Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: CtgvgQzk+SZri+MNLMj3J1dfCKplFDU8Z8jbZureRlA=
Subject key identifier: 95:AF:D5:F3:68:DE:66:3D:4F:DB:87:EF:58:AA:96:CB:70:82:03:53
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019D9A0745480AB28B87418B3314FE8D3C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:00 +0000
Manifest this update: Fri 17 Apr 2026 06:01:00 +0000
Manifest next update: Sat 18 Apr 2026 06:01:00 +0000
Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=)
2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: a3Hy/sn0mZVAkNciD9oFTgvyXm5mrxPsp6liFz+xmSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:45:48:0a:b2:8b:87:41:8b:33:14:fe:8d:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Apr 17 06:01:00 2026 GMT
Not After : Apr 18 06:01:00 2026 GMT
Subject: CN=95afd5f368de663d4fdb87ef58aa96cb70820353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:b8:75:78:da:a0:5b:d0:53:a3:45:76:52:
35:a9:c0:46:39:b8:09:02:a3:6e:96:47:13:90:86:
8b:95:67:c8:5c:64:b4:12:20:b7:af:0f:d7:70:3c:
98:b7:d1:98:de:2e:ab:58:fa:fd:17:65:7e:85:93:
96:bd:93:9d:b5:ef:ca:ab:2d:59:9b:6d:75:a8:4a:
c9:e1:a4:db:45:ca:63:39:12:d0:be:08:d5:6d:e4:
e7:20:ff:64:4e:2d:da:e8:ca:40:9a:44:2d:b9:88:
1e:52:09:79:f0:43:4a:fd:0f:78:ae:94:b1:a1:39:
3f:cd:41:f3:db:41:be:a9:41:b8:5a:52:33:79:05:
57:3f:6d:31:a7:a0:44:61:08:e6:3b:28:44:1d:14:
9f:18:71:23:5e:8d:ef:cd:53:a2:ee:9d:cf:e9:5a:
9b:fc:2e:8b:56:25:56:b1:c3:0f:75:bd:b0:63:9f:
83:6e:9e:0d:fd:24:28:fd:f0:41:5e:6c:db:88:4d:
57:10:53:6b:fa:a4:f3:d0:e8:0e:2e:bd:7a:d9:57:
a3:39:6c:09:01:76:d3:45:be:16:04:5d:c2:72:d7:
44:fe:77:d3:19:1b:8e:f5:f0:ce:e8:29:43:9c:8f:
50:a9:17:21:3e:bb:ca:ac:ba:ec:b0:46:e3:ba:f0:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:D5:F3:68:DE:66:3D:4F:DB:87:EF:58:AA:96:CB:70:82:03:53
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:39:30:29:79:78:28:2a:c4:42:23:6c:17:85:76:71:a5:64:
22:d4:8d:ca:98:ff:93:f0:4f:01:97:63:d0:9c:43:41:c8:c2:
4d:32:8a:f4:5f:63:6a:e3:71:11:18:ce:60:f9:5d:5f:e3:3c:
5f:6e:d0:51:fb:fa:5a:d2:e9:2c:5b:f7:a0:b6:9b:4f:29:30:
b6:91:2f:79:2e:5c:83:3b:51:7d:ab:df:68:37:70:75:f2:0d:
87:24:ba:77:92:fd:73:4b:49:5a:2a:d0:50:bc:8b:ae:17:4d:
1d:b9:80:e2:5f:be:1b:0a:d0:7a:98:58:4b:6f:20:9d:44:0c:
5c:7f:70:28:91:97:34:06:42:b0:aa:da:fc:5d:1f:b1:4c:0a:
bb:37:d5:2f:e4:a4:56:70:cd:ef:ed:b7:06:0c:97:82:81:2d:
da:63:c2:9d:aa:af:03:60:01:8a:61:51:01:72:1c:8a:9b:76:
51:e0:ef:08:fe:21:df:cd:1c:bf:1b:f1:b3:39:a7:1a:0e:5d:
db:86:0d:21:55:c5:73:98:f7:36:b4:6c:c6:7a:3d:3f:13:dd:
3d:02:e1:f2:68:d3:fe:a5:22:a4:65:61:38:de:ed:2f:84:d9:
3b:bd:85:7d:90:df:a8:4e:a9:d3:d8:6e:b9:fb:8d:8f:3e:9c:
5d:38:a0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB0VICrKLh0GLMxT+jTwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh
N2RlYmMwHhcNMjYwNDE3MDYwMTAwWhcNMjYwNDE4MDYwMTAwWjAzMTEwLwYDVQQD
Eyg5NWFmZDVmMzY4ZGU2NjNkNGZkYjg3ZWY1OGFhOTZjYjcwODIwMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMW4dXjaoFvQU6NFdlI1qcBGObgJ
AqNulkcTkIaLlWfIXGS0EiC3rw/XcDyYt9GY3i6rWPr9F2V+hZOWvZOdte/Kqy1Z
m211qErJ4aTbRcpjORLQvgjVbeTnIP9kTi3a6MpAmkQtuYgeUgl58ENK/Q94rpSx
oTk/zUHz20G+qUG4WlIzeQVXP20xp6BEYQjmOyhEHRSfGHEjXo3vzVOi7p3P6Vqb
/C6LViVWscMPdb2wY5+Dbp4N/SQo/fBBXmzbiE1XEFNr+qTz0OgOLr162VejOWwJ
AXbTRb4WBF3CctdE/nfTGRuO9fDO6ClDnI9QqRchPrvKrLrssEbjuvClrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWv1fNo3mY9T9uH71iqlstwggNTMB8GA1UdIwQY
MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt
NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi
LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1TkwKXl4
KCrEQiNsF4V2caVkItSNypj/k/BPAZdj0JxDQcjCTTKK9F9jauNxERjOYPldX+M8
X27QUfv6WtLpLFv3oLabTykwtpEveS5cgztRfavfaDdwdfINhyS6d5L9c0tJWirQ
ULyLrhdNHbmA4l++GwrQephYS28gnUQMXH9wKJGXNAZCsKra/F0fsUwKuzfVL+Sk
VnDN7+23BgyXgoEt2mPCnaqvA2ABimFRAXIcipt2UeDvCP4h380cvxvxszmnGg5d
24YNIVXFc5j3NrRsxno9PxPdPQLh8mjT/qUipGVhON7tL4TZO72FfZDfqE6p09hu
ufuNjz6cXTig3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:11 2026 by rpki-client