Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: yWXdCZ7T9iCdMOtIzvNbhmboNNByquT1JKhYJ+6SMDo=
Subject key identifier: D7:7C:8A:C6:E9:EC:06:D1:2A:88:7D:A9:DA:92:FE:EB:74:F9:E4:5B
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019DA48A913C8018F24048C305A9AC4F8F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 18A0
Signing time: Sun 19 Apr 2026 07:00:37 +0000
Manifest this update: Sun 19 Apr 2026 07:00:37 +0000
Manifest next update: Mon 20 Apr 2026 07:00:37 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: K+ub/QRhaP1yu7Vw3Cm3MbbskGmouNnhhPgI0yBLLKE=)
2: pPQ_ikZwm714GOEIqdQyxnhiVJE.roa (hash: 4UUAoZKaA2j3VJE7xShuXB30Uh86/B72WrTV35CTOuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:91:3c:80:18:f2:40:48:c3:05:a9:ac:4f:8f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Apr 19 07:00:37 2026 GMT
Not After : Apr 20 07:00:37 2026 GMT
Subject: CN=d77c8ac6e9ec06d12a887da9da92feeb74f9e45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:0b:aa:47:ac:1c:1f:8f:ec:95:9e:f1:6f:
02:00:a6:66:0a:64:67:ac:eb:3e:f9:93:7e:ce:0e:
2a:cd:ae:b8:94:35:51:47:99:6a:a7:3f:b1:c2:be:
07:1a:4b:3e:12:f8:06:79:92:32:87:97:31:4b:2f:
ec:95:a9:fb:31:b2:bf:51:5a:00:c8:b6:ef:92:e0:
86:40:33:8c:cb:36:85:31:a5:f6:0a:49:df:6d:c6:
22:fd:1e:95:c2:c2:84:a1:dc:8d:e3:bc:54:6f:89:
6a:2d:c5:b2:4a:a9:0d:10:dd:71:85:e0:f2:68:fe:
ed:04:55:c5:23:90:f6:b1:0c:bd:7e:1a:e6:9b:90:
5d:f4:50:84:18:cc:38:37:e6:55:6d:8f:a3:e8:37:
01:3d:57:23:2a:c3:f2:cf:87:db:0b:2c:ee:55:20:
7d:38:cd:59:e1:bd:0c:6d:a1:ad:95:cb:3e:28:11:
77:25:aa:02:60:d7:ed:04:3f:d8:a2:82:a2:05:27:
ca:25:86:87:41:73:f6:6c:ed:d0:8f:38:6f:14:70:
4b:17:33:23:41:32:3d:7c:d8:e6:9c:02:b7:3d:1c:
44:ca:d3:e2:b1:c8:74:b1:2f:c9:26:c2:eb:5d:f1:
ba:91:7b:57:9b:f2:87:29:83:07:57:aa:72:93:81:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:8A:C6:E9:EC:06:D1:2A:88:7D:A9:DA:92:FE:EB:74:F9:E4:5B
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:dd:71:66:3d:1c:73:2d:7c:e0:ef:2e:37:ca:b4:c8:70:
46:ea:bd:86:48:95:19:69:98:64:f8:b3:64:08:88:46:5d:fa:
9a:1f:9e:93:25:5e:59:fa:ee:dc:25:c1:68:4e:5e:be:26:5b:
2b:d6:c4:84:fb:99:b5:7e:f7:7e:18:28:6c:2b:b7:b1:de:9f:
ee:d6:d3:da:6c:6a:c6:47:c3:ee:d2:31:b6:11:c7:46:9f:ee:
c1:ad:7a:54:45:88:6e:7a:7c:ed:c0:27:51:3b:60:1f:ce:40:
be:50:5b:fd:0d:14:f1:83:16:eb:26:8c:3e:ee:41:9e:9e:42:
56:f0:39:d5:2b:58:bd:99:f7:dc:2a:ac:3d:62:0b:83:64:27:
f0:94:5c:f2:3d:f2:d9:3e:3e:33:39:fb:9f:24:36:33:9a:38:
3b:7b:65:32:f2:1d:0c:c1:3f:b0:84:b8:34:fd:4c:46:8f:3f:
a5:67:a9:83:da:7c:66:c6:13:23:5c:6c:17:93:04:51:98:c8:
de:ef:8b:5c:96:79:b8:9f:ee:65:32:d6:cd:7f:d3:fa:02:3d:
3a:fa:07:5b:a7:ec:71:ab:bf:7f:85:91:8a:dd:fc:e5:bc:96:
0f:d4:5a:cb:e5:38:bb:97:ff:b6:c7:66:ed:65:6c:3e:d9:a1:
e6:9c:5e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kipE8gBjyQEjDBamsT4+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNzk1NGQ4OGMwYWUzZjYzOTg2OTdiZmRmYzE5NTZhNzUz
ZTgzZDgwHhcNMjYwNDE5MDcwMDM3WhcNMjYwNDIwMDcwMDM3WjAzMTEwLwYDVQQD
EyhkNzdjOGFjNmU5ZWMwNmQxMmE4ODdkYTlkYTkyZmVlYjc0ZjllNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmQLqkesHB+P7JWe8W8CAKZmCmRn
rOs++ZN+zg4qza64lDVRR5lqpz+xwr4HGks+EvgGeZIyh5cxSy/slan7MbK/UVoA
yLbvkuCGQDOMyzaFMaX2CknfbcYi/R6VwsKEodyN47xUb4lqLcWySqkNEN1xheDy
aP7tBFXFI5D2sQy9fhrmm5Bd9FCEGMw4N+ZVbY+j6DcBPVcjKsPyz4fbCyzuVSB9
OM1Z4b0MbaGtlcs+KBF3JaoCYNftBD/YooKiBSfKJYaHQXP2bO3QjzhvFHBLFzMj
QTI9fNjmnAK3PRxEytPisch0sS/JJsLrXfG6kXtXm/KHKYMHV6pyk4GITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd8isbp7AbRKoh9qdqS/ut0+eRbMB8GA1UdIwQY
MBaAFD95VNiMCuP2OYaXv9/BlWp1PoPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUt
YWY0MDYwODZiODliLzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84MmU2NTYtMTRhMy00ZTNhLTlkNmUtYWY0MDYwODZiODli
LzEvUDNsVTJJd0s0X1k1aHBlXzM4R1ZhblUtZzlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwjdcWY9
HHMtfODvLjfKtMhwRuq9hkiVGWmYZPizZAiIRl36mh+ekyVeWfru3CXBaE5eviZb
K9bEhPuZtX73fhgobCu3sd6f7tbT2mxqxkfD7tIxthHHRp/uwa16VEWIbnp87cAn
UTtgH85AvlBb/Q0U8YMW6yaMPu5Bnp5CVvA51StYvZn33CqsPWILg2Qn8JRc8j3y
2T4+Mzn7nyQ2M5o4O3tlMvIdDME/sIS4NP1MRo8/pWepg9p8ZsYTI1xsF5MEUZjI
3u+LXJZ5uJ/uZTLWzX/T+gI9OvoHW6fscau/f4WRit385byWD9Ray+U4u5f/tsdm
7WVsPtmh5pxeCw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:40 2026 by rpki-client