Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: HgoV708e+Fin3JWxAj1i22ZrQmmKDWcGXMB9svA4wis=
Subject key identifier: 05:03:14:E3:30:5B:92:55:21:56:91:AC:5F:7C:B4:A8:30:84:FD:56
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019DA29C5C15EA00E50B3D11A5A573E11717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 18CF
Signing time: Sat 18 Apr 2026 22:00:49 +0000
Manifest this update: Sat 18 Apr 2026 22:00:49 +0000
Manifest next update: Sun 19 Apr 2026 22:00:49 +0000
Files and hashes: 1: f4AZIRtQB5gDNGTVG0SqDa4vmXo.roa (hash: 9ufERm7dPXdZ8JI0YQRXJwdfyWGQYDyrJB99NlaPj8c=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: fRqCiXSQQY+BZaLtTYixhDgJ+v1JAwhYaT2r2S60a+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:5c:15:ea:00:e5:0b:3d:11:a5:a5:73:e1:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Apr 18 22:00:49 2026 GMT
Not After : Apr 19 22:00:49 2026 GMT
Subject: CN=050314e3305b9255215691ac5f7cb4a83084fd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:81:39:60:13:e9:e3:4f:96:e7:d6:20:ca:
94:09:71:d0:00:f2:fb:53:f7:c9:97:e2:df:ca:24:
98:65:45:4d:b0:ec:83:b7:52:35:46:a2:a8:6f:38:
e1:22:ee:30:3c:41:a5:ae:92:d1:5f:96:bc:eb:d7:
ad:e0:6b:58:1b:f5:c6:fb:d1:40:54:d4:9f:c6:cd:
96:fc:f9:35:b4:d6:cf:7f:f9:3c:f0:7e:c9:6e:9b:
9c:b1:b8:8c:5f:09:ed:a4:09:74:93:fd:f9:60:89:
e4:15:b2:6d:59:05:71:7b:92:a7:67:1e:67:5a:e4:
7a:48:bd:6f:43:f2:a8:90:56:13:f1:6b:5b:e1:5e:
67:d5:1e:7a:73:67:b2:c5:94:3d:45:fa:f2:03:b4:
9f:44:d4:15:aa:92:79:3a:40:c3:e1:c7:ca:7e:6f:
74:2a:fb:43:e5:7c:06:57:7b:24:7d:3a:af:55:2e:
74:43:8d:3d:eb:69:fa:80:1f:eb:8e:82:0d:1e:04:
74:32:bc:4a:95:39:5a:67:10:e3:3a:ab:89:1a:03:
84:d4:9b:12:04:13:12:8b:15:5e:86:6f:9a:ef:3e:
f7:56:96:17:fd:e5:6e:2c:fc:81:a7:4e:6f:e5:54:
6a:6a:9a:f4:5b:06:75:d2:75:69:5d:ac:99:f3:2f:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:14:E3:30:5B:92:55:21:56:91:AC:5F:7C:B4:A8:30:84:FD:56
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:20:48:5a:84:56:cb:d6:73:3a:ba:9b:c8:51:99:96:b6:89:
c4:8a:48:5c:54:d6:a1:65:2b:51:5b:31:b3:df:95:6a:18:ae:
e2:8a:8c:a0:34:22:37:ea:ad:bb:d4:16:02:9a:0a:29:f9:cc:
fa:c2:71:6d:04:eb:75:58:85:42:c1:34:04:ab:c6:04:85:4f:
38:9e:cd:82:73:b0:36:86:ba:a5:24:66:7b:65:d7:0b:fa:ef:
30:e7:52:b0:ce:82:10:25:5c:bb:12:e9:90:6b:8e:38:11:9a:
15:41:47:8a:bb:c6:4e:3a:58:ea:87:16:73:e1:86:bb:e4:b7:
57:8c:57:e4:db:24:4e:4b:bd:ec:27:29:ff:e7:90:cd:39:2f:
de:27:39:d3:8a:3c:3d:79:00:46:cd:dd:e4:50:c1:26:61:f8:
e2:b4:e8:04:57:ab:81:5f:70:3f:2c:4f:bf:fb:05:eb:92:2b:
90:0c:09:62:10:fe:da:a2:69:f1:c2:8b:ea:56:dd:a9:1f:07:
39:01:3d:e6:91:24:4d:73:61:4c:08:c0:08:d4:86:f5:e9:cd:
ed:2c:78:a6:f3:62:2b:81:50:9e:88:61:d0:db:3b:bb:24:1e:
58:0a:38:fe:dc:f6:55:e1:b8:ed:8a:7f:5e:a3:61:46:42:6d:
17:d8:61:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inFwV6gDlCz0RpaVz4RcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODNlNjRmNzJkZDU4ODlmYjEzZGMyMThjNjgzZjZlMmZh
Y2Y1YjIwHhcNMjYwNDE4MjIwMDQ5WhcNMjYwNDE5MjIwMDQ5WjAzMTEwLwYDVQQD
EygwNTAzMTRlMzMwNWI5MjU1MjE1NjkxYWM1ZjdjYjRhODMwODRmZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3GBOWAT6eNPlufWIMqUCXHQAPL7
U/fJl+LfyiSYZUVNsOyDt1I1RqKobzjhIu4wPEGlrpLRX5a869et4GtYG/XG+9FA
VNSfxs2W/Pk1tNbPf/k88H7JbpucsbiMXwntpAl0k/35YInkFbJtWQVxe5KnZx5n
WuR6SL1vQ/KokFYT8Wtb4V5n1R56c2eyxZQ9RfryA7SfRNQVqpJ5OkDD4cfKfm90
KvtD5XwGV3skfTqvVS50Q40962n6gB/rjoINHgR0MrxKlTlaZxDjOquJGgOE1JsS
BBMSixVehm+a7z73VpYX/eVuLPyBp05v5VRqapr0WwZ10nVpXayZ8y9A8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUDFOMwW5JVIVaRrF98tKgwhP1WMB8GA1UdIwQY
MBaAFKuD5k9y3ViJ+xPcIYxoP24vrPWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUt
NTQxZjQ4OTI0OTUyLzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUtNTQxZjQ4OTI0OTUy
LzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiBIWoRW
y9ZzOrqbyFGZlraJxIpIXFTWoWUrUVsxs9+Vahiu4oqMoDQiN+qtu9QWApoKKfnM
+sJxbQTrdViFQsE0BKvGBIVPOJ7NgnOwNoa6pSRme2XXC/rvMOdSsM6CECVcuxLp
kGuOOBGaFUFHirvGTjpY6ocWc+GGu+S3V4xX5NskTku97Ccp/+eQzTkv3ic504o8
PXkARs3d5FDBJmH44rToBFergV9wPyxPv/sF65IrkAwJYhD+2qJp8cKL6lbdqR8H
OQE95pEkTXNhTAjACNSG9enN7Sx4pvNiK4FQnohh0Ns7uyQeWAo4/tz2VeG47Yp/
XqNhRkJtF9hhFg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:54 2026 by rpki-client