Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: gKbfHaMCTdhRTAnj644Zu4qWrim0VSXqm4byHRsyypg=
Subject key identifier: F6:47:70:27:DA:AE:B8:32:61:A0:58:0C:1E:EB:65:75:19:E6:1A:5D
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019DADFC43034AD3EBF0DABAF241C0ACBA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 0155
Signing time: Tue 21 Apr 2026 03:01:23 +0000
Manifest this update: Tue 21 Apr 2026 03:01:23 +0000
Manifest next update: Wed 22 Apr 2026 03:01:23 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: zzrc7gv8AX6BKO0a5hA/XhSd5b6N95Zi77ECaCbemuA=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: op71npEadOyd07159Wej77YQILI.roa (hash: eD5sjYOJWPP4UoIDZC6vYDF6ENzBilI2Pagr2VoIOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:fc:43:03:4a:d3:eb:f0:da:ba:f2:41:c0:ac:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Apr 21 03:01:23 2026 GMT
Not After : Apr 22 03:01:23 2026 GMT
Subject: CN=f6477027daaeb83261a0580c1eeb657519e61a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:ec:fc:ab:bb:43:21:87:da:ee:86:26:52:
fc:84:0e:ca:1a:e6:5c:e0:3b:18:b3:6d:76:00:5b:
bf:19:c3:a0:2f:3a:20:98:fa:84:24:38:b6:1c:70:
53:76:cd:09:15:ed:03:34:94:06:9d:b7:a9:6f:13:
40:20:34:a4:5d:5e:68:47:fc:21:5b:b4:98:07:c2:
41:f0:00:0e:9f:b7:31:04:aa:d8:e0:cc:e5:0e:7f:
3a:77:58:53:66:c7:b3:e4:c3:e6:a5:18:f8:42:de:
43:69:ab:c1:1e:d4:4e:eb:f2:fb:10:60:42:aa:53:
ba:ca:7e:b1:1a:1f:1c:dc:f2:7b:8d:ba:17:95:09:
37:99:f3:e9:d4:3b:45:c3:ce:df:8c:ec:28:e5:af:
38:e4:5e:83:0f:ed:eb:89:98:a2:5c:ac:22:d2:43:
bc:4a:8d:98:e0:c4:b5:08:8a:84:38:6d:ca:59:e5:
47:99:70:9c:1b:3a:44:f8:3b:e9:dc:dd:a0:96:5b:
01:e9:01:00:b1:1c:36:5f:0f:4d:72:d8:8d:ad:45:
26:48:2d:ef:79:2a:33:d2:77:6a:a0:e2:37:a0:77:
d2:f4:e2:93:2c:b9:06:79:ba:aa:da:10:d8:e3:0d:
b4:8a:48:02:77:38:82:fc:48:2a:84:6d:b6:70:33:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:47:70:27:DA:AE:B8:32:61:A0:58:0C:1E:EB:65:75:19:E6:1A:5D
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:82:96:9a:17:1d:02:02:fb:45:ee:5a:0a:ad:98:e5:c5:e3:
ef:0f:2c:da:9b:c3:42:43:4c:77:87:6a:be:bb:9b:fb:02:e8:
a6:dc:11:35:9a:26:ee:47:4b:93:ce:b7:ea:56:3c:2c:d4:5b:
46:ae:6b:4a:31:0e:03:85:24:ee:06:0b:df:de:71:f1:06:6e:
d7:ac:3e:bb:3e:02:70:99:ff:1d:e6:8d:fd:a5:89:28:20:6c:
f8:71:4b:63:5e:bc:9e:30:43:f7:33:97:bc:95:fa:79:c6:28:
5b:b6:34:1a:51:9a:1c:34:90:e3:89:86:ce:7e:26:15:75:2e:
f2:c6:80:50:5b:9c:6e:45:1d:f9:87:05:d4:8a:5b:d8:f9:63:
e8:44:b5:eb:33:7e:86:20:c0:e5:42:a3:ab:4b:3d:21:9b:67:
c3:44:60:0d:35:9b:ae:5c:86:71:e5:95:d8:90:26:3f:13:82:
7a:2e:ff:d1:82:d4:dd:13:25:1b:cc:2f:6c:3d:43:e4:2f:87:
67:01:32:30:b7:f6:f1:44:6f:79:db:25:07:a5:69:6d:30:49:
ff:2a:bb:cd:1a:c1:56:ef:2a:95:d7:ad:4f:b5:3e:53:1b:6b:
b0:2d:7d:70:88:a3:6b:02:fb:5d:9b:9c:82:b7:d7:d9:83:a7:
f8:a4:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 11:14:17 2026 by rpki-client