Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: 7IXSTuf7Dl+2Fw6YaOppSGCYvyLLARqro01OeZL59d4=
Subject key identifier: C7:30:47:A4:C6:16:0C:A2:11:47:06:4A:15:BF:BB:BF:E6:F1:03:17
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019D9818AC43C7EF3E3CF751644270380C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0F65
Signing time: Thu 16 Apr 2026 21:00:46 +0000
Manifest this update: Thu 16 Apr 2026 21:00:46 +0000
Manifest next update: Fri 17 Apr 2026 21:00:46 +0000
Files and hashes: 1: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: ov4i+vQZXzLm0US4NGTRhvyu2MPiS08ocJ5zyguuQtU=)
2: k_Yqfb61yxFVsUAlfMaFEyavSv4.roa (hash: zO6a703k+u6Hm7KUfbGiT3ypzSzlcRhCCpgBjvvWhs4=)
3: muW9cBNMeWZbUzZWm3451nPmZy8.roa (hash: Une3GtFaZuE/Q/AgcVr8m9ytRRPpxQYRTGkYYful7io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:ac:43:c7:ef:3e:3c:f7:51:64:42:70:38:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Apr 16 21:00:46 2026 GMT
Not After : Apr 17 21:00:46 2026 GMT
Subject: CN=c73047a4c6160ca21147064a15bfbbbfe6f10317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:46:5e:d7:78:10:e9:3e:4f:00:10:ad:ce:
2d:75:88:3f:2e:e4:2f:03:e2:e3:cb:29:1f:04:5d:
af:ca:72:5f:5b:b0:65:02:0d:1e:c0:ab:2a:da:98:
94:0a:7c:05:65:59:51:fb:fe:e7:b4:03:76:49:51:
e9:84:5a:0a:cf:72:b2:b7:76:56:8d:b8:dc:fc:03:
31:70:cc:6f:e3:c8:9c:68:02:e7:e2:df:1d:53:f7:
67:ce:2c:19:c7:e6:5d:1d:10:36:ca:a3:bf:9a:63:
f2:c3:37:68:7a:d6:4e:f0:99:c1:55:00:d6:27:61:
cd:8f:d9:02:c6:6e:af:3a:ee:91:0d:66:c8:b4:fc:
85:ff:6b:aa:28:7e:a6:93:03:7f:f7:58:8f:57:7e:
fb:6c:64:5f:e5:89:45:9d:f5:4c:49:78:f2:91:af:
c9:72:58:d9:47:b0:e0:fd:a7:6e:1c:77:86:8f:08:
74:c5:c0:a4:09:e6:77:27:83:80:d5:82:f7:1b:86:
6a:aa:29:05:8b:e8:5d:f4:8f:69:22:88:0d:53:76:
12:f0:d2:9b:89:c1:1c:41:91:bb:4b:9c:ba:bd:68:
dc:be:b2:22:68:8b:51:31:9c:79:f9:0f:4b:62:a0:
5d:89:55:df:cf:f8:26:73:63:b5:d6:f2:65:62:85:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:47:A4:C6:16:0C:A2:11:47:06:4A:15:BF:BB:BF:E6:F1:03:17
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:69:f5:e0:f8:b8:6e:29:4f:f6:23:21:fa:d5:cf:e6:aa:21:
75:b8:a4:bd:5d:10:49:08:04:8b:55:22:8a:47:2d:81:0c:e9:
cd:9e:44:e9:3a:f0:c5:25:f4:65:a2:87:00:9a:fb:99:53:ce:
71:c4:a5:13:03:43:f4:06:ef:0c:7c:a6:a8:37:b7:d9:15:56:
7d:80:05:1e:4e:16:5d:cc:a6:9c:6f:f1:0c:c6:fd:7d:dc:f6:
70:0c:69:04:86:bb:d1:09:35:77:d8:6b:cd:3b:9e:86:cc:2a:
22:a4:b1:84:ad:5a:c0:c9:e7:3c:7f:41:09:88:dc:65:02:fd:
bf:30:54:56:df:1e:7d:3c:6c:95:d7:98:c8:e1:09:4c:e4:29:
df:ae:dc:ac:07:e6:4f:56:28:83:78:b0:bc:b4:c7:81:f2:2b:
e7:99:93:3a:fd:99:ce:0e:24:d1:e2:38:8f:16:34:31:4a:83:
de:b7:64:7a:93:0e:d6:87:21:b8:fc:12:4b:9a:07:67:31:66:
4b:0f:ad:a0:ed:7f:d0:b2:1f:8e:d7:79:9e:c3:bb:51:55:0b:
b9:8e:3d:cf:ef:e6:a9:7a:aa:0f:73:74:ff:09:a3:f2:1e:68:
76:6d:a5:4b:a0:be:86:df:a9:49:13:df:b8:13:a2:05:c8:a7:
64:3e:f1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKxDx+8+PPdRZEJwOAx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjYwNDE2MjEwMDQ2WhcNMjYwNDE3MjEwMDQ2WjAzMTEwLwYDVQQD
EyhjNzMwNDdhNGM2MTYwY2EyMTE0NzA2NGExNWJmYmJiZmU2ZjEwMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+JGXtd4EOk+TwAQrc4tdYg/LuQv
A+LjyykfBF2vynJfW7BlAg0ewKsq2piUCnwFZVlR+/7ntAN2SVHphFoKz3Kyt3ZW
jbjc/AMxcMxv48icaALn4t8dU/dnziwZx+ZdHRA2yqO/mmPywzdoetZO8JnBVQDW
J2HNj9kCxm6vOu6RDWbItPyF/2uqKH6mkwN/91iPV377bGRf5YlFnfVMSXjyka/J
cljZR7Dg/aduHHeGjwh0xcCkCeZ3J4OA1YL3G4ZqqikFi+hd9I9pIogNU3YS8NKb
icEcQZG7S5y6vWjcvrIiaItRMZx5+Q9LYqBdiVXfz/gmc2O11vJlYoWycQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcwR6TGFgyiEUcGShW/u7/m8QMXMB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGn14Pi4
bilP9iMh+tXP5qohdbikvV0QSQgEi1UiikctgQzpzZ5E6TrwxSX0ZaKHAJr7mVPO
ccSlEwND9AbvDHymqDe32RVWfYAFHk4WXcymnG/xDMb9fdz2cAxpBIa70Qk1d9hr
zTuehswqIqSxhK1awMnnPH9BCYjcZQL9vzBUVt8efTxsldeYyOEJTOQp367crAfm
T1Yog3iwvLTHgfIr55mTOv2Zzg4k0eI4jxY0MUqD3rdkepMO1ochuPwSS5oHZzFm
Sw+toO1/0LIfjtd5nsO7UVULuY49z+/mqXqqD3N0/wmj8h5odm2lS6C+ht+pSRPf
uBOiBcinZD7xwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:02 2026 by rpki-client