Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: i7tqF1uOznHwRdCtFKSo4gllxpQsk7xI1ffwtFy4yKw=
Subject key identifier: 2A:DD:44:F7:D8:27:70:00:DD:16:92:B4:A6:81:7D:53:54:07:A0:CF
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 019D98BDC6458119EAD8A6A81BF4D9802C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0D43
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: 8uCTgnaz9Qo6AcB0HVBRigkEHcySUKeJ3Wd8K2yekOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c6:45:81:19:ea:d8:a6:a8:1b:f4:d9:80:2c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=2add44f7d8277000dd1692b4a6817d535407a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:3b:25:f7:9e:c7:af:22:76:25:9c:26:cf:
f1:33:e2:f7:c4:1f:46:b3:9f:3e:5b:86:0a:43:9f:
4f:9b:2b:60:e1:f8:91:91:50:d2:52:07:de:5a:b6:
fb:f5:e5:17:2e:54:e2:72:8b:ba:df:ef:6c:e5:69:
ea:a4:e4:dc:cd:6b:75:b9:05:ed:9e:36:10:9c:fb:
73:c0:ec:90:80:a9:52:25:b8:30:56:cc:ca:f4:25:
17:e5:f2:34:23:99:79:a1:2c:8d:03:26:76:c1:5d:
85:de:21:7e:19:3a:d2:41:58:a2:80:c0:c4:ed:0e:
87:2e:19:47:c5:19:8a:d5:3c:f1:59:8e:35:ca:df:
c5:13:5c:21:a0:eb:29:8d:59:f9:d4:54:1d:95:29:
53:e4:8e:46:c9:53:3b:91:e1:e7:7a:73:e5:58:85:
9a:ce:40:9d:3e:95:a5:75:59:48:a9:d2:b0:01:80:
61:87:e4:b6:9d:67:6b:97:f9:c5:e5:d0:62:57:99:
f2:f4:c4:d2:5f:f0:5f:5f:55:b5:f0:bc:a3:a6:22:
7c:7e:ba:c7:fb:a0:3d:75:78:3b:96:25:29:d0:f9:
06:26:80:79:c8:19:ec:f2:31:e4:4e:6a:67:1b:75:
e2:cf:70:35:65:ac:c3:6a:81:70:ec:91:c0:a2:37:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:44:F7:D8:27:70:00:DD:16:92:B4:A6:81:7D:53:54:07:A0:CF
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:5b:dc:86:8d:5c:6f:be:4e:d6:ba:ed:d8:4a:bd:cc:96:
08:77:e8:25:5c:d2:39:b4:43:86:e7:ea:9a:b2:51:7f:8a:0c:
d8:e0:a2:cb:5a:dd:c0:92:9b:a6:c1:e0:a9:8c:02:61:d6:72:
ee:60:84:3c:e8:0c:f4:79:ac:27:12:d5:5d:b5:a6:ea:27:b4:
a6:d7:40:0d:11:57:9a:43:5c:89:08:7b:4b:7c:b9:14:28:c9:
cf:05:e5:50:c9:eb:04:20:54:e3:2e:4b:c8:e9:ae:ca:07:ab:
93:be:fc:29:bb:fb:0d:86:01:ee:cc:4c:82:f1:9e:df:43:b2:
e7:54:ec:f4:8a:eb:3a:5d:b1:09:39:61:13:07:22:3f:82:29:
c2:47:ba:ef:85:10:04:6d:24:e3:55:d9:5a:d1:98:71:95:f4:
e6:a8:21:31:9e:1c:35:75:48:aa:09:b1:51:59:94:25:63:34:
e2:14:03:ba:0b:2e:d7:3d:7c:be:b0:96:c3:55:83:e0:eb:ea:
9a:5c:4c:02:dd:c0:70:0c:1f:ce:53:ac:5d:f6:bc:0f:ae:06:
32:23:27:c3:18:a5:ee:b9:1b:ba:e3:64:2f:d9:c9:1d:8a:d6:
84:9e:a7:90:04:23:86:fc:b1:4f:8f:91:ad:54:a1:ec:f2:c5:
a5:8a:97:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvcZFgRnq2KaoG/TZgCyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MWJiNDkwZTA5ZGYxNDY3ZTRlZWM0M2Q4ZjIwNDg0Y2Vl
ODM5ZmUwHhcNMjYwNDE3MDAwMTA3WhcNMjYwNDE4MDAwMTA3WjAzMTEwLwYDVQQD
EygyYWRkNDRmN2Q4Mjc3MDAwZGQxNjkyYjRhNjgxN2Q1MzU0MDdhMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuc7Jfeex68idiWcJs/xM+L3xB9G
s58+W4YKQ59Pmytg4fiRkVDSUgfeWrb79eUXLlTicou63+9s5WnqpOTczWt1uQXt
njYQnPtzwOyQgKlSJbgwVszK9CUX5fI0I5l5oSyNAyZ2wV2F3iF+GTrSQViigMDE
7Q6HLhlHxRmK1TzxWY41yt/FE1whoOspjVn51FQdlSlT5I5GyVM7keHnenPlWIWa
zkCdPpWldVlIqdKwAYBhh+S2nWdrl/nF5dBiV5ny9MTSX/BfX1W18LyjpiJ8frrH
+6A9dXg7liUp0PkGJoB5yBns8jHkTmpnG3Xiz3A1ZazDaoFw7JHAojf/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrdRPfYJ3AA3RaStKaBfVNUB6DPMB8GA1UdIwQY
MBaAFJUbtJDgnfFGfk7sQ9jyBITO6Dn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTct
MWRiNGVkMTMxYmMzLzEvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTctMWRiNGVkMTMxYmMz
LzEvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACepb3IaN
XG++Tta67dhKvcyWCHfoJVzSObRDhufqmrJRf4oM2OCiy1rdwJKbpsHgqYwCYdZy
7mCEPOgM9HmsJxLVXbWm6ie0ptdADRFXmkNciQh7S3y5FCjJzwXlUMnrBCBU4y5L
yOmuygerk778Kbv7DYYB7sxMgvGe30Oy51Ts9IrrOl2xCTlhEwciP4Ipwke674UQ
BG0k41XZWtGYcZX05qghMZ4cNXVIqgmxUVmUJWM04hQDugsu1z18vrCWw1WD4Ovq
mlxMAt3AcAwfzlOsXfa8D64GMiMnwxil7rkbuuNkL9nJHYrWhJ6nkAQjhvyxT4+R
rVSh7PLFpYqXFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:34 2026 by rpki-client