Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: slbuzZQFQ8eOtxbJ5sCqVG6jp6Hrkx5ZbS2Wcir3OuM=
Subject key identifier: 04:A4:43:2D:E7:AC:AF:36:67:5B:A3:17:C3:5B:DA:12:88:66:BA:35
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019D9C9A6F4A3202A192258E5891DFE29278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 09C1
Signing time: Fri 17 Apr 2026 18:00:59 +0000
Manifest this update: Fri 17 Apr 2026 18:00:59 +0000
Manifest next update: Sat 18 Apr 2026 18:00:59 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: iiBh8+8OoFJlDvdLRpX6T+GUF17f/MTmgKZhvIRX8Xw=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:6f:4a:32:02:a1:92:25:8e:58:91:df:e2:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Apr 17 18:00:59 2026 GMT
Not After : Apr 18 18:00:59 2026 GMT
Subject: CN=04a4432de7acaf36675ba317c35bda128866ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:66:53:2f:9b:ca:1d:c2:26:82:29:fd:bf:
23:a9:21:6f:c6:f5:ab:b4:f2:c9:0c:d6:e8:7c:cc:
e7:64:01:49:5a:7a:b3:e2:49:22:46:cc:b9:f4:97:
ad:0e:04:14:2f:db:08:37:b7:4a:e1:1f:23:c5:56:
f4:87:5a:52:33:c6:d4:e0:93:69:37:af:db:11:86:
59:2f:c9:02:b6:d0:69:c1:e3:48:66:ed:6f:d9:43:
16:5a:5c:9e:e1:c8:9c:b4:3f:f9:14:d6:a5:ca:a4:
12:48:40:ae:ee:fb:94:bd:ee:6a:b8:90:4e:3b:2a:
12:c8:2d:03:e3:92:0d:ff:95:8e:dc:30:4d:28:60:
13:7f:06:99:3d:d9:24:35:a5:96:91:21:a6:76:e0:
79:fa:ab:a5:ad:19:36:72:5a:bb:a0:75:ff:58:71:
c9:0b:2c:b5:a8:d6:cf:05:10:c2:59:48:09:1b:56:
e8:f6:cd:7a:01:f3:02:05:53:01:0f:2e:92:5c:41:
79:e8:1b:14:ef:66:21:09:38:08:f1:ae:16:af:7c:
19:a2:8e:0f:3e:06:94:da:c4:7e:f2:82:41:6e:1a:
b1:c4:9d:a6:57:06:73:ac:0e:89:bc:87:38:06:0f:
b6:f8:e3:73:75:59:a0:36:72:b7:9f:b4:35:28:24:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:43:2D:E7:AC:AF:36:67:5B:A3:17:C3:5B:DA:12:88:66:BA:35
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:67:92:c3:d7:a2:c4:86:24:ef:65:bc:4d:bc:b3:7f:2e:
61:27:54:50:3d:7e:17:ff:6f:0a:78:7e:83:4a:17:15:78:11:
f9:95:4e:21:f2:ce:3c:2b:e8:5f:6b:16:b7:06:d7:04:b8:9e:
bd:e6:e8:63:25:c0:d2:f9:7e:6a:fb:e0:f6:56:5b:d2:b8:1d:
da:ff:c9:a3:93:14:e1:d8:a8:31:f8:42:96:01:c3:9c:b6:3f:
48:22:20:e4:b4:f1:72:90:6f:82:ee:fd:8c:47:63:f8:6a:4f:
41:cb:15:28:26:a6:6d:14:ff:ed:69:ca:5f:de:18:a7:76:fe:
b6:17:af:89:c3:e8:ea:60:df:bb:dc:f4:21:80:77:87:d5:ed:
2b:89:eb:0d:bb:fc:1d:05:91:09:34:72:d2:12:1f:ed:32:c3:
bb:7f:79:92:3a:9e:6a:3a:21:f3:49:36:56:15:ae:ba:fb:ea:
a3:45:89:90:cc:6a:b6:55:f2:08:c5:89:97:b1:e2:5a:a2:68:
b1:75:3e:51:fd:5b:e3:c9:a9:e1:a7:a0:81:11:07:30:c6:ad:
5b:5d:b7:0f:78:ec:8a:0d:17:d9:b1:68:c6:4a:39:ef:fb:21:
e5:c6:fe:9a:a3:6c:af:b8:0b:81:d7:de:69:96:54:c1:ea:2c:
fd:af:25:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmm9KMgKhkiWOWJHf4pJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTUzOGFhYzMzNzc4NDYwZTE5NzAxYWFiNTk1MmM3YWEy
NWYwNWMwHhcNMjYwNDE3MTgwMDU5WhcNMjYwNDE4MTgwMDU5WjAzMTEwLwYDVQQD
EygwNGE0NDMyZGU3YWNhZjM2Njc1YmEzMTdjMzViZGExMjg4NjZiYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HhmUy+byh3CJoIp/b8jqSFvxvWr
tPLJDNbofMznZAFJWnqz4kkiRsy59JetDgQUL9sIN7dK4R8jxVb0h1pSM8bU4JNp
N6/bEYZZL8kCttBpweNIZu1v2UMWWlye4cictD/5FNalyqQSSECu7vuUve5quJBO
OyoSyC0D45IN/5WO3DBNKGATfwaZPdkkNaWWkSGmduB5+qulrRk2clq7oHX/WHHJ
Cyy1qNbPBRDCWUgJG1bo9s16AfMCBVMBDy6SXEF56BsU72YhCTgI8a4Wr3wZoo4P
PgaU2sR+8oJBbhqxxJ2mVwZzrA6JvIc4Bg+2+ONzdVmgNnK3n7Q1KCTmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASkQy3nrK82Z1ujF8Nb2hKIZro1MB8GA1UdIwQY
MBaAFKelOKrDN3hGDhlwGqtZUseqJfBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEt
ODdiMDEwZWE2MjM1LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEtODdiMDEwZWE2MjM1
LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEtnksPX
osSGJO9lvE28s38uYSdUUD1+F/9vCnh+g0oXFXgR+ZVOIfLOPCvoX2sWtwbXBLie
veboYyXA0vl+avvg9lZb0rgd2v/Jo5MU4dioMfhClgHDnLY/SCIg5LTxcpBvgu79
jEdj+GpPQcsVKCambRT/7WnKX94Yp3b+thevicPo6mDfu9z0IYB3h9XtK4nrDbv8
HQWRCTRy0hIf7TLDu395kjqeajoh80k2VhWuuvvqo0WJkMxqtlXyCMWJl7HiWqJo
sXU+Uf1b48mp4aeggREHMMatW123D3jsig0X2bFoxko57/sh5cb+mqNsr7gLgdfe
aZZUweos/a8l5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:47 2026 by rpki-client