Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier: 8RUGEm8c3v1KaM2JNkDgHn3roIxju0qNx5BaXFzyS1g=
Subject key identifier: CB:A5:42:24:0E:B6:B0:2A:01:F2:FE:0F:D6:BF:F2:6E:7F:CB:12:94
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial: 019D9A7539FCB65BCD1E2E6513F56C4C8CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number: 1898
Signing time: Fri 17 Apr 2026 08:01:06 +0000
Manifest this update: Fri 17 Apr 2026 08:01:06 +0000
Manifest next update: Sat 18 Apr 2026 08:01:06 +0000
Files and hashes: 1: LmB2MYMxNgUJ59HkzaXP8nXh0xQ.roa (hash: Jc/e+cQXtvoRy8CJ502VG5p3rbc0OztFHir4imY41rA=)
2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: /19eWCo+qezCP+vNG4GAXpxE7jWoiFoXDvIGuOgCNzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:39:fc:b6:5b:cd:1e:2e:65:13:f5:6c:4c:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
Validity
Not Before: Apr 17 08:01:06 2026 GMT
Not After : Apr 18 08:01:06 2026 GMT
Subject: CN=cba542240eb6b02a01f2fe0fd6bff26e7fcb1294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:98:de:a0:cb:96:52:55:3b:d5:3e:a3:bd:
2e:44:fb:0f:42:49:8d:d9:5b:9c:6b:2c:c5:2e:61:
d3:97:96:a8:f5:47:98:d4:73:4b:61:27:2f:c1:db:
de:9d:25:63:05:25:21:7b:9e:83:03:35:76:3d:21:
40:cb:0b:f7:87:60:67:d2:63:70:2c:c6:b7:a7:3b:
60:f8:11:b9:6d:89:ea:06:f7:a0:b6:43:93:3f:00:
5b:d1:4a:3c:20:e0:82:95:03:24:ad:92:87:af:ff:
f6:dd:64:05:7f:47:d3:9e:fa:3e:2d:05:ba:fa:40:
4d:af:f1:6b:6f:30:8f:84:14:39:7b:f1:77:c1:bb:
4e:d4:5f:e8:b9:5d:0e:af:70:ab:aa:6f:aa:be:4f:
a5:06:ef:af:c9:61:89:b8:c2:95:12:43:1c:a1:69:
c3:68:a3:dd:7a:e9:b8:6a:f3:b0:0a:6f:b3:a0:f3:
bb:c4:9a:8c:66:d9:68:a8:19:29:f0:a4:e2:4c:71:
7f:c7:54:35:fb:58:31:e3:41:63:9d:f1:9b:0c:c0:
9b:dc:03:14:5f:39:bf:9c:0c:f5:45:0b:2d:56:32:
b3:e2:dd:f9:92:1a:50:20:75:a7:bc:66:dd:12:aa:
c8:c3:f9:38:6d:01:20:da:09:9e:06:05:fd:4e:cd:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:42:24:0E:B6:B0:2A:01:F2:FE:0F:D6:BF:F2:6E:7F:CB:12:94
X509v3 Authority Key Identifier:
keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e9:d0:c9:17:e1:38:6d:c7:5c:a8:ba:41:4d:d4:c2:64:24:
d7:aa:ae:bf:d6:5a:63:09:a4:27:7f:5e:06:04:d3:80:b7:47:
58:8c:11:40:c6:2d:65:2e:00:c3:54:b8:9b:18:b3:8a:d3:50:
5c:83:1b:e7:28:10:2f:2b:e0:dd:09:bc:85:52:90:ab:21:e1:
fa:b1:75:45:ce:2b:36:5d:88:ac:64:ea:c5:b3:bf:ee:cf:26:
c1:83:67:2e:8e:b7:5f:2c:07:9c:65:51:f1:d3:0e:96:69:ff:
8c:74:55:16:1b:a2:08:b6:c1:8f:f2:06:76:aa:db:4a:59:d2:
26:d3:e5:c3:dc:47:cd:f8:8f:bb:3d:0e:74:0c:6b:f0:c3:b1:
e9:e0:bc:8a:d6:c3:69:c8:56:29:2a:24:23:5d:73:5a:c0:de:
b0:5e:43:ef:d2:ff:12:f6:d4:6f:df:b7:b0:ef:6b:f9:6d:07:
ed:5b:bd:12:50:f2:3c:e0:c3:41:d0:c4:81:bb:3a:28:22:9b:
5b:65:7e:cd:3b:4a:cd:40:4e:10:be:91:2a:15:08:68:54:26:
a2:91:0d:9d:3b:0c:57:41:74:26:89:18:7e:08:3e:76:fd:42:
33:75:80:50:7b:81:47:0e:87:45:89:ae:8e:69:12:c4:83:53:
86:9a:d3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTn8tlvNHi5lE/VsTIzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjI0ZGM5Mzk2ZTU4MGZmNzEyMGYyNTczNTNhNzBjNzIz
NzljOTMwHhcNMjYwNDE3MDgwMTA2WhcNMjYwNDE4MDgwMTA2WjAzMTEwLwYDVQQD
EyhjYmE1NDIyNDBlYjZiMDJhMDFmMmZlMGZkNmJmZjI2ZTdmY2IxMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMOY3qDLllJVO9U+o70uRPsPQkmN
2VucayzFLmHTl5ao9UeY1HNLYScvwdvenSVjBSUhe56DAzV2PSFAywv3h2Bn0mNw
LMa3pztg+BG5bYnqBvegtkOTPwBb0Uo8IOCClQMkrZKHr//23WQFf0fTnvo+LQW6
+kBNr/FrbzCPhBQ5e/F3wbtO1F/ouV0Or3Crqm+qvk+lBu+vyWGJuMKVEkMcoWnD
aKPdeum4avOwCm+zoPO7xJqMZtloqBkp8KTiTHF/x1Q1+1gx40FjnfGbDMCb3AMU
Xzm/nAz1RQstVjKz4t35khpQIHWnvGbdEqrIw/k4bQEg2gmeBgX9Ts17AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMulQiQOtrAqAfL+D9a/8m5/yxKUMB8GA1UdIwQY
MBaAFEYiTck5blgP9xIPJXNTpwxyN5yTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2Qt
ZDMxYTMzZmM1ZTk5LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2QtZDMxYTMzZmM1ZTk5
LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgunQyRfh
OG3HXKi6QU3UwmQk16quv9ZaYwmkJ39eBgTTgLdHWIwRQMYtZS4Aw1S4mxizitNQ
XIMb5ygQLyvg3Qm8hVKQqyHh+rF1Rc4rNl2IrGTqxbO/7s8mwYNnLo63XywHnGVR
8dMOlmn/jHRVFhuiCLbBj/IGdqrbSlnSJtPlw9xHzfiPuz0OdAxr8MOx6eC8itbD
achWKSokI11zWsDesF5D79L/EvbUb9+3sO9r+W0H7Vu9ElDyPODDQdDEgbs6KCKb
W2V+zTtKzUBOEL6RKhUIaFQmopENnTsMV0F0JokYfgg+dv1CM3WAUHuBRw6HRYmu
jmkSxINThprT2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:10 2026 by rpki-client