
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: naCPPyaauODxeOfE9xHWRJKdlDIplTk+J0h3sv665Ns=
Subject key identifier: B7:5A:85:36:92:75:89:E2:EA:17:1F:FE:14:94:61:E3:01:E7:10:46
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 019DDE0CA14C81ECF127C65AF9FD12FC3BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 18E6
Signing time: Thu 30 Apr 2026 11:01:02 +0000
Manifest this update: Thu 30 Apr 2026 11:01:02 +0000
Manifest next update: Fri 01 May 2026 11:01:02 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: rspxec7MRzg6z9tUbmoSx+WWL0CmrW4Dgx5SiPXjlTI=)
2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:a1:4c:81:ec:f1:27:c6:5a:f9:fd:12:fc:3b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Apr 30 11:01:02 2026 GMT
Not After : May 1 11:01:02 2026 GMT
Subject: CN=b75a8536927589e2ea171ffe149461e301e71046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:81:be:ab:20:f2:2f:32:bb:14:e8:a8:08:
6e:d0:7b:90:96:9e:db:93:52:21:7a:66:da:b3:dd:
4a:14:73:5e:bf:78:f6:a7:f2:6e:c1:c2:01:e6:5c:
b8:28:b4:a3:4b:12:31:8f:55:0d:c9:81:a9:6b:9b:
5b:ca:b7:30:c7:4f:30:cd:5c:27:28:21:74:53:55:
bb:e6:3c:a4:68:a7:71:4a:af:02:1a:ac:50:1b:8e:
fd:9d:55:58:d2:50:9d:b5:92:ae:31:5a:ee:b2:28:
41:dd:2e:6a:71:94:31:a1:3e:c2:63:9c:cf:31:33:
a4:ea:89:4a:d7:1e:43:cd:4b:90:7d:9f:88:6f:e6:
8d:78:59:99:d4:fe:d9:cf:8f:d2:17:7c:6a:13:17:
2f:82:dc:53:df:21:dc:bc:dc:95:55:b3:b0:17:69:
b0:26:6c:f6:e2:ac:74:8c:48:ff:35:c5:fb:04:d4:
4b:48:a7:59:54:c9:9d:91:0b:a0:90:7e:1a:54:a6:
15:c4:bc:c6:d3:db:d4:f6:84:de:b5:d7:42:1c:17:
2b:ab:8d:12:19:ec:62:24:5c:cb:6e:27:00:45:19:
4d:a3:e4:c0:5a:c9:31:9d:0d:6c:6c:84:7b:5f:79:
c3:11:d7:74:03:77:70:c2:82:23:96:86:d2:34:86:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:85:36:92:75:89:E2:EA:17:1F:FE:14:94:61:E3:01:E7:10:46
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:6a:e5:a2:a0:1b:98:e8:9e:aa:6a:03:d7:49:dc:19:9a:
7f:00:f7:3d:67:e6:62:f4:14:27:66:52:27:fa:ba:89:cc:5f:
4c:5b:fd:6d:45:33:bc:65:63:f8:5e:11:c0:c0:0e:02:42:ba:
b7:62:d3:d0:37:1f:88:e9:bd:89:cd:ea:49:b7:75:6b:11:87:
c8:4c:a0:cf:6e:b8:3c:4c:a7:2f:e2:2c:81:02:20:89:26:5c:
3f:37:c3:63:d5:59:70:c3:42:fa:11:71:59:b8:32:8c:f4:3f:
1e:26:e5:f5:24:2a:1c:16:f5:08:d2:88:8b:1e:56:5a:1d:c6:
7e:9b:f8:bf:04:d7:7b:5d:ce:63:3c:7f:c8:2b:50:a4:6a:28:
ca:ab:4f:ab:06:73:2d:ec:83:a7:6a:32:13:dc:f7:cf:b1:0b:
26:ad:b9:e9:6d:02:88:5e:d2:5b:a4:4b:ce:fd:b5:06:c6:3c:
4a:e1:65:66:f2:a5:08:3c:84:ea:1c:71:e6:ea:ee:f7:aa:c4:
e2:f7:2c:1b:9d:a7:e8:cf:95:0a:17:7c:0e:ed:2c:60:78:2e:
c9:c6:d1:eb:ca:b0:52:a0:2c:0e:39:18:45:cf:b6:58:5d:a3:
35:f8:5a:3b:a7:65:50:74:82:bd:38:f5:50:63:a5:15:96:9e:
96:2c:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:41 2026 by rpki-client