Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: AXNAT818plBFJZ1HL9Tc4f0XMcXHgT2HrEGW2b/RG8A=
Subject key identifier: B9:A5:95:60:65:E5:CB:F2:97:32:FA:EB:2D:41:0D:C0:74:08:84:FB
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019D9A74B2C455DEBB52015385A26F9D24C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0DE3
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: tHnr/Fuka53klVz2AlzuuwptXgLfsHPuoxoBw8qwaM4=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b2:c4:55:de:bb:52:01:53:85:a2:6f:9d:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=b9a5956065e5cbf29732faeb2d410dc0740884fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:27:de:19:df:41:13:8d:4d:e0:fe:ea:37:
8a:c9:34:eb:74:17:55:93:54:15:48:53:d0:06:9e:
7d:20:5e:59:31:92:6a:c3:35:49:19:29:19:15:b7:
ad:e0:29:d6:c3:e4:2d:53:4d:97:52:c9:1a:f1:dd:
5f:ad:4e:11:fb:50:4e:4b:c8:36:24:7a:58:2a:3a:
ca:83:45:6b:95:a3:1b:10:8b:41:39:34:08:ae:94:
09:29:07:62:70:7f:78:4e:d2:81:04:3f:f2:82:42:
84:6f:10:58:ee:0c:f8:38:56:7e:2f:b9:b1:51:3b:
87:de:b3:d1:fc:19:dd:f7:57:e6:fe:2d:aa:da:76:
f6:a3:d0:fe:d0:ef:84:fd:f6:6b:63:33:71:79:d8:
6e:d3:65:a4:d1:78:8f:13:6d:96:c7:63:51:ab:9a:
9b:c2:e1:3f:e2:a8:5d:9e:dc:2c:d8:f0:51:6a:91:
0d:bd:98:53:ad:ee:62:43:aa:17:43:f5:51:7c:2d:
24:9e:d8:c5:78:85:4c:85:e6:d0:e6:b7:e7:c8:d2:
e4:49:80:04:4a:fe:8b:24:68:79:ad:6c:5e:fe:42:
02:e9:4c:4e:3d:bc:52:04:c1:ac:c6:24:24:b4:d6:
7f:b3:02:a4:95:1e:c6:62:fe:c9:cd:ec:41:78:b4:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A5:95:60:65:E5:CB:F2:97:32:FA:EB:2D:41:0D:C0:74:08:84:FB
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:ee:22:1a:20:ee:d8:04:62:bf:c3:2a:8a:94:fe:15:7a:
33:e9:d3:3e:79:54:e5:7c:e5:64:43:10:0f:a0:a8:a8:1e:da:
6d:e1:58:97:74:cc:25:59:cd:ab:07:96:ba:36:bb:eb:af:57:
53:e2:93:8d:a1:9a:33:95:50:8e:8f:bc:d9:89:a4:fc:e5:a9:
d7:c8:d6:5e:cd:e7:f7:35:14:4d:d8:18:9c:27:6f:cf:a8:e7:
65:6b:03:fc:c5:c3:44:16:bd:3d:24:f6:4b:39:09:c3:ff:5a:
a0:f6:95:9f:b4:97:3d:dd:72:14:f7:ed:1e:80:4a:41:61:fa:
02:dc:2e:af:84:97:33:8d:b3:db:7f:bc:3c:88:0b:36:fb:b9:
11:c9:bd:23:69:db:92:d8:d9:2e:60:99:82:e5:3b:ab:24:f1:
ae:02:17:ef:61:f2:da:0d:1a:2e:9c:3f:fa:23:02:60:d4:dc:
fd:d7:de:53:8c:18:eb:c4:7c:75:54:c3:e6:55:5a:1c:5e:c3:
5b:16:b1:1b:f6:a8:34:29:c7:7f:eb:36:be:0a:1a:3f:ed:23:
6d:c6:10:c8:00:4c:4b:7c:e4:97:fe:85:1e:a0:fc:5f:8b:ae:
27:fc:89:12:a7:3a:d8:9f:e3:b3:1b:1a:b5:89:67:a8:2a:0d:
8f:66:85:94
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2adLLEVd67UgFThaJvnSTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjYwNDE3MDgwMDMyWhcNMjYwNDE4MDgwMDMyWjAzMTEwLwYDVQQD
EyhiOWE1OTU2MDY1ZTVjYmYyOTczMmZhZWIyZDQxMGRjMDc0MDg4NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QIn3hnfQRONTeD+6jeKyTTrdBdV
k1QVSFPQBp59IF5ZMZJqwzVJGSkZFbet4CnWw+QtU02XUska8d1frU4R+1BOS8g2
JHpYKjrKg0VrlaMbEItBOTQIrpQJKQdicH94TtKBBD/ygkKEbxBY7gz4OFZ+L7mx
UTuH3rPR/Bnd91fm/i2q2nb2o9D+0O+E/fZrYzNxedhu02Wk0XiPE22Wx2NRq5qb
wuE/4qhdntws2PBRapENvZhTre5iQ6oXQ/VRfC0kntjFeIVMhebQ5rfnyNLkSYAE
Sv6LJGh5rWxe/kIC6UxOPbxSBMGsxiQktNZ/swKklR7GYv7JzexBeLR4OwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLmllWBl5cvylzL66y1BDcB0CIT7MB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm
ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjHu
Ihog7tgEYr/DKoqU/hV6M+nTPnlU5XzlZEMQD6CoqB7abeFYl3TMJVnNqweWuja7
669XU+KTjaGaM5VQjo+82Ymk/OWp18jWXs3n9zUUTdgYnCdvz6jnZWsD/MXDRBa9
PST2SzkJw/9aoPaVn7SXPd1yFPftHoBKQWH6Atwur4SXM42z23+8PIgLNvu5Ecm9
I2nbktjZLmCZguU7qyTxrgIX72Hy2g0aLpw/+iMCYNTc/dfeU4wY68R8dVTD5lVa
HF7DWxaxG/aoNCnHf+s2vgoaP+0jbcYQyABMS3zkl/6FHqD8X4uuJ/yJEqc62J/j
sxsatYlnqCoNj2aFlA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:05 2026 by rpki-client