Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: jzcRSAaV9GKEf6EQwtXPXZP1O1RSMUB48DzFnmRPchs=
Subject key identifier: D0:12:16:3D:DA:08:3A:2E:97:59:CE:D3:00:40:E1:33:08:8E:92:F4
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019DCD86CAEE41A0E8748B4E4A8C817555FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 161F
Signing time: Mon 27 Apr 2026 06:00:56 +0000
Manifest this update: Mon 27 Apr 2026 06:00:56 +0000
Manifest next update: Tue 28 Apr 2026 06:00:56 +0000
Files and hashes: 1: 0_VDRwikWTvRQIQsMp3aqjlVQuQ.roa (hash: X74/QCu3+W4NQQ4c/uIC5xYm7kaBm7r/kGt68bnJBmk=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: RXf7f/VI67XwmQxNSUbhud3yswkyfxSJ7gwe2TftyDE=)
3: EuhZP1AZU_rcBrUtpebBNKpZGDs.roa (hash: 4fJyMfdftWEjgJj30JHbQU1JK+JRhaZwjIp1NhaWeFg=)
4: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
5: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
6: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
7: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
8: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
9: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:ca:ee:41:a0:e8:74:8b:4e:4a:8c:81:75:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Apr 27 06:00:56 2026 GMT
Not After : Apr 28 06:00:56 2026 GMT
Subject: CN=d012163dda083a2e9759ced30040e133088e92f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:56:e1:9c:ac:88:4f:87:b4:7d:68:17:a6:
a1:da:00:2a:2f:af:53:0e:a4:5a:c3:dc:0c:75:89:
74:89:24:51:28:bd:1d:28:ac:4f:df:9e:20:b2:05:
e3:45:75:70:63:32:d5:56:36:c9:bc:aa:4f:23:f9:
fb:cb:89:98:32:6b:72:71:c0:45:5a:a3:f3:ab:60:
68:95:f3:9d:28:6e:41:a6:55:d5:3a:df:b0:02:f0:
f1:39:63:ef:c9:a4:7e:a5:c5:75:8b:31:54:b1:3c:
62:52:47:4c:fa:3d:9c:68:42:7e:52:3c:6c:7b:ea:
1d:b2:40:53:bf:6c:08:9b:86:f6:f8:a2:62:4f:aa:
b0:ec:fc:ab:d0:01:b4:86:40:a9:0e:94:47:0f:5f:
77:c5:7b:d7:ca:da:6c:45:1b:e4:56:d5:b9:7c:eb:
d4:af:0c:36:b5:ab:17:43:1f:e2:36:90:71:64:30:
fe:99:01:d5:08:08:d9:4c:c0:dc:ed:89:f9:56:bc:
50:cd:7b:3b:13:2b:48:1f:95:11:12:3e:fb:19:88:
2b:f3:f9:bd:1b:eb:aa:c5:17:93:fa:7b:92:5d:f8:
04:fe:da:ed:92:b3:e3:d6:91:de:1d:88:5d:d0:51:
46:2f:c3:42:b6:b4:08:5f:74:6b:9f:bd:5b:79:09:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:16:3D:DA:08:3A:2E:97:59:CE:D3:00:40:E1:33:08:8E:92:F4
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:76:85:81:fb:05:c6:1a:8e:93:10:cd:08:55:b0:bb:66:24:
7f:53:be:8b:dd:f8:07:26:9a:84:d4:41:8f:bd:7d:1f:cd:74:
9b:54:0e:1e:05:45:02:5d:6d:bc:4e:ee:24:8b:b7:73:88:c6:
6f:ff:dd:26:bb:aa:44:ba:e7:31:d1:95:94:90:46:7e:ef:15:
4f:d4:b0:41:b2:4d:3d:22:29:55:32:32:f4:e0:8a:48:ff:9f:
95:cd:e0:a0:7b:de:de:da:74:3e:b6:90:ae:f7:2e:d8:04:3f:
ed:21:09:3d:70:15:ff:be:12:df:30:ae:09:3c:17:b8:ba:24:
7d:ea:2e:dd:d9:93:59:56:eb:c9:70:e3:ec:9a:02:aa:6e:e0:
0e:e7:a6:95:6b:6c:9b:c2:53:a4:4d:cf:1a:36:85:3b:2a:88:
95:6b:60:c2:cf:d9:5d:1f:ba:3a:17:fb:5e:41:49:cc:49:5a:
87:34:9a:11:56:73:68:80:e2:1d:db:d1:e8:2e:9c:79:51:33:
1e:85:0d:77:db:5f:db:7d:6c:48:36:0f:75:70:47:90:21:5e:
cc:48:bb:04:fb:f5:32:f2:58:fa:4e:27:4e:1f:df:38:ea:46:
78:7b:5a:07:b8:02:11:a2:f9:c5:9c:7d:8f:75:85:85:92:5c:
47:2d:aa:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NhsruQaDodItOSoyBdVX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjYwNDI3MDYwMDU2WhcNMjYwNDI4MDYwMDU2WjAzMTEwLwYDVQQD
EyhkMDEyMTYzZGRhMDgzYTJlOTc1OWNlZDMwMDQwZTEzMzA4OGU5MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrpW4ZysiE+HtH1oF6ah2gAqL69T
DqRaw9wMdYl0iSRRKL0dKKxP354gsgXjRXVwYzLVVjbJvKpPI/n7y4mYMmtyccBF
WqPzq2BolfOdKG5BplXVOt+wAvDxOWPvyaR+pcV1izFUsTxiUkdM+j2caEJ+Ujxs
e+odskBTv2wIm4b2+KJiT6qw7Pyr0AG0hkCpDpRHD193xXvXytpsRRvkVtW5fOvU
rww2tasXQx/iNpBxZDD+mQHVCAjZTMDc7Yn5VrxQzXs7EytIH5UREj77GYgr8/m9
G+uqxReT+nuSXfgE/trtkrPj1pHeHYhd0FFGL8NCtrQIX3Rrn71beQkveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNASFj3aCDoul1nO0wBA4TMIjpL0MB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3aFgfsF
xhqOkxDNCFWwu2Ykf1O+i934ByaahNRBj719H810m1QOHgVFAl1tvE7uJIu3c4jG
b//dJruqRLrnMdGVlJBGfu8VT9SwQbJNPSIpVTIy9OCKSP+flc3goHve3tp0PraQ
rvcu2AQ/7SEJPXAV/74S3zCuCTwXuLokfeou3dmTWVbryXDj7JoCqm7gDuemlWts
m8JTpE3PGjaFOyqIlWtgws/ZXR+6Ohf7XkFJzElahzSaEVZzaIDiHdvR6C6ceVEz
HoUNd9tf231sSDYPdXBHkCFezEi7BPv1MvJY+k4nTh/fOOpGeHtaB7gCEaL5xZx9
j3WFhZJcRy2q/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:13:00 2026 by rpki-client