Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: GxCXYoQ1LN06I02J2a+BSkujYkpVmSgQ1jIVaWAqkKg=
Subject key identifier: 19:F2:D7:80:20:8F:27:21:D0:25:9E:D6:9B:71:9A:23:C1:57:0D:EE
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019D992B6EAF461E21C03CFAFA3C1BA80BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 1402
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: cXyWpEUlEka9gngT3iQG8eyYPI/qc1dtds5I27l1pf4=)
2: ChsrIe_cFwpAiazbN6fxpmLK7t4.roa (hash: LuQhPrdzKvZLID91e7AArGX99lU+Hh7zxpmaut21ffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6e:af:46:1e:21:c0:3c:fa:fa:3c:1b:a8:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=19f2d780208f2721d0259ed69b719a23c1570dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:9e:d5:36:d5:0b:46:80:7d:30:3e:58:01:
4b:74:10:c5:eb:fb:96:ec:14:d5:2f:b5:b0:d3:be:
95:7f:b4:9a:46:7c:84:d5:70:00:e8:46:3f:e4:ac:
cc:f6:f6:82:9a:5c:84:c7:c0:80:07:24:08:53:d5:
3b:f9:43:01:29:c8:4a:cc:9c:71:ee:52:68:5d:a4:
1b:ee:f5:45:99:6f:b0:6b:07:9b:17:56:33:10:7d:
d7:47:f9:67:e8:eb:2f:e1:a0:c4:76:b2:f1:26:ea:
85:f7:4f:77:f0:c8:79:e0:17:93:92:14:46:70:52:
7f:28:28:7c:ae:c1:84:66:3e:ae:6c:33:f4:27:07:
cc:80:05:10:41:f8:c8:50:c1:e2:70:31:6e:28:5d:
b8:64:fc:46:2a:bd:17:1b:7d:a9:28:be:4f:3c:a7:
dd:1c:b8:9b:34:3e:33:1c:46:21:b6:16:6f:90:89:
f8:87:e5:9b:e8:4b:d6:d6:64:50:ee:6d:2d:c0:2e:
7b:a1:6c:8e:2e:0b:00:32:3c:98:f9:61:78:df:71:
84:47:4e:39:78:ea:9c:0c:af:b2:b2:60:b1:b5:f4:
69:45:cf:37:e9:b0:8b:fe:c8:d5:b9:0a:44:cb:89:
fb:53:8c:3f:19:30:a1:e4:03:36:48:d1:80:94:c2:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:D7:80:20:8F:27:21:D0:25:9E:D6:9B:71:9A:23:C1:57:0D:EE
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:09:31:a5:9e:22:68:f2:9d:68:7c:63:08:da:a8:87:4f:
ad:79:b0:8f:5a:e0:cd:cd:73:6a:2a:fd:9c:e8:a6:51:d9:d7:
4d:cf:70:ec:9b:2e:d4:90:e4:19:82:ff:3d:28:29:0f:f0:83:
fd:ea:6f:94:96:13:30:a5:fd:ce:48:71:97:eb:44:a5:fe:94:
71:5f:bd:b4:48:ea:6d:a3:a0:29:6f:dd:45:b4:2a:28:bc:61:
fc:ac:17:c3:65:32:5f:28:5a:05:3e:90:20:53:4a:7b:c9:46:
d4:ed:2e:e4:2d:70:64:67:de:8c:85:31:13:c1:b1:8b:8a:81:
5f:6a:87:9d:33:87:70:95:44:62:97:da:d8:78:c2:1f:85:a5:
52:8d:7f:a2:d6:23:d5:1d:26:f9:e7:f1:96:dc:51:b3:cc:dc:
58:d8:3e:70:08:d2:c4:b0:ba:c0:1e:47:f6:9f:9b:b4:24:e9:
cb:1b:70:ca:8f:66:37:a5:dc:83:68:08:5d:35:86:c9:76:2d:
56:d2:29:ca:f8:7d:df:ea:e5:2b:ae:7e:9f:c6:54:b9:3f:c2:
69:57:43:46:66:b8:bd:87:8d:48:a9:29:74:6a:cb:82:b2:34:
fd:cc:48:25:6e:f5:34:97:71:eb:94:15:0b:96:06:d2:0b:25:
1b:a6:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:44 2026 by rpki-client