Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: MUCQo5Myxpw4x/fY/EfiIvg5ST8625sUGQmpBh8w1r0=
Subject key identifier: AF:4A:47:2C:E1:B5:6C:FF:53:92:38:83:6E:7A:39:EA:95:2C:5F:EE
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 019D9B510B778E1A0BCFBA7BC1939CC3A85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 17E6
Signing time: Fri 17 Apr 2026 12:01:12 +0000
Manifest this update: Fri 17 Apr 2026 12:01:12 +0000
Manifest next update: Sat 18 Apr 2026 12:01:12 +0000
Files and hashes: 1: 2C6Ya6h31uul1QKjxJOYJtW0-Js.roa (hash: GfQhpseBFat/Xeckvhncromu6LqqPVkLS18vLbabiRM=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: /Gzm3PxOmZKzA5aQfrZIqFIPX+W4oqKFQoFpJ/evPb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:0b:77:8e:1a:0b:cf:ba:7b:c1:93:9c:c3:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Apr 17 12:01:12 2026 GMT
Not After : Apr 18 12:01:12 2026 GMT
Subject: CN=af4a472ce1b56cff539238836e7a39ea952c5fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:69:e9:67:56:18:12:16:ee:ea:03:ec:fa:
ca:31:e2:8e:4f:34:c0:80:a7:fb:c6:20:29:11:e9:
91:5f:78:51:46:2b:43:d2:91:93:d8:59:1e:40:a3:
a1:a7:c8:d9:14:0a:b4:24:bc:6e:6d:6e:17:b8:3c:
94:76:29:a8:b2:93:28:a3:c6:4c:ca:16:43:6a:5f:
5f:5a:f3:7b:73:49:12:92:09:9f:a4:be:69:76:03:
5d:5f:95:4f:fe:0e:42:81:0b:89:b3:d1:5b:6b:f0:
35:5c:62:2d:04:d5:86:93:5d:91:37:6b:6c:11:60:
7f:be:89:d3:02:b2:7a:81:db:dd:fd:a1:3d:58:2f:
8d:af:ed:b3:14:72:1f:bf:42:08:e3:07:8e:a7:7e:
c1:76:6e:bf:c9:7f:94:42:64:1c:c7:0f:92:d7:77:
9b:3f:b5:ee:09:84:81:4e:f4:87:2c:2b:b6:15:7c:
c5:d8:d7:70:79:0f:36:6b:61:26:23:21:6b:5c:16:
b1:47:33:35:84:5b:ff:3a:8d:c0:74:11:77:e1:19:
2f:68:3c:9d:f3:b6:ce:eb:b1:de:bf:a8:26:cd:e3:
8c:01:92:b8:49:d4:c2:8f:40:8c:96:63:ea:42:38:
af:d2:cd:e3:f0:74:07:10:08:76:a3:38:cb:80:62:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4A:47:2C:E1:B5:6C:FF:53:92:38:83:6E:7A:39:EA:95:2C:5F:EE
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:84:af:7d:30:a8:72:a6:d1:0b:24:fe:d6:18:ab:e9:52:27:
75:2d:4c:ae:f9:f7:97:65:5c:87:b2:85:b3:7a:30:f5:3e:ad:
3a:97:c6:7f:77:ce:da:38:5a:c2:a2:55:50:ab:2e:4a:ea:1d:
fa:75:e8:9b:04:53:b8:e8:69:3b:38:3d:a1:80:1a:ba:87:f9:
ac:35:f1:ff:ca:e6:81:14:f4:72:65:2a:cd:e8:33:f1:a0:a8:
f3:3c:2d:11:0f:7f:21:ba:6b:d7:42:ec:c7:38:35:f8:92:54:
0b:7b:b1:4c:f8:df:c8:cb:7c:b8:a4:7b:80:82:c4:3a:fe:5e:
c8:21:59:f8:3d:07:11:dc:65:5a:25:7a:c9:ea:2f:e5:f4:f7:
f0:e2:db:b2:91:cf:c5:32:54:05:31:d1:e3:ad:40:c5:8c:91:
54:5c:9e:e9:c0:dd:6f:b9:fa:d2:5a:58:3f:ff:49:c1:69:66:
85:9c:96:aa:50:fc:59:62:e4:dc:79:4e:9d:5e:7d:ea:03:c6:
40:74:0e:d9:7d:d5:76:f0:0f:7d:56:9c:dd:50:c1:10:6f:e1:
e2:d7:fb:37:2e:b0:e5:5f:c6:c3:5a:2a:1c:8c:a5:ff:22:a6:
d5:23:80:34:7e:12:76:04:be:f5:bc:58:36:eb:6f:ce:f3:0c:
cc:2d:f8:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQt3jhoLz7p7wZOcw6haMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3
MGNlN2QwHhcNMjYwNDE3MTIwMTEyWhcNMjYwNDE4MTIwMTEyWjAzMTEwLwYDVQQD
EyhhZjRhNDcyY2UxYjU2Y2ZmNTM5MjM4ODM2ZTdhMzllYTk1MmM1ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH9p6WdWGBIW7uoD7PrKMeKOTzTA
gKf7xiApEemRX3hRRitD0pGT2FkeQKOhp8jZFAq0JLxubW4XuDyUdimospMoo8ZM
yhZDal9fWvN7c0kSkgmfpL5pdgNdX5VP/g5CgQuJs9Fba/A1XGItBNWGk12RN2ts
EWB/vonTArJ6gdvd/aE9WC+Nr+2zFHIfv0II4weOp37Bdm6/yX+UQmQcxw+S13eb
P7XuCYSBTvSHLCu2FXzF2NdweQ82a2EmIyFrXBaxRzM1hFv/Oo3AdBF34RkvaDyd
87bO67Hev6gmzeOMAZK4SdTCj0CMlmPqQjiv0s3j8HQHEAh2ozjLgGLN3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9KRyzhtWz/U5I4g256OeqVLF/uMB8GA1UdIwQY
MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt
M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh
LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoSvfTCo
cqbRCyT+1hir6VIndS1Mrvn3l2Vch7KFs3ow9T6tOpfGf3fO2jhawqJVUKsuSuod
+nXomwRTuOhpOzg9oYAauof5rDXx/8rmgRT0cmUqzegz8aCo8zwtEQ9/Ibpr10Ls
xzg1+JJUC3uxTPjfyMt8uKR7gILEOv5eyCFZ+D0HEdxlWiV6yeov5fT38OLbspHP
xTJUBTHR461AxYyRVFye6cDdb7n60lpYP/9JwWlmhZyWqlD8WWLk3HlOnV596gPG
QHQO2X3VdvAPfVac3VDBEG/h4tf7Ny6w5V/Gw1oqHIyl/yKm1SOANH4SdgS+9bxY
NutvzvMMzC34Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:40 2026 by rpki-client