Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: Ms69zkXkC4/lAE1say8Nvk4Rgq6xAhBsVGOUTDiz06Q=
Subject key identifier: 72:B6:A5:58:5D:AE:00:24:EF:3E:40:4A:67:3E:12:57:57:56:72:E4
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019D98BD769CCD84BDA093D8941DE4363DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:46 +0000
Manifest this update: Fri 17 Apr 2026 00:00:46 +0000
Manifest next update: Sat 18 Apr 2026 00:00:46 +0000
Files and hashes: 1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: gH+W/0nw+URj3rnkYXpioY7Y4n7ng1qFyfPFNXKCXrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:76:9c:cd:84:bd:a0:93:d8:94:1d:e4:36:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Apr 17 00:00:46 2026 GMT
Not After : Apr 18 00:00:46 2026 GMT
Subject: CN=72b6a5585dae0024ef3e404a673e1257575672e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:85:6d:32:8f:f3:48:02:a8:5a:00:7b:62:
2e:5f:73:2e:eb:5f:dd:78:da:5e:41:96:86:9a:cd:
89:58:a9:dd:43:1d:9f:9a:4e:ae:88:c8:e8:f0:5c:
cd:59:67:2a:e9:90:4f:b4:a5:8d:94:32:23:4a:2c:
4a:53:36:e1:74:fd:57:56:55:32:be:bf:84:cf:f5:
a0:e2:84:c2:9f:94:00:9e:b5:19:fb:77:8b:f0:a1:
a8:28:6c:a2:97:d3:f7:e0:22:8e:95:ea:7a:82:34:
c6:03:7c:47:40:ef:b2:75:04:2a:6d:86:b7:49:78:
98:db:ac:1b:06:71:d0:9a:64:69:31:03:61:a9:02:
03:92:d0:f3:56:f6:48:7c:34:ec:c3:c8:f1:60:18:
05:64:a5:09:0d:84:d4:ef:66:5d:86:87:c6:4e:0c:
44:73:41:cc:8b:26:dc:c7:f8:cf:a5:f4:34:3d:40:
f2:1c:40:cc:d7:08:c0:0d:20:36:c9:da:ce:47:0c:
61:85:0f:4c:44:6b:3d:b5:ea:fd:b9:f1:51:4c:85:
8c:7c:7d:d8:d7:b2:72:50:cb:d2:53:bf:f7:17:60:
bd:6e:60:fd:f0:2a:6f:2a:99:77:ea:8c:db:a0:df:
b6:c5:c7:b6:56:94:60:af:16:d0:2a:75:c2:b9:7e:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:A5:58:5D:AE:00:24:EF:3E:40:4A:67:3E:12:57:57:56:72:E4
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:20:b7:23:a9:31:33:ae:58:f3:7f:db:36:4e:46:7b:5e:7e:
ef:84:6a:75:0f:82:79:c3:99:bd:f8:6e:4a:25:88:fb:b9:88:
0e:f3:c0:16:3c:4b:b4:ee:71:b3:47:0e:ed:47:0a:c9:22:ba:
7a:2a:e2:1f:f7:fc:dc:f8:8b:59:0e:6d:5a:64:65:8a:f3:7e:
6e:c7:e3:82:0e:9a:c6:c2:e2:26:d4:48:f6:d1:e1:eb:5e:aa:
e7:2c:99:b9:ff:7d:42:59:4c:6e:ef:40:e5:2f:8c:73:e2:7b:
0d:87:f7:5c:db:7b:10:44:2d:e9:82:61:b2:2b:b9:1a:b3:24:
2a:9a:23:53:8c:aa:a2:d2:bd:6c:2b:0d:75:d1:62:f3:e5:bd:
05:96:a3:12:2b:aa:7b:80:61:68:cf:de:49:d2:f5:4b:e1:00:
89:99:4f:f1:aa:ba:1e:63:30:83:5f:d7:e9:02:c9:49:63:3d:
0a:9f:71:77:7f:35:b1:4c:89:c9:b3:a2:35:4f:c3:bf:2c:fd:
e7:11:a0:1a:84:6d:63:5e:f3:a4:e0:e4:e1:80:31:a0:cd:3e:
f8:47:2f:98:a1:b9:3a:a1:41:d8:2c:7e:00:c0:8d:e8:d8:f1:
1a:78:e7:97:1e:d4:a6:4f:f9:31:59:ba:63:9c:e9:fc:e8:32:
bc:21:16:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvXaczYS9oJPYlB3kNj3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlN2Q2ZjU1YTEzYjAwMWU3NDAxZjQwZWFhYWViODJmNjdi
ZDQyMmUwHhcNMjYwNDE3MDAwMDQ2WhcNMjYwNDE4MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg3MmI2YTU1ODVkYWUwMDI0ZWYzZTQwNGE2NzNlMTI1NzU3NTY3MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodqFbTKP80gCqFoAe2IuX3Mu61/d
eNpeQZaGms2JWKndQx2fmk6uiMjo8FzNWWcq6ZBPtKWNlDIjSixKUzbhdP1XVlUy
vr+Ez/Wg4oTCn5QAnrUZ+3eL8KGoKGyil9P34CKOlep6gjTGA3xHQO+ydQQqbYa3
SXiY26wbBnHQmmRpMQNhqQIDktDzVvZIfDTsw8jxYBgFZKUJDYTU72ZdhofGTgxE
c0HMiybcx/jPpfQ0PUDyHEDM1wjADSA2ydrORwxhhQ9MRGs9ter9ufFRTIWMfH3Y
17JyUMvSU7/3F2C9bmD98CpvKpl36ozboN+2xce2VpRgrxbQKnXCuX7sXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK2pVhdrgAk7z5ASmc+EldXVnLkMB8GA1UdIwQY
MBaAFC59b1WhOwAedAH0DqquuC9nvUIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mY2ZkOGMtODg3MS00ZDZhLWI0YTUt
ZDY1YjY1NGM5OWM1LzEvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mY2ZkOGMtODg3MS00ZDZhLWI0YTUtZDY1YjY1NGM5OWM1
LzEvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSC3I6kx
M65Y83/bNk5Ge15+74RqdQ+CecOZvfhuSiWI+7mIDvPAFjxLtO5xs0cO7UcKySK6
eiriH/f83PiLWQ5tWmRlivN+bsfjgg6axsLiJtRI9tHh616q5yyZuf99QllMbu9A
5S+Mc+J7DYf3XNt7EEQt6YJhsiu5GrMkKpojU4yqotK9bCsNddFi8+W9BZajEiuq
e4BhaM/eSdL1S+EAiZlP8aq6HmMwg1/X6QLJSWM9Cp9xd381sUyJybOiNU/Dvyz9
5xGgGoRtY17zpODk4YAxoM0++EcvmKG5OqFB2Cx+AMCN6NjxGnjnlx7Upk/5MVm6
Y5zp/OgyvCEW8A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:21 2026 by rpki-client