Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: YJXnuKYql5EnLTHrqN9AAmbrZh9LQYPJx4gV3wLpwWU=
Subject key identifier: 93:B0:45:2B:FD:30:4D:B4:6A:90:37:D5:87:B7:8A:1F:55:6A:83:FD
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 019D9962A85CCA43A716B9CCADC6C49C5D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 1804
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: BWJ3BrEyxK2EcqCtsk9jRdHJiFwW2OeIkrSa9XnzDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a8:5c:ca:43:a7:16:b9:cc:ad:c6:c4:9c:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=93b0452bfd304db46a9037d587b78a1f556a83fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:88:fe:81:f7:ce:bb:f7:6a:b6:72:53:59:
4a:c2:8a:9c:bf:58:0d:aa:16:c9:9f:fa:97:ab:c2:
d6:4a:8c:fe:2e:db:8e:ee:86:de:e0:d2:71:17:51:
63:11:04:57:e4:be:a6:97:51:e6:75:3c:0b:a5:0c:
2d:20:2f:0d:8a:b6:cc:8c:65:8f:be:de:e5:26:a8:
e6:ef:cd:f4:8e:5a:7b:77:55:84:95:44:d5:e6:ce:
bf:fd:04:3f:14:11:2a:46:13:17:0e:0e:b8:25:78:
37:d6:65:09:6d:e7:d2:69:64:cc:e2:ea:a1:77:af:
87:04:3d:dd:ec:bf:7a:d4:cb:48:83:ad:f7:52:dc:
f3:ab:f1:fb:24:e9:73:ae:72:c9:20:91:8b:76:dd:
23:22:21:25:89:b4:50:ba:e2:1c:ee:26:4f:02:2d:
86:af:56:86:ac:26:c3:13:f5:a1:cd:0d:5f:01:41:
40:97:db:ea:57:92:9c:4b:66:34:c9:32:4a:aa:d7:
b1:59:35:96:b9:f3:ed:8c:cf:3c:16:9c:5d:e9:71:
5f:df:aa:2c:3c:1c:b8:86:a1:a7:b4:fe:f1:35:5d:
a1:d0:c6:69:f3:d6:6b:d6:ef:1f:26:d5:d7:cb:8e:
6f:66:22:93:5c:c1:98:57:37:47:cb:fb:9b:e7:b6:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:45:2B:FD:30:4D:B4:6A:90:37:D5:87:B7:8A:1F:55:6A:83:FD
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:ed:06:8a:cc:08:1f:a2:96:7e:84:2c:79:af:7e:c9:37:
de:5e:b6:b9:33:68:b9:f7:67:96:2c:9b:63:32:ca:bc:03:eb:
46:55:39:a0:c1:c9:f0:db:bb:dc:e3:12:11:82:78:32:49:d0:
e1:0c:39:35:60:ab:d5:cb:08:fd:51:31:9e:67:de:d5:d6:a7:
97:15:32:87:0b:9e:15:40:14:c3:c8:90:be:bc:c8:9d:51:00:
d0:fe:d7:80:63:ee:b1:87:9e:97:f8:58:c9:b6:56:26:2e:d2:
6b:18:ae:3c:d9:f2:45:fe:71:fe:6c:c5:8b:27:a8:f5:d0:03:
e1:50:1d:7b:c9:b5:a3:f9:1e:05:00:b4:6c:a0:e9:66:6b:fd:
90:8d:6f:34:ab:ea:1b:2b:cb:3c:76:bf:67:36:ac:2f:23:a6:
3b:eb:e1:9d:fd:fa:fc:ca:64:5f:3c:2c:d4:43:04:31:de:f0:
4d:3d:fb:45:10:cd:bd:d5:14:b3:5f:c6:40:f8:59:e9:a5:3b:
d9:db:7f:ae:fd:6e:ee:dd:39:a9:cb:9d:c5:ba:78:a6:be:0f:
ae:13:dd:07:f6:35:2c:37:34:d1:32:9f:14:3e:bb:ff:c1:a2:
93:6b:aa:9b:c5:60:45:d6:a2:99:5a:e9:d6:ea:05:ba:c1:1a:
e0:f8:7b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYqhcykOnFrnMrcbEnF2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5
MGYyYTQwHhcNMjYwNDE3MDMwMTEyWhcNMjYwNDE4MDMwMTEyWjAzMTEwLwYDVQQD
Eyg5M2IwNDUyYmZkMzA0ZGI0NmE5MDM3ZDU4N2I3OGExZjU1NmE4M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKSI/oH3zrv3arZyU1lKwoqcv1gN
qhbJn/qXq8LWSoz+LtuO7obe4NJxF1FjEQRX5L6ml1HmdTwLpQwtIC8NirbMjGWP
vt7lJqjm7830jlp7d1WElUTV5s6//QQ/FBEqRhMXDg64JXg31mUJbefSaWTM4uqh
d6+HBD3d7L961MtIg633Utzzq/H7JOlzrnLJIJGLdt0jIiElibRQuuIc7iZPAi2G
r1aGrCbDE/WhzQ1fAUFAl9vqV5KcS2Y0yTJKqtexWTWWufPtjM88Fpxd6XFf36os
PBy4hqGntP7xNV2h0MZp89Zr1u8fJtXXy45vZiKTXMGYVzdHy/ub57a2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOwRSv9ME20apA31Ye3ih9VaoP9MB8GA1UdIwQY
MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt
Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw
LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrftBorM
CB+iln6ELHmvfsk33l62uTNoufdnliybYzLKvAPrRlU5oMHJ8Nu73OMSEYJ4MknQ
4Qw5NWCr1csI/VExnmfe1danlxUyhwueFUAUw8iQvrzInVEA0P7XgGPusYeel/hY
ybZWJi7SaxiuPNnyRf5x/mzFiyeo9dAD4VAde8m1o/keBQC0bKDpZmv9kI1vNKvq
GyvLPHa/ZzasLyOmO+vhnf36/MpkXzws1EMEMd7wTT37RRDNvdUUs1/GQPhZ6aU7
2dt/rv1u7t05qcudxbp4pr4PrhPdB/Y1LDc00TKfFD67/8Gik2uqm8VgRdaimVrp
1uoFusEa4Ph7SQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:56 2026 by rpki-client