
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: GSa+yWvzT8C0MxmIAuPmxLVfwxJwqljuPEClX3vcTjQ=
Subject key identifier: 28:DE:1F:02:15:D7:E6:DA:5C:36:2C:AF:CF:6E:3F:B1:79:72:EC:98
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 019DCED023AD15A586E8F0A70987098B80BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 12:00:40 +0000
Manifest this update: Mon 27 Apr 2026 12:00:40 +0000
Manifest next update: Tue 28 Apr 2026 12:00:40 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: QfC+eEnX0xOytmnRZRL5vMPF/BZlgnJirVzX8EDatHY=)
2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:23:ad:15:a5:86:e8:f0:a7:09:87:09:8b:80:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Apr 27 12:00:40 2026 GMT
Not After : Apr 28 12:00:40 2026 GMT
Subject: CN=28de1f0215d7e6da5c362cafcf6e3fb17972ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:c4:e5:35:77:d7:cb:82:45:6f:21:5e:53:
3d:14:09:58:8e:66:3d:38:75:dd:e7:e1:67:a4:84:
a5:9e:5c:49:ca:06:f9:d6:6b:0a:e6:41:ff:9a:db:
b4:96:4b:95:34:36:8f:55:8d:08:61:b1:8b:fb:18:
4c:f5:66:fe:22:63:8c:1c:bc:ae:a1:f6:10:9f:57:
3c:bb:68:31:cd:1d:e5:2a:89:dc:66:90:3f:1c:63:
1a:3a:b0:d1:2e:31:1a:37:e0:bd:e3:90:20:4f:49:
a0:04:38:2f:42:02:df:f1:13:54:86:76:93:3a:3c:
cd:71:92:bb:bf:e7:98:c8:4d:b3:c4:b2:3d:e5:65:
f6:c2:ce:f2:ab:0f:b6:6a:3f:be:d3:a6:6e:1f:53:
ef:b6:05:1f:00:e9:77:a3:03:51:46:af:f0:0a:54:
7a:ad:76:04:a8:95:a0:f2:f1:f2:c3:7e:89:7c:7e:
66:1f:0f:ca:17:b6:f4:a6:61:96:51:e4:0b:20:e2:
63:df:0a:68:ae:fd:c8:f3:63:1b:6a:26:48:d2:c9:
37:1a:94:a4:f2:47:3f:f4:7d:cb:16:f1:ed:96:f9:
6c:d8:71:89:79:27:1e:47:e2:8d:6c:db:89:59:50:
3f:ca:66:e6:06:9c:ff:e4:e2:51:10:ef:9b:e5:e1:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:1F:02:15:D7:E6:DA:5C:36:2C:AF:CF:6E:3F:B1:79:72:EC:98
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ff:ba:17:f6:13:2c:62:2f:e4:1b:94:ac:9d:49:5f:83:88:
64:8c:77:60:03:52:ce:af:e0:c6:23:b4:6d:39:8c:c9:eb:cf:
8a:ad:90:41:0a:17:6d:f2:58:4c:0b:a9:f9:7e:57:f4:87:a8:
7c:d1:f6:8f:b2:4d:b2:de:87:3c:4a:67:02:8e:a3:66:ca:24:
ae:af:24:1a:9d:8e:14:39:27:a8:34:b8:76:e9:d8:86:b2:f8:
4d:b2:c4:f8:50:5b:70:36:dc:87:bb:31:e0:76:53:ed:45:8f:
32:4c:5e:16:a0:aa:ee:9f:77:cf:4d:bf:d2:9a:9f:8f:6c:7b:
7e:9c:7f:04:71:b1:ff:78:d9:b7:8a:b1:1b:36:11:da:5e:aa:
4a:ce:0b:0b:fc:3e:83:ac:55:49:b7:0a:91:71:83:8e:84:8e:
7e:4b:5a:91:b3:ac:50:92:d0:93:8e:b9:d3:a8:1a:60:c0:e2:
c4:7e:6a:9a:30:cb:a9:05:15:52:01:7b:e5:a1:47:5a:0f:93:
c3:51:89:1d:d4:3d:f0:5e:62:34:57:6e:34:68:a0:c4:52:c9:
45:57:e4:f2:23:d7:b9:86:43:ed:08:66:17:e3:17:fe:70:a0:
53:54:a8:36:cc:0d:d6:ca:71:db:fe:a9:f0:27:05:ff:59:3e:
02:51:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:26:59 2026 by rpki-client