Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: Iq5FsyNKB6Ov6DlYUn94tL4/VlFRXMPfcLbAWEPq4ZU=
Subject key identifier: DB:63:54:33:3A:2E:E3:AB:A7:91:B5:E5:61:59:D2:34:FC:3C:28:0D
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 019D9AE2F652F5C291694880AB79CE33E083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 11E1
Signing time: Fri 17 Apr 2026 10:00:58 +0000
Manifest this update: Fri 17 Apr 2026 10:00:58 +0000
Manifest next update: Sat 18 Apr 2026 10:00:58 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: NUFxl4IvnVdadK6umIQbNFsuGy03xHqUEcmViM8V+vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f6:52:f5:c2:91:69:48:80:ab:79:ce:33:e0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Apr 17 10:00:58 2026 GMT
Not After : Apr 18 10:00:58 2026 GMT
Subject: CN=db6354333a2ee3aba791b5e56159d234fc3c280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:41:16:29:0a:b6:2c:c3:96:4a:c6:4a:ca:
15:42:2b:c9:6d:c4:e4:3e:37:79:5c:ee:0e:ed:34:
a1:03:ff:3a:41:03:4f:7d:aa:0c:e5:fd:9b:35:9c:
3f:76:15:de:5e:63:19:30:db:be:07:d0:0b:37:54:
be:92:e8:1a:d8:04:7f:af:3d:f4:d6:e4:5a:5c:b7:
84:c0:65:75:8d:c0:de:81:6f:3b:11:9f:b6:38:5b:
da:c0:df:ee:95:05:69:d8:33:66:ad:19:28:c0:14:
6f:ef:76:80:b5:b2:30:fb:06:2e:5f:94:1a:e1:88:
7c:60:fe:dc:fc:c7:1c:0d:54:b1:ad:37:93:bf:2e:
e1:42:9e:cf:bf:5e:04:90:e0:1a:a2:d5:0e:48:ea:
cd:41:95:25:c7:77:04:82:9e:d5:97:62:60:07:4f:
d1:65:aa:30:9c:10:be:4e:9a:3b:11:29:9a:c1:bd:
4d:b3:af:60:33:b5:9f:01:30:08:18:79:2b:1f:d2:
fb:03:46:e4:f2:90:66:04:00:c5:74:4b:3e:0f:01:
0f:0a:39:ba:fc:2b:a6:30:15:4a:e3:cc:a1:6f:79:
81:35:d3:bb:07:01:24:1e:ef:51:3f:a7:11:bb:d1:
00:9a:b3:47:a2:28:c1:51:3b:b1:04:8f:4b:b1:a1:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:54:33:3A:2E:E3:AB:A7:91:B5:E5:61:59:D2:34:FC:3C:28:0D
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:60:4d:d8:45:04:54:ed:e6:ca:83:fb:01:f8:0f:6d:3d:
ac:04:58:3b:08:07:c6:ac:25:56:4b:23:d6:bd:62:01:48:5a:
3a:6e:af:18:7e:b8:20:3f:a3:a5:94:fd:93:5c:03:fc:22:9e:
7a:06:82:4a:10:67:65:e2:b9:35:d2:a1:c4:51:98:ce:dd:c7:
6c:93:3a:78:20:cd:7f:7f:30:0c:92:a0:6c:14:90:ee:14:9b:
13:c3:9f:b4:76:1e:bc:f0:bf:83:c2:53:97:84:fd:b5:fd:54:
e1:fb:6d:16:47:00:c9:91:07:2f:28:e0:cc:e6:99:6a:0e:df:
dc:96:44:ed:39:69:8b:0f:24:f5:3f:16:9b:99:9e:c2:5f:43:
30:e7:9f:e3:b5:bc:74:57:37:ca:00:27:61:c4:03:41:bc:b8:
c4:84:18:d1:70:a0:c0:28:76:c0:df:6b:87:1d:08:e0:68:d4:
96:32:ca:b9:dd:77:8f:4e:f9:a1:15:cb:8b:5d:3d:2a:b6:bc:
c1:17:c8:0a:29:23:43:63:67:5a:fe:af:d8:f0:9a:d4:78:db:
71:30:9c:94:18:86:80:1d:29:8d:58:0a:2b:01:14:f2:1d:a1:
8e:69:b5:08:16:a9:26:64:a9:c5:0c:d8:54:83:96:b5:a9:50:
d0:97:4b:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4vZS9cKRaUiAq3nOM+CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDJjZDVkZDhkNTEzZDRhZTg3ZWNmZGM1NTdlYmY1ZjYy
M2VjMzQwHhcNMjYwNDE3MTAwMDU4WhcNMjYwNDE4MTAwMDU4WjAzMTEwLwYDVQQD
EyhkYjYzNTQzMzNhMmVlM2FiYTc5MWI1ZTU2MTU5ZDIzNGZjM2MyODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp1BFikKtizDlkrGSsoVQivJbcTk
Pjd5XO4O7TShA/86QQNPfaoM5f2bNZw/dhXeXmMZMNu+B9ALN1S+kuga2AR/rz30
1uRaXLeEwGV1jcDegW87EZ+2OFvawN/ulQVp2DNmrRkowBRv73aAtbIw+wYuX5Qa
4Yh8YP7c/MccDVSxrTeTvy7hQp7Pv14EkOAaotUOSOrNQZUlx3cEgp7Vl2JgB0/R
ZaownBC+Tpo7ESmawb1Ns69gM7WfATAIGHkrH9L7A0bk8pBmBADFdEs+DwEPCjm6
/CumMBVK48yhb3mBNdO7BwEkHu9RP6cRu9EAmrNHoijBUTuxBI9LsaHu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtjVDM6LuOrp5G15WFZ0jT8PCgNMB8GA1UdIwQY
MBaAFInSzV3Y1RPUrofs/cVX6/X2I+w0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAt
NWFlMzVjMDMwNjg2LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81YjI5NjAtZDNjNC00MjZkLWJhYjAtNWFlMzVjMDMwNjg2
LzEvaWRMTlhkalZFOVN1aC16OXhWZnI5ZllqN0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG9gTdhF
BFTt5sqD+wH4D209rARYOwgHxqwlVksj1r1iAUhaOm6vGH64ID+jpZT9k1wD/CKe
egaCShBnZeK5NdKhxFGYzt3HbJM6eCDNf38wDJKgbBSQ7hSbE8OftHYevPC/g8JT
l4T9tf1U4fttFkcAyZEHLyjgzOaZag7f3JZE7Tlpiw8k9T8Wm5mewl9DMOef47W8
dFc3ygAnYcQDQby4xIQY0XCgwCh2wN9rhx0I4GjUljLKud13j075oRXLi109Kra8
wRfICikjQ2NnWv6v2PCa1HjbcTCclBiGgB0pjVgKKwEU8h2hjmm1CBapJmSpxQzY
VIOWtalQ0JdLrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:44 2026 by rpki-client