Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: hbU7cqASHFrChAxabx8RkI8gsfEjRQ+ovTk0FQMRWNo=
Subject key identifier: 47:F0:4B:28:AC:CF:E3:DA:2D:18:19:03:70:2D:0D:0A:1F:6A:A4:5E
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019D99628249A2B1ADB86EAD5A2ED4E606F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 04C9
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (hash: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424=)
2: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: U2iYUQdiwfZgYUEDa8f/VgMgIOMQfPZhG25B8i6j2EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:82:49:a2:b1:ad:b8:6e:ad:5a:2e:d4:e6:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=47f04b28accfe3da2d181903702d0d0a1f6aa45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:8a:ad:65:15:1c:ec:bb:fc:5f:57:95:18:
ee:fd:9d:8a:6e:31:c6:9b:36:cb:b9:84:e1:cd:eb:
b8:29:69:49:a8:d4:b7:a1:80:9f:5d:76:53:22:ad:
b1:34:af:18:6f:10:00:a3:f6:a1:7a:38:76:68:f7:
3d:39:ba:86:c5:8e:46:0b:21:4b:82:79:8f:9b:a0:
e6:af:51:d4:3d:aa:6d:e3:ed:fb:cc:87:52:a8:c8:
b2:bd:61:32:ff:24:51:8a:f5:35:b6:d9:7a:b0:8a:
f5:cf:8f:97:92:9b:05:a5:c5:3f:ef:1d:c3:36:3e:
32:11:cf:93:49:1c:64:c8:5d:9a:46:65:70:30:65:
d5:5d:80:f5:a7:25:6f:8c:b9:0a:7f:97:64:92:ad:
e9:5f:67:b4:b0:48:3e:25:bc:b1:8b:b0:1e:6d:2f:
6c:3e:b7:c1:2f:fb:92:da:5b:aa:fb:f7:4b:29:cd:
0c:f3:38:9b:b1:2c:fa:f1:6e:ee:dd:97:4e:3d:cc:
21:76:0e:d5:c1:d5:c0:03:95:55:bd:ef:0a:67:71:
cb:1c:26:1c:c4:b9:a4:ad:df:9d:9e:ef:b4:a2:3d:
53:5b:42:06:c2:fd:f7:a2:b4:9b:47:46:48:c5:48:
e6:d6:33:28:e5:62:31:d6:40:b7:1d:45:34:a8:44:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:4B:28:AC:CF:E3:DA:2D:18:19:03:70:2D:0D:0A:1F:6A:A4:5E
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9a:77:f4:92:99:8f:9e:4c:fa:0c:6a:bd:da:a3:56:3f:aa:
31:10:d5:0f:9a:9d:d6:cf:1c:08:0d:18:f2:af:ce:f5:6e:01:
db:55:e7:b3:8d:1d:6f:3b:df:1c:24:a5:ea:f1:97:84:28:db:
85:29:d5:1e:6a:8a:c9:dc:be:f4:6f:94:b2:32:6e:01:55:dd:
e9:ea:9b:e8:38:e8:af:0f:f2:39:20:7b:4c:b6:49:fd:b6:f1:
d2:ec:03:12:47:c7:1b:62:a1:6e:fe:4c:45:f6:5b:de:1a:b1:
19:0f:ac:19:c4:e0:15:c3:15:85:a3:07:f7:c1:f6:7b:e4:97:
4f:97:af:14:61:c1:39:20:75:18:54:c4:84:4c:be:28:3a:ad:
82:31:88:7e:62:ee:35:0c:81:73:09:97:05:4a:e1:30:16:fe:
d4:55:7b:db:63:4b:84:08:1d:61:7b:a8:83:14:ea:a8:58:21:
6c:90:02:ab:51:0b:4d:c4:98:db:cc:92:69:1b:05:63:dc:dd:
4e:77:42:01:d9:03:1a:01:3d:b6:6c:1e:d0:00:e1:87:73:29:
e9:cc:a7:92:05:15:4b:bb:77:b6:e4:5c:dd:c4:bc:95:4b:09:
96:05:89:db:c1:78:29:fc:ef:32:b7:3e:b2:6f:36:27:3c:26:
24:e1:1d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYoJJorGtuG6tWi7U5gb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3
MDVmNTgwHhcNMjYwNDE3MDMwMTAzWhcNMjYwNDE4MDMwMTAzWjAzMTEwLwYDVQQD
Eyg0N2YwNGIyOGFjY2ZlM2RhMmQxODE5MDM3MDJkMGQwYTFmNmFhNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQGKrWUVHOy7/F9XlRju/Z2KbjHG
mzbLuYThzeu4KWlJqNS3oYCfXXZTIq2xNK8YbxAAo/ahejh2aPc9ObqGxY5GCyFL
gnmPm6Dmr1HUPapt4+37zIdSqMiyvWEy/yRRivU1ttl6sIr1z4+XkpsFpcU/7x3D
Nj4yEc+TSRxkyF2aRmVwMGXVXYD1pyVvjLkKf5dkkq3pX2e0sEg+Jbyxi7AebS9s
PrfBL/uS2luq+/dLKc0M8zibsSz68W7u3ZdOPcwhdg7VwdXAA5VVve8KZ3HLHCYc
xLmkrd+dnu+0oj1TW0IGwv33orSbR0ZIxUjm1jMo5WIx1kC3HUU0qEQY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfwSyisz+PaLRgZA3AtDQofaqReMB8GA1UdIwQY
MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt
MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz
LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspp39JKZ
j55M+gxqvdqjVj+qMRDVD5qd1s8cCA0Y8q/O9W4B21Xns40dbzvfHCSl6vGXhCjb
hSnVHmqKydy+9G+UsjJuAVXd6eqb6Djorw/yOSB7TLZJ/bbx0uwDEkfHG2Khbv5M
RfZb3hqxGQ+sGcTgFcMVhaMH98H2e+SXT5evFGHBOSB1GFTEhEy+KDqtgjGIfmLu
NQyBcwmXBUrhMBb+1FV722NLhAgdYXuogxTqqFghbJACq1ELTcSY28ySaRsFY9zd
TndCAdkDGgE9tmwe0ADhh3Mp6cynkgUVS7t3tuRc3cS8lUsJlgWJ28F4KfzvMrc+
sm82JzwmJOEdvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:47 2026 by rpki-client