Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: IkwaggH3lY2ebh4ldL+tXtKXdcMGDMubsC7mduzk7NI=
Subject key identifier: DE:74:C8:8C:EA:E3:FC:03:34:FF:37:BF:CF:76:27:39:3F:B7:2D:FC
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019D9961DFB96D8928E89D6FD7A2EC7A82E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 4U8ZrMX9wBf1F8hja/HpVE15obIShQC3GahTV5B4y6Y=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:df:b9:6d:89:28:e8:9d:6f:d7:a2:ec:7a:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=de74c88ceae3fc0334ff37bfcf7627393fb72dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:fc:77:d4:84:13:fb:8d:97:2a:8a:ee:02:
e4:6c:f1:42:91:4b:ed:ee:7f:7b:17:7c:3f:ab:70:
cb:e0:3c:b6:a8:1f:9b:67:bb:80:72:3c:18:b7:a0:
24:d4:89:54:87:4e:a2:f6:66:c7:30:c9:aa:00:5e:
70:0d:b0:e5:73:69:39:b3:c1:e1:d1:12:58:9d:e8:
33:d9:46:5f:fc:2c:9c:6e:64:df:9b:4f:94:93:a2:
56:35:8f:85:40:52:28:9c:36:0d:d3:44:ea:62:d3:
c6:15:13:3f:aa:a3:49:28:88:5a:79:c7:71:92:dc:
80:37:10:e4:aa:1d:88:28:15:ba:03:c9:e6:a7:5d:
a9:9d:05:13:c2:11:3e:40:c0:74:d3:ec:9f:19:e5:
a3:cc:16:b6:5a:00:4f:60:ea:13:a4:ee:d4:1e:1e:
f0:49:5f:6b:43:31:67:00:40:e9:86:72:86:42:ca:
db:37:43:8a:25:32:44:85:72:e2:59:dd:75:3f:5d:
ce:ee:b9:fd:a7:a2:ea:55:e0:d6:42:28:99:64:03:
96:8a:da:84:eb:45:fe:ec:56:d8:44:56:c1:01:cd:
7b:6f:31:8c:3d:92:37:d2:f2:cd:35:6a:4c:f7:96:
99:16:bd:bf:bd:24:43:1a:b7:d9:c0:49:c4:3e:2f:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:C8:8C:EA:E3:FC:03:34:FF:37:BF:CF:76:27:39:3F:B7:2D:FC
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:97:71:50:dc:7e:34:62:0f:64:a3:de:f0:50:b4:3b:a3:
fc:71:df:b2:5a:25:b6:ae:9b:d3:e0:67:31:4a:81:0e:ea:75:
59:e9:d3:a8:dc:c6:f3:9d:b0:15:c8:9b:27:80:25:0b:73:ef:
3a:69:e7:72:6c:93:5a:91:ca:2c:ff:0f:7c:67:a6:33:d4:d8:
9d:d7:df:9e:cd:cf:e7:5f:11:14:f0:20:a0:d7:9b:96:fa:bb:
47:0c:28:37:c5:01:04:d6:47:5e:84:4e:9b:24:b5:fc:f5:02:
82:0b:71:50:49:6d:94:e9:fb:96:cd:5d:a9:01:a4:66:39:17:
30:33:b9:b6:37:8f:67:3c:1b:99:f7:c5:c5:82:bb:ec:fe:d9:
87:34:e1:5a:6f:41:62:d3:3e:22:84:72:0b:53:94:f0:fd:77:
51:4f:45:36:02:5b:f5:68:dc:9d:d0:d1:a0:56:d3:d8:60:05:
8e:ba:11:00:b5:65:de:ee:cf:83:6a:e8:75:09:28:18:df:79:
93:d6:be:5a:64:cf:c6:f8:9a:b1:6e:79:99:c8:9c:62:7a:ca:
b6:3c:c8:1b:95:2f:5c:a2:1d:69:b4:68:10:8f:ad:cf:a3:7c:
38:07:de:b6:d4:13:f9:d9:53:ff:86:59:72:5e:63:a9:84:db:
2c:a9:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:52 2026 by rpki-client