Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: nAKcCv8RzISav4k6Tvgw4bnmMfva0fsuYj62mMViL+M=
Subject key identifier: 67:AB:3E:F4:A1:A2:5E:52:C7:21:04:12:B2:82:4B:EB:85:5F:00:C4
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019DB0C5EBB88CD02F5F8496384872D1F0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 18CE
Signing time: Tue 21 Apr 2026 16:00:54 +0000
Manifest this update: Tue 21 Apr 2026 16:00:54 +0000
Manifest next update: Wed 22 Apr 2026 16:00:54 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: zqzHyj7N00SPQ3+fvvmXAys04xxp1K4I8+CZSy0sZjw=)
2: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (hash: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE=)
3: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (hash: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c5:eb:b8:8c:d0:2f:5f:84:96:38:48:72:d1:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Apr 21 16:00:54 2026 GMT
Not After : Apr 22 16:00:54 2026 GMT
Subject: CN=67ab3ef4a1a25e52c7210412b2824beb855f00c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:ef:d4:e6:a7:98:42:65:d4:60:27:d8:07:
4a:c2:f7:f3:cd:ec:f1:da:0f:a7:b9:11:62:8a:df:
4e:df:f8:ae:32:21:25:0a:05:53:b5:0a:57:06:86:
0f:1b:1e:e0:64:ea:1b:59:b4:35:88:1d:51:ba:fc:
1f:7f:b6:ed:6f:c4:8a:84:77:9c:61:31:35:49:ff:
09:20:23:95:4b:6d:6d:ea:95:c9:d4:40:3c:8a:8f:
52:10:22:b3:ba:f7:a7:c9:d8:70:45:56:45:46:ef:
dd:1e:e0:fc:96:eb:3f:6d:83:8d:90:ee:06:3c:2e:
22:18:3d:38:f6:d4:d9:00:10:cc:de:22:fe:00:04:
c2:a3:ac:84:ae:0f:eb:a3:dd:ee:9a:cc:ba:c6:a4:
1d:41:ed:b5:7a:0f:8a:39:b3:89:f8:b9:ed:82:85:
fa:33:bf:d9:b1:92:55:c8:8a:89:3d:1d:ad:7a:c1:
62:f3:f2:f8:28:c9:49:6a:2a:db:9f:9c:e4:b1:e0:
fc:a4:8a:bf:3a:ce:af:c8:3c:ac:16:07:4f:0e:37:
61:14:da:e4:99:eb:c5:cc:9c:b9:9c:10:b1:9f:46:
4d:5a:59:d3:c6:4c:6f:94:18:20:1e:50:5d:da:df:
69:80:a0:4f:a4:2f:40:fe:1e:54:e5:16:11:f9:79:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:3E:F4:A1:A2:5E:52:C7:21:04:12:B2:82:4B:EB:85:5F:00:C4
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e2:31:e1:ae:0d:54:b8:07:e2:96:9e:c2:55:d7:76:ba:fa:
f5:bf:da:25:34:7f:e0:ca:01:f4:4b:e5:fe:37:75:87:12:1c:
1e:c0:7d:4f:ac:97:ad:14:8b:56:55:24:47:83:ca:e9:9c:42:
32:a1:70:6f:9e:13:53:9e:7a:88:1f:35:f6:09:54:e8:f1:66:
8f:ad:0e:31:33:28:69:d2:11:39:16:f3:b7:65:f1:07:de:5a:
d2:63:63:c3:ae:6d:d1:a1:ee:ba:17:7e:31:b7:fd:54:91:19:
c0:fa:b4:70:a7:5a:d7:95:68:89:0e:b5:a9:4b:df:66:3b:fc:
e7:00:74:ec:6b:40:e2:df:10:ef:74:e6:ea:be:ef:55:e6:3e:
da:50:67:95:05:3b:79:52:d5:63:34:2c:79:c1:43:54:59:f0:
2a:8d:bb:9a:35:92:a8:35:d0:18:d3:94:5d:1e:7e:1b:41:d2:
43:ad:04:9a:d4:e6:16:f1:1d:9a:b2:22:29:84:b1:23:09:10:
ea:7b:52:a1:4e:7a:99:75:af:c0:f3:21:e4:03:e5:86:52:c6:
f8:e4:f5:ad:fd:71:63:9a:6b:a9:b0:19:2d:74:bf:78:ff:65:
99:30:12:3d:1e:c2:d0:a7:50:bc:d4:5b:7a:e3:f4:ea:30:67:
55:d8:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:33:23 2026 by rpki-client