Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: 5uQCw4LDTaiw/Z1H1Es3ODwsK7VKA6rxnwLamx1hnXY=
Subject key identifier: 70:49:3B:8D:D8:03:90:BF:04:07:1A:F2:95:C2:F0:8B:0C:CB:ED:A5
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019DA2D324BC4EB5A254BAEE519413F4DCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 18C4
Signing time: Sat 18 Apr 2026 23:00:39 +0000
Manifest this update: Sat 18 Apr 2026 23:00:39 +0000
Manifest next update: Sun 19 Apr 2026 23:00:39 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: 7MpwpU0iZ2t+Hw2VYEKak4d5s4KAQpg2IS59RGBAIWI=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:24:bc:4e:b5:a2:54:ba:ee:51:94:13:f4:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Apr 18 23:00:39 2026 GMT
Not After : Apr 19 23:00:39 2026 GMT
Subject: CN=70493b8dd80390bf04071af295c2f08b0ccbeda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:30:77:50:0f:8d:00:e6:57:80:b4:ab:32:
05:6e:81:64:4e:c5:36:c0:08:37:e9:c8:11:b0:f8:
16:de:a4:1b:d6:36:1b:de:15:08:f5:de:d2:7d:48:
c3:94:d3:94:40:85:de:1e:bc:82:99:08:fa:f8:85:
63:d3:80:c9:40:95:ae:68:68:eb:13:b0:11:87:77:
2b:08:18:aa:a2:b0:89:39:a0:07:4e:96:d1:7e:1c:
cd:ed:9e:76:8c:49:f4:71:24:02:a6:59:1e:5e:93:
c9:d0:a3:19:2f:18:a1:43:36:0b:f0:80:60:2a:e2:
a4:10:ec:19:55:7d:c2:af:12:a4:56:9e:57:29:94:
8e:86:91:4c:fd:67:5f:b4:46:ac:7c:b4:e8:c9:81:
c1:a6:c2:70:f6:8a:88:10:e0:80:d1:a0:92:2e:00:
8f:69:9e:ae:53:bc:23:32:d3:23:a7:ed:c9:95:49:
1d:eb:e5:66:96:49:41:b1:36:34:e4:76:66:d5:d5:
53:1d:3a:51:5a:3b:4f:2e:91:69:08:80:73:de:6c:
7b:a3:ad:0d:0e:42:6b:35:dd:6b:fa:d0:92:34:ec:
97:a8:bb:4a:c8:7d:60:23:ea:3b:91:fc:15:36:52:
02:b8:cf:6f:ab:b3:2e:5c:45:a3:77:f3:93:39:9b:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:3B:8D:D8:03:90:BF:04:07:1A:F2:95:C2:F0:8B:0C:CB:ED:A5
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:da:65:e2:8b:76:9f:6f:98:a5:20:28:6c:d9:52:e3:9a:04:
46:3f:36:c6:08:7f:90:a1:7e:60:0b:93:dd:ac:34:59:63:73:
28:91:1a:34:9a:c0:cc:6f:f3:19:e3:df:e6:db:5b:b4:55:71:
8a:62:98:49:cd:91:35:68:32:a4:f4:68:5c:23:84:2b:b6:19:
f6:ce:a9:18:18:58:8e:96:78:b7:b2:3c:ef:16:91:da:37:9e:
79:3e:18:50:13:15:c2:40:ef:5e:c7:25:08:84:3a:dc:cf:6f:
71:59:aa:f8:22:26:90:3e:21:9c:d2:fd:92:eb:9f:9a:84:32:
7a:cf:25:76:3b:de:0d:06:90:6d:b2:fa:83:47:37:b8:f0:ae:
73:72:34:70:ec:4a:be:55:a4:7b:cc:94:45:bf:b7:8f:61:a5:
f4:ce:3a:c9:28:e9:61:64:39:0c:5e:e9:5d:bc:74:52:2c:bb:
26:c3:1c:e3:af:e1:13:1b:91:42:28:12:82:36:43:94:69:a0:
4b:f7:18:5a:b6:86:9d:7a:0d:a7:d8:e1:33:80:ba:80:16:58:
92:fa:3c:d5:b5:bd:e1:de:9a:76:7e:ae:5b:0d:c1:07:28:8f:
0e:f4:ba:d1:9a:09:16:83:ff:c1:8d:94:30:e8:2b:a0:52:d5:
c9:17:84:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i0yS8TrWiVLruUZQT9NypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjYwNDE4MjMwMDM5WhcNMjYwNDE5MjMwMDM5WjAzMTEwLwYDVQQD
Eyg3MDQ5M2I4ZGQ4MDM5MGJmMDQwNzFhZjI5NWMyZjA4YjBjY2JlZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvIwd1APjQDmV4C0qzIFboFkTsU2
wAg36cgRsPgW3qQb1jYb3hUI9d7SfUjDlNOUQIXeHryCmQj6+IVj04DJQJWuaGjr
E7ARh3crCBiqorCJOaAHTpbRfhzN7Z52jEn0cSQCplkeXpPJ0KMZLxihQzYL8IBg
KuKkEOwZVX3CrxKkVp5XKZSOhpFM/WdftEasfLToyYHBpsJw9oqIEOCA0aCSLgCP
aZ6uU7wjMtMjp+3JlUkd6+VmlklBsTY05HZm1dVTHTpRWjtPLpFpCIBz3mx7o60N
DkJrNd1r+tCSNOyXqLtKyH1gI+o7kfwVNlICuM9vq7MuXEWjd/OTOZsS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBJO43YA5C/BAca8pXC8IsMy+2lMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNpl4ot2
n2+YpSAobNlS45oERj82xgh/kKF+YAuT3aw0WWNzKJEaNJrAzG/zGePf5ttbtFVx
imKYSc2RNWgypPRoXCOEK7YZ9s6pGBhYjpZ4t7I87xaR2jeeeT4YUBMVwkDvXscl
CIQ63M9vcVmq+CImkD4hnNL9kuufmoQyes8ldjveDQaQbbL6g0c3uPCuc3I0cOxK
vlWke8yURb+3j2Gl9M46ySjpYWQ5DF7pXbx0Uiy7JsMc46/hExuRQigSgjZDlGmg
S/cYWraGnXoNp9jhM4C6gBZYkvo81bW94d6adn6uWw3BByiPDvS60ZoJFoP/wY2U
MOgroFLVyReEFw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:46 2026 by rpki-client