Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: NK7HydSdW0Y4eaDtfwDFQi3VF6sYlGyM0Ogd418gSJA=
Subject key identifier: 0C:AB:9C:2E:15:B5:35:A6:28:E7:C1:E9:9B:9F:B0:E4:5D:D0:D7:A0
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019DCDBD8DF3DDCCF1CDBC15916B21F3251A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 07:00:45 +0000
Manifest this update: Mon 27 Apr 2026 07:00:45 +0000
Manifest next update: Tue 28 Apr 2026 07:00:45 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: P1QBqNu+xIPESKxfe+JdJCYlj8V5Cw4FuL3ZUsK7biE=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:8d:f3:dd:cc:f1:cd:bc:15:91:6b:21:f3:25:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Apr 27 07:00:45 2026 GMT
Not After : Apr 28 07:00:45 2026 GMT
Subject: CN=0cab9c2e15b535a628e7c1e99b9fb0e45dd0d7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:40:2b:6d:4a:e8:26:37:78:0a:5a:55:04:
dd:a6:ba:45:a5:96:65:39:53:70:1a:2c:d4:63:8f:
a0:6a:bb:db:bc:61:a8:85:9e:2f:e3:55:52:2e:e0:
0b:b1:e3:f7:93:9a:87:36:77:d3:d4:ea:71:54:8b:
20:75:6b:33:90:1e:2d:25:d9:8d:13:58:f0:f4:f3:
1e:6a:24:00:11:c0:9b:a0:7c:32:c8:16:a1:28:e5:
e4:1d:f1:c7:21:ab:c9:be:ea:e6:26:4d:b4:08:65:
91:c2:c7:b0:ab:6f:06:70:6b:2d:ef:e6:6a:61:5e:
6d:28:d8:a8:e4:b6:65:d8:3b:78:a3:d0:6b:f8:28:
dd:91:44:fe:c7:53:0e:49:08:cc:5a:75:e5:54:7c:
31:07:02:88:b1:bc:68:4e:bf:8c:10:c4:c2:b3:f3:
64:70:92:a1:eb:2b:ea:e1:93:df:bf:fb:ad:95:c8:
ed:76:5a:7d:80:3f:48:3c:77:9b:25:98:7a:70:7b:
c5:c2:8c:b5:4c:7a:06:c5:5c:09:8a:29:de:ce:89:
f2:0d:fd:00:7a:46:8d:7e:f3:74:4d:cc:5f:f4:9f:
34:3d:8a:df:78:56:18:d6:44:11:f4:61:ea:cc:b1:
ef:d2:b4:74:72:fb:f8:86:fd:a8:49:af:36:8b:35:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:9C:2E:15:B5:35:A6:28:E7:C1:E9:9B:9F:B0:E4:5D:D0:D7:A0
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e7:94:1b:3e:b9:ce:bc:a7:17:22:e6:f2:7e:71:84:24:16:
7e:2d:bb:8f:5c:f4:7e:07:e3:f5:eb:6a:4e:cf:c7:67:a2:bf:
85:6d:e1:93:a0:81:45:28:c3:f2:0f:78:e5:62:e5:5d:41:ba:
b4:6e:e7:ac:31:b1:ca:f5:83:c5:68:8a:6f:d8:b4:de:d7:a6:
be:7f:76:7a:a2:58:ab:e0:23:34:75:86:e7:cf:06:ff:bd:e5:
69:4a:29:f6:75:cb:eb:13:8e:a8:f1:6a:70:fe:ce:92:63:b7:
c4:b9:bd:e6:74:23:7b:44:3e:7a:28:0f:ed:32:b5:28:e5:17:
c0:e0:f2:b0:30:a6:97:40:bc:84:78:fb:dc:e6:b7:7e:d2:53:
aa:0c:da:13:99:67:2c:a0:69:0c:ba:d4:a8:33:e4:39:3c:92:
00:b9:7f:19:5d:d4:cd:5e:ed:eb:03:bf:9d:9a:c9:22:4a:42:
bb:1a:e0:12:09:09:b4:de:da:fe:ea:c0:30:b9:eb:f0:24:cb:
de:6f:43:9b:0b:e3:c4:33:17:5d:6f:e1:7d:30:59:0c:19:81:
d6:cf:e5:3f:fb:70:ce:d0:f2:5a:ca:72:63:51:4e:3c:0f:e8:
92:b4:6a:44:ef:54:1b:39:4c:59:ed:77:66:6e:ca:55:42:67:
0f:c0:ec:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvY3z3czxzbwVkWsh8yUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2
ZTk2NDEwHhcNMjYwNDI3MDcwMDQ1WhcNMjYwNDI4MDcwMDQ1WjAzMTEwLwYDVQQD
EygwY2FiOWMyZTE1YjUzNWE2MjhlN2MxZTk5YjlmYjBlNDVkZDBkN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTtAK21K6CY3eApaVQTdprpFpZZl
OVNwGizUY4+garvbvGGohZ4v41VSLuALseP3k5qHNnfT1OpxVIsgdWszkB4tJdmN
E1jw9PMeaiQAEcCboHwyyBahKOXkHfHHIavJvurmJk20CGWRwsewq28GcGst7+Zq
YV5tKNio5LZl2Dt4o9Br+CjdkUT+x1MOSQjMWnXlVHwxBwKIsbxoTr+MEMTCs/Nk
cJKh6yvq4ZPfv/utlcjtdlp9gD9IPHebJZh6cHvFwoy1THoGxVwJiinezonyDf0A
ekaNfvN0Tcxf9J80PYrfeFYY1kQR9GHqzLHv0rR0cvv4hv2oSa82izUPeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyrnC4VtTWmKOfB6ZufsORd0NegMB8GA1UdIwQY
MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt
NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3
LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUueUGz65
zrynFyLm8n5xhCQWfi27j1z0fgfj9etqTs/HZ6K/hW3hk6CBRSjD8g945WLlXUG6
tG7nrDGxyvWDxWiKb9i03temvn92eqJYq+AjNHWG588G/73laUop9nXL6xOOqPFq
cP7OkmO3xLm95nQje0Q+eigP7TK1KOUXwODysDCml0C8hHj73Oa3ftJTqgzaE5ln
LKBpDLrUqDPkOTySALl/GV3UzV7t6wO/nZrJIkpCuxrgEgkJtN7a/urAMLnr8CTL
3m9DmwvjxDMXXW/hfTBZDBmB1s/lP/twztDyWspyY1FOPA/okrRqRO9UGzlMWe13
Zm7KVUJnD8DsZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:25 2026 by rpki-client