Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: gS4fVeWSnSEtxajdbtsfiEVRZUA1cGwWCMiLI06sPQo=
Subject key identifier: BA:0D:9A:AC:22:3F:B8:20:BB:D9:0E:15:E1:D2:89:6D:B3:59:55:60
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 019D98BDC57F779653742D5C931F41B70ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 082A
Signing time: Fri 17 Apr 2026 00:01:06 +0000
Manifest this update: Fri 17 Apr 2026 00:01:06 +0000
Manifest next update: Sat 18 Apr 2026 00:01:06 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: 9HA7W3zL/pHCYL5OxA9nZJi9qCs3T0NkoRpa7mHPoMI=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c5:7f:77:96:53:74:2d:5c:93:1f:41:b7:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Apr 17 00:01:06 2026 GMT
Not After : Apr 18 00:01:06 2026 GMT
Subject: CN=ba0d9aac223fb820bbd90e15e1d2896db3595560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:c7:70:1d:84:b4:36:0f:57:37:6f:e1:28:
f7:c7:fa:93:2f:e6:d4:04:2a:36:ef:07:59:7d:35:
cb:29:a3:fe:f3:8b:97:17:03:9e:05:c3:15:b6:88:
fc:36:dc:ff:62:3c:27:d5:20:be:bc:d4:5b:00:33:
1c:43:39:30:60:8e:e1:71:e4:35:1b:ff:c4:5e:60:
d2:cd:14:47:70:85:3f:23:c7:ec:d9:83:cf:36:53:
c9:37:ed:7d:6a:12:61:01:4e:fd:12:1e:7f:d6:59:
f2:7e:ad:c6:30:2b:32:63:21:d1:ad:ca:10:fa:dc:
ef:45:fd:82:07:3e:0d:b6:3e:ec:53:e0:e2:ca:60:
44:36:00:c4:4e:69:e5:33:29:cd:a5:2a:17:b8:26:
ad:95:e5:d5:87:70:b7:4d:bc:36:ac:d1:58:74:27:
c2:1d:24:7b:41:4f:ae:91:56:b9:9a:f4:25:1c:9e:
f6:8e:89:11:79:4b:2f:dc:83:70:0f:82:87:64:ee:
f5:42:96:09:6e:93:ec:d5:47:58:90:9b:77:c0:5a:
f5:22:48:b5:ea:87:6a:59:2b:cc:0b:bc:35:b3:20:
e0:38:7f:39:2f:5c:30:c2:17:e0:98:3c:18:85:37:
6e:25:c3:af:77:ab:70:d9:29:ff:58:53:6c:21:a5:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:9A:AC:22:3F:B8:20:BB:D9:0E:15:E1:D2:89:6D:B3:59:55:60
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:65:45:bc:bc:c8:a5:32:a8:3a:5b:54:09:80:ca:7c:9f:b8:
00:05:82:d3:d4:1a:26:9f:9d:ae:8f:c9:7b:1f:16:b0:ba:42:
17:2e:29:8e:a7:50:d0:5b:37:ee:2f:f2:4b:8b:b3:2d:f0:f7:
49:e5:28:49:ad:0b:ff:16:9e:80:f9:fe:af:ad:92:fe:58:90:
6a:02:a5:35:6f:ed:28:60:57:9d:24:1c:ba:a7:53:db:bb:81:
82:c0:cc:42:01:49:72:de:cc:38:71:da:14:cc:90:e4:04:85:
ba:6d:2c:c5:7f:44:4d:15:1a:8d:c6:f7:7e:0d:81:f3:ac:b5:
97:d6:99:d0:2e:18:99:8e:02:fb:ee:1b:30:65:4f:32:65:06:
03:d3:81:51:d7:52:4e:59:ab:34:31:e9:c7:97:be:92:12:21:
b4:ef:fe:8f:6d:0f:85:11:ba:83:e2:8b:89:2e:cd:22:9a:20:
55:c7:a9:0e:2c:dd:a2:68:5e:2e:fc:ad:4f:e3:55:f6:d4:61:
e2:f5:20:0d:ee:77:3d:a3:7d:e0:7f:f8:47:f6:0f:46:96:75:
32:b1:89:37:fa:28:88:eb:29:52:c0:ad:a1:5d:26:71:3d:55:
f4:64:56:eb:40:f3:08:cf:a5:44:16:81:97:09:a5:73:39:e2:
7f:32:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:12 2026 by rpki-client