Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: hBJ4+d0M/c8ykW2t4Y8rNg++/DS6iQnIFfAMxMbnWcs=
Subject key identifier: 3E:44:40:D6:CF:EC:8C:3C:74:33:F0:B5:74:08:0C:B8:C4:EE:F0:77
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019D9C2C51ED71FE761B9E998BC6E1175EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 1202
Signing time: Fri 17 Apr 2026 16:00:43 +0000
Manifest this update: Fri 17 Apr 2026 16:00:43 +0000
Manifest next update: Sat 18 Apr 2026 16:00:43 +0000
Files and hashes: 1: _D3Sx9Q_gbo96AfGIDxHaE95AuY.roa (hash: p9qntnK/kcs265CcfjBLNs1kWk9qAHv/FsQZ2r3slpo=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: v4l5Zb7GU3oFsS4rPVnmXdry1AN/1UMpGCk5TM61mAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:51:ed:71:fe:76:1b:9e:99:8b:c6:e1:17:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Apr 17 16:00:43 2026 GMT
Not After : Apr 18 16:00:43 2026 GMT
Subject: CN=3e4440d6cfec8c3c7433f0b574080cb8c4eef077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:e2:26:b1:78:7f:46:5b:e7:d4:ae:76:90:
76:2a:0c:24:f5:c3:80:9d:71:e7:5a:59:29:0a:b4:
d9:fd:df:2c:ca:81:57:a5:23:75:f8:f9:aa:bf:40:
bd:39:44:ea:11:07:96:fb:77:37:91:01:e3:88:59:
ef:d8:69:44:c9:7d:7d:6c:b9:6b:ba:41:0e:97:37:
51:ec:00:27:8c:07:73:27:a3:d9:fa:ce:61:15:fc:
2f:49:18:bb:2d:74:f8:41:df:1e:8a:b1:6e:13:24:
a8:6d:6c:a6:9d:7e:29:98:d0:2a:bf:ae:a6:5d:64:
95:eb:31:6c:8d:c8:66:c6:81:c4:f8:0f:51:d3:2c:
70:94:79:f2:86:ac:5e:b8:26:b8:03:05:bf:70:80:
e8:75:1c:a3:94:2b:92:06:3f:da:71:e0:3f:a2:ba:
51:0c:97:03:29:aa:62:88:99:87:85:e8:3d:b0:ae:
62:1d:fc:56:42:0c:aa:b9:61:83:23:15:9b:26:c2:
de:7f:f8:b5:b1:7d:16:a6:58:d2:dc:00:c0:0a:09:
2f:46:3a:a7:61:ef:86:b0:dc:06:d5:17:bf:d7:9f:
55:58:49:d8:1f:80:38:11:d2:2e:e4:47:f5:e9:87:
d6:ca:cc:0c:e7:48:32:6d:c9:c6:b8:48:03:a4:d7:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:40:D6:CF:EC:8C:3C:74:33:F0:B5:74:08:0C:B8:C4:EE:F0:77
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:63:11:24:7a:26:85:d3:93:4e:f8:54:28:8b:7e:a5:b3:f1:
c1:cc:b7:9f:9f:03:71:bc:a2:91:6a:16:56:eb:9f:f2:a1:26:
5a:40:92:8c:03:a8:15:22:e2:4c:63:28:f2:f1:de:8d:28:f9:
5f:f3:d3:d8:07:68:3a:da:8f:a7:03:c8:7c:ef:f9:6e:ad:2a:
e1:8e:99:99:50:97:24:b4:dd:30:56:12:e0:2b:e6:a5:38:d8:
28:72:e3:68:b0:b5:5c:68:44:1e:9d:be:76:8f:66:7e:5c:9d:
ac:84:40:b1:5f:e8:4a:62:65:89:39:99:63:0c:c4:48:41:73:
6a:76:7f:bc:3b:4b:3b:d2:3e:96:45:02:12:8a:47:4e:07:e9:
ab:bb:d5:7d:28:95:f0:fa:5c:3a:09:ef:4c:21:23:a1:0a:d8:
7a:10:d0:fc:c0:2c:2c:91:b0:f4:b9:7b:5a:9d:65:70:c4:20:
3e:1d:e8:ae:9f:14:33:ff:02:16:04:35:18:6d:01:bf:a0:28:
75:8e:a3:f7:11:14:b6:c6:02:71:f0:ad:f3:db:22:90:77:ad:
fe:c3:07:43:f6:6f:54:0c:77:39:a9:e9:71:34:fc:60:f9:50:
08:84:3b:10:5f:a1:ce:71:ea:25:2b:bc:81:70:bf:ec:0e:e3:
99:b9:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:15 2026 by rpki-client