Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: PT7IdGyp3aTnh3LI6p6og+hoBKP3n7POzKsF7YPIm3A=
Subject key identifier: 10:10:BF:4A:98:CD:00:70:80:4D:76:8A:80:E4:2A:5B:CD:E2:4B:A6
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019D9818A4460D6ED858AB41ABA90C349D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 1199
Signing time: Thu 16 Apr 2026 21:00:44 +0000
Manifest this update: Thu 16 Apr 2026 21:00:44 +0000
Manifest next update: Fri 17 Apr 2026 21:00:44 +0000
Files and hashes: 1: J_6ozcvtDoYKAmCxlhoux76Ahfg.roa (hash: lv/v7VLFA2FqHauF9FdFYvoyrCMGxHrhesLrZHX2U9c=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: tUkeA1P4pKWhEeQUrdfWlLeCM0wyJJiGzCChnau72vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a4:46:0d:6e:d8:58:ab:41:ab:a9:0c:34:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Apr 16 21:00:44 2026 GMT
Not After : Apr 17 21:00:44 2026 GMT
Subject: CN=1010bf4a98cd0070804d768a80e42a5bcde24ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:c5:53:b1:4a:79:bf:42:83:74:b5:d7:e2:
dc:f9:3c:53:63:a8:11:d0:76:67:1d:c4:f8:1a:5e:
ba:1b:9f:2b:04:26:05:4b:86:28:f1:ef:aa:45:7d:
d7:b6:70:87:ef:65:f3:2c:d8:2b:7c:90:65:c4:91:
67:64:f5:d1:f6:b3:dd:ad:4b:6e:5f:0a:2b:17:55:
2a:32:fe:26:97:c7:6d:37:a2:c5:d1:b5:90:47:ed:
11:ae:15:a5:40:08:ed:c9:e5:87:c9:4b:88:e0:2f:
54:4a:15:7c:54:b0:08:34:58:e1:ef:19:43:52:af:
4e:63:86:be:eb:78:bd:1a:83:19:17:16:ea:55:f3:
c8:1f:86:ba:fb:69:9b:ae:db:01:aa:01:8c:8e:5b:
9f:50:4e:28:19:6c:69:71:e6:cf:0e:48:33:a3:7f:
e1:39:80:d4:37:30:91:c2:ce:08:83:23:4e:9d:2d:
67:02:e0:41:2a:4b:13:55:43:38:f5:4f:b2:aa:a5:
42:7f:f9:7a:59:9d:66:08:cb:10:16:27:cb:b2:8b:
11:ae:a0:81:b0:80:3d:ac:d9:d0:a0:4b:8f:b1:d0:
80:1c:cd:fe:e7:dd:5a:30:d5:57:04:8d:23:0b:96:
bc:d2:01:21:d4:40:61:24:68:73:70:be:a8:03:28:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:BF:4A:98:CD:00:70:80:4D:76:8A:80:E4:2A:5B:CD:E2:4B:A6
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ad:7d:08:4b:7a:27:5b:c4:cc:2c:0f:3d:5e:ef:a5:e1:3e:
8a:aa:32:a6:c2:cc:54:ac:c2:5e:c0:27:0a:6a:7f:d4:d1:77:
0c:a9:57:a7:12:bb:db:0c:5b:04:42:ac:11:41:31:79:6c:01:
ac:21:d1:f3:97:bd:d4:82:4d:e9:d9:2e:63:49:c6:58:65:34:
10:0e:99:f9:03:ed:6b:83:f9:d3:60:89:92:1c:42:a8:c9:5a:
82:81:ae:ce:a3:bf:7c:f5:56:79:06:46:72:4c:27:40:9f:a0:
39:65:4b:89:5c:c4:8d:17:13:0f:e5:fc:6f:ef:29:76:63:08:
3b:a1:8a:a3:e1:67:a3:e2:65:1d:3c:1b:7d:89:02:97:65:9e:
e4:52:26:c2:57:fb:28:86:8d:ce:30:0d:d4:a8:25:99:f1:69:
12:1f:69:5e:66:d4:32:b2:17:07:d8:fa:1f:98:4b:64:a2:fb:
8d:87:2c:70:be:c3:a4:00:a5:b0:f3:3c:27:76:05:4c:ee:3e:
79:38:47:55:c8:9a:d1:25:45:dc:55:42:9b:d3:4b:2f:dd:aa:
b4:eb:d8:d9:9d:db:be:b8:6d:08:54:2d:dd:b3:a0:82:6c:23:
f4:34:e5:8b:09:fb:e9:49:60:26:ca:12:74:d1:e9:3d:20:59:
51:b7:a1:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKRGDW7YWKtBq6kMNJ1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm
NTE3OGEwHhcNMjYwNDE2MjEwMDQ0WhcNMjYwNDE3MjEwMDQ0WjAzMTEwLwYDVQQD
EygxMDEwYmY0YTk4Y2QwMDcwODA0ZDc2OGE4MGU0MmE1YmNkZTI0YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ADFU7FKeb9Cg3S11+Lc+TxTY6gR
0HZnHcT4Gl66G58rBCYFS4Yo8e+qRX3XtnCH72XzLNgrfJBlxJFnZPXR9rPdrUtu
XworF1UqMv4ml8dtN6LF0bWQR+0RrhWlQAjtyeWHyUuI4C9UShV8VLAINFjh7xlD
Uq9OY4a+63i9GoMZFxbqVfPIH4a6+2mbrtsBqgGMjlufUE4oGWxpcebPDkgzo3/h
OYDUNzCRws4IgyNOnS1nAuBBKksTVUM49U+yqqVCf/l6WZ1mCMsQFifLsosRrqCB
sIA9rNnQoEuPsdCAHM3+591aMNVXBI0jC5a80gEh1EBhJGhzcL6oAyji9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAQv0qYzQBwgE12ioDkKlvN4kumMB8GA1UdIwQY
MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt
M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5
LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK19CEt6
J1vEzCwPPV7vpeE+iqoypsLMVKzCXsAnCmp/1NF3DKlXpxK72wxbBEKsEUExeWwB
rCHR85e91IJN6dkuY0nGWGU0EA6Z+QPta4P502CJkhxCqMlagoGuzqO/fPVWeQZG
ckwnQJ+gOWVLiVzEjRcTD+X8b+8pdmMIO6GKo+Fno+JlHTwbfYkCl2We5FImwlf7
KIaNzjAN1KglmfFpEh9pXmbUMrIXB9j6H5hLZKL7jYcscL7DpAClsPM8J3YFTO4+
eThHVcia0SVF3FVCm9NLL92qtOvY2Z3bvrhtCFQt3bOggmwj9DTliwn76UlgJsoS
dNHpPSBZUbehjA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:45 2026 by rpki-client