Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: NgdLOs7KscKBJa1l7ivpsdrpZpI2xESHHRfe2zuwAMM=
Subject key identifier: E7:40:D2:8D:59:38:06:77:56:44:B8:F6:AF:B6:34:23:35:1F:D7:E7
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019D98F484B6AA8D527877B6628056586F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:54 +0000
Manifest this update: Fri 17 Apr 2026 01:00:54 +0000
Manifest next update: Sat 18 Apr 2026 01:00:54 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: ufJwi00O5+68I7lrsDKWXuka+Z4skmp7AFyBqE/Pa48=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:84:b6:aa:8d:52:78:77:b6:62:80:56:58:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Apr 17 01:00:54 2026 GMT
Not After : Apr 18 01:00:54 2026 GMT
Subject: CN=e740d28d593806775644b8f6afb63423351fd7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:f8:b1:1c:a6:a3:18:e0:5a:7a:7d:e4:40:
d7:22:e3:bc:04:be:eb:3a:e6:48:24:0e:61:77:b2:
08:3d:a1:ad:a9:51:a4:df:52:d4:e0:72:2f:98:ca:
ad:b1:98:19:95:c7:80:c1:ce:02:d6:7d:f6:0b:e1:
b6:71:88:01:ec:93:8a:d8:29:3f:17:aa:78:26:5f:
35:89:41:e6:88:d4:59:e2:c7:43:c9:e4:71:2b:c4:
d9:33:ea:ea:0e:1b:c9:14:b4:9f:86:f3:0e:d6:66:
f8:21:7d:34:13:13:28:03:fe:ac:93:90:63:3d:8d:
93:0c:12:3e:9a:b1:e8:dd:73:e2:3a:be:f6:a9:fb:
55:1c:63:a7:d6:4b:43:9f:4d:37:95:14:ec:25:1e:
ce:91:5c:47:95:d7:92:eb:a1:45:13:82:a4:cb:38:
d8:83:3d:36:3a:c1:39:12:94:45:30:32:35:eb:70:
b6:17:90:b6:e5:d6:d5:37:8d:2d:df:51:7c:c6:cf:
4c:23:78:fe:24:06:7f:68:d9:10:0c:51:17:4e:3c:
95:21:15:0e:0c:d9:ef:a3:14:50:05:39:aa:8b:6d:
19:f0:37:b9:84:b7:64:8a:4d:fc:5f:d6:8b:19:03:
b2:77:4b:b4:ea:1c:97:a9:dd:03:13:91:9f:86:d0:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:40:D2:8D:59:38:06:77:56:44:B8:F6:AF:B6:34:23:35:1F:D7:E7
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:20:4c:22:f9:8e:b6:f9:66:9f:fc:f0:c8:55:31:10:d3:11:
d6:79:24:ee:30:60:e8:1b:be:9e:cd:41:89:9a:a8:d4:00:17:
e2:44:f4:b2:00:ae:89:bb:73:f0:75:ac:d4:a1:06:d8:73:f1:
d8:28:ef:7c:0f:04:c7:1b:9c:26:56:24:c5:a8:1a:c0:b0:cd:
d6:be:fa:53:a4:40:c7:06:ac:6c:c6:62:fd:31:a0:98:ec:fc:
07:9e:f4:2d:95:45:41:4b:a2:7c:26:8b:c6:ee:2c:79:a9:8b:
09:34:10:1a:4f:df:a6:ba:c6:69:dc:a5:b0:99:67:6a:28:86:
9a:49:b1:a5:82:cc:71:87:0a:74:9e:f4:84:0a:9d:af:72:b2:
e3:3b:5a:48:da:ba:e7:d4:8b:8e:36:88:29:73:f0:62:8f:79:
b5:50:e0:a7:27:06:34:36:1e:6e:73:32:1c:7d:ac:05:9a:a3:
ff:f3:01:16:da:e7:a6:f9:ff:df:f6:de:88:53:7e:a3:c9:cf:
ca:c9:e0:a4:ac:97:cb:81:76:67:14:da:05:21:e2:82:2f:49:
d7:3b:44:b6:12:47:c6:f8:d7:25:1a:01:5a:a3:6e:8e:81:96:
39:85:9c:5c:34:48:46:11:da:5f:77:e3:3f:25:7e:24:cb:ba:
d2:10:4b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9IS2qo1SeHe2YoBWWG9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl
NTI2ZDIwHhcNMjYwNDE3MDEwMDU0WhcNMjYwNDE4MDEwMDU0WjAzMTEwLwYDVQQD
EyhlNzQwZDI4ZDU5MzgwNjc3NTY0NGI4ZjZhZmI2MzQyMzM1MWZkN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFr4sRymoxjgWnp95EDXIuO8BL7r
OuZIJA5hd7IIPaGtqVGk31LU4HIvmMqtsZgZlceAwc4C1n32C+G2cYgB7JOK2Ck/
F6p4Jl81iUHmiNRZ4sdDyeRxK8TZM+rqDhvJFLSfhvMO1mb4IX00ExMoA/6sk5Bj
PY2TDBI+mrHo3XPiOr72qftVHGOn1ktDn003lRTsJR7OkVxHldeS66FFE4KkyzjY
gz02OsE5EpRFMDI163C2F5C25dbVN40t31F8xs9MI3j+JAZ/aNkQDFEXTjyVIRUO
DNnvoxRQBTmqi20Z8De5hLdkik38X9aLGQOyd0u06hyXqd0DE5GfhtAtzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdA0o1ZOAZ3VkS49q+2NCM1H9fnMB8GA1UdIwQY
MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt
YTk5ZWE5MWNiNWI5LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5
LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiBMIvmO
tvlmn/zwyFUxENMR1nkk7jBg6Bu+ns1BiZqo1AAX4kT0sgCuibtz8HWs1KEG2HPx
2CjvfA8ExxucJlYkxagawLDN1r76U6RAxwasbMZi/TGgmOz8B570LZVFQUuifCaL
xu4seamLCTQQGk/fprrGadylsJlnaiiGmkmxpYLMcYcKdJ70hAqdr3Ky4ztaSNq6
59SLjjaIKXPwYo95tVDgpycGNDYebnMyHH2sBZqj//MBFtrnpvn/3/beiFN+o8nP
ysngpKyXy4F2ZxTaBSHigi9J1ztEthJHxvjXJRoBWqNujoGWOYWcXDRIRhHaX3fj
PyV+JMu60hBL5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:09 2026 by rpki-client