Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: MEhyF+K8pUyH5L4TOnTAaALkCasTIXpGQTqOuoX9EXs=
Subject key identifier: 09:E7:AF:83:DB:CF:46:2D:07:57:81:B9:16:4C:9F:C2:07:D9:47:7D
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 019D9A06C94A0C66DBED771AD79BE215E357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:29 +0000
Manifest this update: Fri 17 Apr 2026 06:00:29 +0000
Manifest next update: Sat 18 Apr 2026 06:00:29 +0000
Files and hashes: 1: FL9A-Wc7z5VMCe364E-fjxzBfRE.roa (hash: ICmFI8eTAGCEVNybXrRIRxi+lptZELNrevDuYYLtLB8=)
2: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: jBzvtY9oXuGkX6l/Bda8RB/cfS4q8TxovFbJXEl5bkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c9:4a:0c:66:db:ed:77:1a:d7:9b:e2:15:e3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Apr 17 06:00:29 2026 GMT
Not After : Apr 18 06:00:29 2026 GMT
Subject: CN=09e7af83dbcf462d075781b9164c9fc207d9477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:e3:c7:73:a7:c6:2d:06:1a:e6:6f:33:1e:
0a:ca:6b:4e:86:0a:26:8f:ac:00:05:7f:3b:7b:b6:
8d:6b:80:67:ef:76:a9:3d:f0:cc:48:64:99:0a:b6:
a8:4c:22:40:05:9e:42:3d:a5:90:64:13:35:d9:c1:
e8:f6:ad:62:1c:1c:1c:8e:b7:08:47:24:32:dc:23:
7c:7c:1c:cf:84:ab:61:31:5b:7d:6b:99:78:08:70:
4c:95:34:c2:c3:4e:5c:3b:c0:cd:a2:e5:76:e1:34:
c8:43:fb:57:21:c6:f2:62:fb:39:db:50:c5:8d:7c:
9d:a5:ed:dc:2e:6b:b9:d3:76:f2:9e:40:44:84:b6:
36:7b:04:ea:47:f1:4f:5f:bb:6a:5f:93:3e:70:da:
fb:6d:f5:70:3b:30:86:a1:b6:c8:1e:e7:65:15:c5:
cf:32:a5:6b:a9:d6:e3:95:3e:66:5e:82:e6:3b:e0:
67:72:a6:f5:ba:4a:51:be:71:88:78:7a:94:50:77:
96:a1:f7:57:32:e2:37:96:b3:67:17:08:a2:c5:7b:
d0:1e:ee:be:40:15:3f:16:93:1d:21:ff:e3:6f:1d:
96:0a:ce:c8:bf:0b:cb:ed:14:ea:9a:83:b8:6e:0c:
3e:2c:c1:3f:7a:e3:43:a3:cc:10:fa:dc:86:f0:45:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:AF:83:DB:CF:46:2D:07:57:81:B9:16:4C:9F:C2:07:D9:47:7D
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f8:63:b4:9c:cb:72:e8:2a:4d:f5:00:56:aa:08:e2:a4:6a:
55:34:14:ab:60:e8:51:ec:db:c0:17:fd:bd:dd:4b:99:3f:3a:
0b:7a:d8:f7:51:b1:89:19:1b:6e:92:7e:1d:25:ed:74:c0:7c:
a7:86:2a:24:59:0c:da:49:40:70:a3:0e:68:9a:d2:75:a9:25:
6b:8a:e8:00:d1:a9:87:56:ec:f4:14:03:99:ac:2d:b0:c4:5e:
3b:5f:28:28:de:a7:2a:3b:80:f7:b4:9f:0c:86:da:f4:8c:e6:
d2:9f:c1:fa:13:67:af:aa:7f:bc:e6:44:b5:56:92:11:81:7c:
8b:07:35:b0:7e:32:d2:e5:a7:76:d2:42:82:6f:5c:30:8d:bb:
f4:f8:87:ad:b7:17:8a:5a:41:77:20:cd:86:fc:4f:24:dd:8e:
3b:b8:f1:d1:65:0e:a0:17:85:f5:fd:6e:72:8b:16:03:f9:bd:
06:65:66:72:1e:2a:a6:47:bd:be:7f:72:a1:40:b5:19:11:12:
16:50:e9:6d:e0:67:b9:36:7b:1f:cb:26:0c:b9:7d:c5:43:54:
f6:da:2a:ec:87:ff:1c:14:7f:71:ca:f3:1f:dc:d3:46:9e:0b:
c7:07:65:da:0b:84:46:19:c0:a5:55:e3:c4:94:17:14:e7:2f:
39:d5:12:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBslKDGbb7Xca15viFeNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx
YzFhZWYwHhcNMjYwNDE3MDYwMDI5WhcNMjYwNDE4MDYwMDI5WjAzMTEwLwYDVQQD
EygwOWU3YWY4M2RiY2Y0NjJkMDc1NzgxYjkxNjRjOWZjMjA3ZDk0NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZPjx3Onxi0GGuZvMx4KymtOhgom
j6wABX87e7aNa4Bn73apPfDMSGSZCraoTCJABZ5CPaWQZBM12cHo9q1iHBwcjrcI
RyQy3CN8fBzPhKthMVt9a5l4CHBMlTTCw05cO8DNouV24TTIQ/tXIcbyYvs521DF
jXydpe3cLmu503bynkBEhLY2ewTqR/FPX7tqX5M+cNr7bfVwOzCGobbIHudlFcXP
MqVrqdbjlT5mXoLmO+Bncqb1ukpRvnGIeHqUUHeWofdXMuI3lrNnFwiixXvQHu6+
QBU/FpMdIf/jbx2WCs7IvwvL7RTqmoO4bgw+LME/euNDo8wQ+tyG8EWAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnnr4Pbz0YtB1eBuRZMn8IH2Ud9MB8GA1UdIwQY
MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt
MjJlYTNhZDVkZTVjLzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj
LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafhjtJzL
cugqTfUAVqoI4qRqVTQUq2DoUezbwBf9vd1LmT86C3rY91GxiRkbbpJ+HSXtdMB8
p4YqJFkM2klAcKMOaJrSdakla4roANGph1bs9BQDmawtsMReO18oKN6nKjuA97Sf
DIba9Izm0p/B+hNnr6p/vOZEtVaSEYF8iwc1sH4y0uWndtJCgm9cMI279PiHrbcX
ilpBdyDNhvxPJN2OO7jx0WUOoBeF9f1ucosWA/m9BmVmch4qpke9vn9yoUC1GRES
FlDpbeBnuTZ7H8smDLl9xUNU9toq7If/HBR/ccrzH9zTRp4Lxwdl2guERhnApVXj
xJQXFOcvOdUSTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:52 2026 by rpki-client