Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: lVZnXP8FE9g//j98UOoav8eDTOV9O1duec1EKRIMKok=
Subject key identifier: 9B:DF:C0:D4:7E:87:38:B4:F8:1D:BF:A1:50:0C:A7:EF:CA:20:0C:48
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 019D985048A5AF5636783232B465345B91DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:31 +0000
Manifest this update: Thu 16 Apr 2026 22:01:31 +0000
Manifest next update: Fri 17 Apr 2026 22:01:31 +0000
Files and hashes: 1: cUjXL3AkU0vzCeL7XNA5hx74zv4.roa (hash: M5YlQ4HoZ45gNTliPTDu0USjnaLFnkhBumUlmweXtD8=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: 57V2uK0C2pKFV3MZW5GGL2au2+AGicZM2B3zEFgWQxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:48:a5:af:56:36:78:32:32:b4:65:34:5b:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Apr 16 22:01:31 2026 GMT
Not After : Apr 17 22:01:31 2026 GMT
Subject: CN=9bdfc0d47e8738b4f81dbfa1500ca7efca200c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:6e:4a:46:89:c0:74:6d:17:7d:1a:69:fe:
fd:0d:6b:46:bc:85:d8:dc:20:7a:a4:3c:b8:1c:fd:
5e:aa:cd:18:2f:45:d4:e4:0a:a7:03:85:6b:59:cd:
4f:87:1f:95:40:c4:1f:b0:67:d7:05:f5:dd:63:ae:
30:2d:8e:84:45:f1:e3:71:55:6a:f6:92:d9:0f:04:
05:79:2a:53:a7:e8:1d:98:1c:55:1a:7d:fb:1f:86:
51:35:93:5e:3c:e9:13:20:3a:30:60:e8:22:00:de:
95:5c:48:20:28:ab:dd:d2:8d:d7:1f:1c:64:d2:44:
94:7a:76:36:21:c0:4e:6f:a9:e1:28:76:2a:e9:c6:
dd:b6:cc:aa:f9:e2:ce:12:73:1c:09:a6:ff:bc:b7:
59:61:c0:31:61:8b:f5:a0:bb:a8:68:d1:98:ae:0c:
70:3d:7e:d2:b8:b4:86:8f:10:2e:ad:15:36:29:8e:
cb:f0:9b:da:b1:9b:a9:89:2c:e8:32:de:40:2e:61:
c5:e0:c3:4d:15:e5:aa:3b:eb:8e:9a:41:dc:0b:74:
f1:02:23:8f:21:3c:52:95:b5:b5:42:c8:34:c0:71:
7b:ca:87:34:fd:a0:3c:e5:24:2c:a6:b0:5f:c5:92:
f4:c6:6c:88:d5:1b:82:4f:fa:7d:94:c8:19:64:cf:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:C0:D4:7E:87:38:B4:F8:1D:BF:A1:50:0C:A7:EF:CA:20:0C:48
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:5d:8f:24:e6:f8:39:b1:73:cd:82:e9:c0:6e:3f:57:02:
e9:50:c0:9c:76:55:8b:4c:27:1d:29:6b:5c:59:e2:1f:89:aa:
29:bd:a8:bd:6b:3b:ae:14:cf:f5:7d:53:39:96:7e:4d:a3:ac:
df:bd:16:45:92:8f:76:64:97:b0:45:3b:56:b7:42:f7:99:2d:
54:06:e8:b2:ec:4f:3f:aa:28:00:e7:51:eb:5d:24:78:b6:1f:
12:d0:1c:fb:78:e6:c0:ac:ef:15:d0:7f:94:23:e2:cc:74:a5:
21:1c:8c:68:da:ab:1a:55:84:6d:c5:e3:14:3e:7d:01:ae:6b:
78:a7:7c:f0:45:d6:ef:74:e6:93:a0:6f:e9:51:be:57:a7:84:
73:36:c2:18:3d:a0:79:14:71:dd:7f:46:fe:74:c4:68:58:26:
69:e0:37:b8:8a:22:5c:87:e8:b1:d4:04:ec:e1:f4:a1:11:92:
c7:df:a0:20:8b:77:df:a4:e2:d4:89:7c:f9:92:9b:5c:0b:37:
db:1c:87:e9:16:18:be:c7:fa:5e:1e:2d:05:5e:f3:65:57:95:
10:90:36:09:e7:61:e3:0b:94:3b:4f:e1:e2:42:1c:eb:b3:9c:
5a:ad:b3:5c:9f:33:4f:cd:7a:8b:12:9d:bf:ec:9b:78:f6:31:
94:d4:ad:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEilr1Y2eDIytGU0W5HcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjExYTMxNjBkYjhjZTc5MThiZjNlYzU4YjVjNWUxZTNl
OTM4MjEwHhcNMjYwNDE2MjIwMTMxWhcNMjYwNDE3MjIwMTMxWjAzMTEwLwYDVQQD
Eyg5YmRmYzBkNDdlODczOGI0ZjgxZGJmYTE1MDBjYTdlZmNhMjAwYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPJuSkaJwHRtF30aaf79DWtGvIXY
3CB6pDy4HP1eqs0YL0XU5AqnA4VrWc1Phx+VQMQfsGfXBfXdY64wLY6ERfHjcVVq
9pLZDwQFeSpTp+gdmBxVGn37H4ZRNZNePOkTIDowYOgiAN6VXEggKKvd0o3XHxxk
0kSUenY2IcBOb6nhKHYq6cbdtsyq+eLOEnMcCab/vLdZYcAxYYv1oLuoaNGYrgxw
PX7SuLSGjxAurRU2KY7L8JvasZupiSzoMt5ALmHF4MNNFeWqO+uOmkHcC3TxAiOP
ITxSlbW1Qsg0wHF7yoc0/aA85SQsprBfxZL0xmyI1RuCT/p9lMgZZM8WJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvfwNR+hzi0+B2/oVAMp+/KIAxIMB8GA1UdIwQY
MBaAFH3xGjFg24znkYvz7Fi1xeHj6TghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0Mzkt
ZTRiNjZhM2ZlNWJjLzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0MzktZTRiNjZhM2ZlNWJj
LzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZddjyTm
+Dmxc82C6cBuP1cC6VDAnHZVi0wnHSlrXFniH4mqKb2ovWs7rhTP9X1TOZZ+TaOs
370WRZKPdmSXsEU7VrdC95ktVAbosuxPP6ooAOdR610keLYfEtAc+3jmwKzvFdB/
lCPizHSlIRyMaNqrGlWEbcXjFD59Aa5reKd88EXW73Tmk6Bv6VG+V6eEczbCGD2g
eRRx3X9G/nTEaFgmaeA3uIoiXIfosdQE7OH0oRGSx9+gIIt336Ti1Il8+ZKbXAs3
2xyH6RYYvsf6Xh4tBV7zZVeVEJA2Cedh4wuUO0/h4kIc67OcWq2zXJ8zT816ixKd
v+ybePYxlNStIA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:33 2026 by rpki-client