:ff:65:8b:d6:02:30:64:
a4:7a:fa:5c:7f:85:bc:d3:28:be:13:92:3f:ce:e0:
2d:6f:c9:9b:6c:15:90:bc:ef:67:dd:b7:55:9a:ec:
51:62:f2:be:31:ff:8f:63:50:28:05:97:f3:76:c4:
b6:47:03:30:c2:89:03:64:05:82:71:ef:ac:2c:23:
7a:74:38:56:33:9a:43:6c:8a:04:ef:18:60:4b:53:
15:cc:d3:63:58:c6:91:39:ab:ad:88:71:5c:cd:2b:
a4:67:32:7e:ff:8f:fd:52:a6:04:21:8e:1a:62:92:
5e:08:b7:4a:f1:ee:89:90:53:ba:eb:a2:81:ef:ba:
b6:d3:09:4f:fd:a0:ad:a2:f0:4d:aa:e5:b6:94:b8:
4a:d3:d9:83:36:ca:c2:ff:bc:22:3d:f1:40:26:26:
98:eb:a7:3e:70:3f:71:3d:29:02:ca:e6:26:62:61:
35:25:73:3f:da:c0:ab:c0:93:1d:0b:7c:3d:d4:42:
5c:3c:79:fd:92:27:c2:6e:26:33:37:61:9f:f2:c2:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:E2:B2:9D:0A:52:58:34:C5:6B:06:9D:E4:7E:45:5D:35:AF:9A
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:e1:14:e0:ad:3f:b0:f6:b6:a1:cd:b7:1b:4e:b5:e9:83:
15:5c:86:2c:d8:1c:f5:84:dc:0a:7a:a1:ae:7d:10:ae:01:3c:
7d:d2:57:7e:37:0c:ea:5b:3e:19:64:ef:d8:74:9f:04:50:35:
07:58:6d:a8:e4:43:5f:6b:05:b3:53:d4:fb:c0:8f:46:75:8e:
98:eb:d0:4c:78:9d:1a:b2:f0:58:24:5c:de:a0:60:f8:8c:32:
81:77:65:ef:75:57:2e:a1:d0:5e:8d:8a:63:ee:c0:f6:35:eb:
40:52:cc:d7:80:cf:fd:c5:93:12:51:04:a8:a5:fd:ab:b4:1b:
84:fd:e0:ce:47:75:42:f5:68:85:56:4e:63:9e:08:26:d9:37:
61:3c:fe:df:c0:3f:94:61:48:2e:2e:f6:96:a9:64:da:9a:2d:
4f:b9:93:b1:52:16:59:95:71:76:ef:4d:1f:e6:c1:cd:1a:22:
94:43:ee:2a:81:72:aa:a7:e6:0c:55:e7:be:9f:c7:7e:de:8c:
79:b0:e8:a4:eb:94:44:ba:77:55:ad:cc:98:88:13:37:3c:27:
76:42:18:5b:f5:64:a3:17:e9:02:ab:25:a6:16:a5:78:d9:50:
0c:97:b4:e1:5b:72:3c:c9:5b:37:e1:02:2b:1f:ac:c5:ac:ce:
e8:34:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:55 2026 by rpki-client