Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: 2ZeU7atl68t2d/YVCnIvaQM6MCDQwZzErCH6LWP5bsE=
Subject key identifier: 7D:0D:06:46:0D:0E:22:68:6E:91:88:A1:8F:48:DA:F8:99:F1:9B:0E
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 019D99D06991C6115DEB78F2C0FA6E4EFA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: RiSZlLjYu2HkKfgG-ViVEkyKZns.roa (hash: lhY041uMz7TjMMSGYMZC4RSrTiXBMmzOCgXBevRNjRY=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: hKKqM5Jq78FyAPODag9AR+mI7lD2xYbBYQVfCCuqjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:69:91:c6:11:5d:eb:78:f2:c0:fa:6e:4e:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=7d0d06460d0e22686e9188a18f48daf899f19b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:b2:b9:72:63:7c:c5:79:ea:56:d2:f7:d3:
6a:36:06:62:97:c4:3f:15:09:1f:b0:03:30:20:97:
0c:28:2b:be:e5:7c:fc:f5:87:4c:93:63:f4:e1:83:
7c:c8:01:ad:b8:1e:59:9f:e9:b3:79:0f:3b:37:52:
1d:34:90:12:1a:b4:6a:2b:fe:c3:88:6e:6a:87:fe:
7b:c7:72:22:0f:70:a7:82:27:18:d9:dd:69:2c:20:
df:c7:d5:5b:ea:d3:11:93:66:72:f4:56:d5:69:f3:
b4:84:68:96:ab:77:a5:dd:1f:df:5d:9c:a5:aa:a8:
ad:24:b0:f5:5f:c3:1e:50:81:3f:f0:5d:a4:96:f3:
90:3e:94:fd:06:0e:88:77:a3:29:a1:3e:d2:46:c7:
8b:e7:83:f4:4e:81:48:4d:a1:28:4d:52:00:5d:b2:
9b:db:db:77:b5:3c:99:e7:fa:f2:45:b9:f5:c0:d8:
f4:9c:6c:70:d3:1d:df:57:57:87:a9:34:26:ff:17:
6f:39:78:bc:d1:ce:b4:4c:5c:71:6f:a6:c9:f9:44:
09:05:cd:b8:f7:1b:6e:e8:10:2e:66:e8:5a:50:dc:
53:a8:f2:4b:71:a0:c4:aa:9a:6f:63:b4:f3:c5:cb:
c8:55:3f:26:fe:44:52:97:53:7d:8a:52:d7:44:38:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:06:46:0D:0E:22:68:6E:91:88:A1:8F:48:DA:F8:99:F1:9B:0E
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:98:61:47:f8:54:dd:21:76:72:d5:c8:fc:9c:7f:60:f7:97:
e7:98:09:00:a9:4f:54:31:6e:67:37:1b:e5:84:7a:9a:1c:d5:
84:30:aa:20:8e:4c:1b:43:63:85:cb:14:5c:48:44:4f:d4:8e:
16:6f:0f:6f:b2:95:ab:af:ed:ed:6c:97:17:e2:96:09:86:17:
8f:20:af:c7:b8:f1:3c:af:98:fa:0b:a0:66:3a:e3:42:89:42:
2a:18:bf:11:63:9c:f9:b2:58:e1:93:e7:85:1e:8d:1f:81:78:
16:ce:56:c4:1b:b3:9b:a5:75:65:58:ab:ac:1b:7d:e4:69:38:
c7:d7:aa:cf:b9:88:86:4f:89:50:9e:ec:23:b7:04:f7:7b:3a:
8d:d4:a2:7f:51:8c:25:54:12:20:e3:92:e1:4c:11:11:f4:b1:
02:24:e9:2a:0e:db:80:eb:2e:4b:db:eb:cf:74:98:e9:bb:26:
29:4b:0e:37:82:c5:1e:9f:f7:49:28:a4:09:49:4e:bf:82:e9:
6c:86:b8:21:99:cf:73:37:09:d1:69:91:23:4a:ca:ee:dc:df:
dc:94:7f:e1:68:54:8b:2d:1a:7c:81:96:ca:1e:db:e8:48:76:
32:06:cc:e0:eb:a9:c7:2d:b1:78:bd:fd:9d:64:1d:17:ce:c6:
ee:5c:9a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0GmRxhFd63jywPpuTvptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzA0MzljNzk1NTUxMTAyZDZmMWU0Y2ViNmQxYzUyZmJj
NWVhM2YwHhcNMjYwNDE3MDUwMTA1WhcNMjYwNDE4MDUwMTA1WjAzMTEwLwYDVQQD
Eyg3ZDBkMDY0NjBkMGUyMjY4NmU5MTg4YTE4ZjQ4ZGFmODk5ZjE5YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJmyuXJjfMV56lbS99NqNgZil8Q/
FQkfsAMwIJcMKCu+5Xz89YdMk2P04YN8yAGtuB5Zn+mzeQ87N1IdNJASGrRqK/7D
iG5qh/57x3IiD3CngicY2d1pLCDfx9Vb6tMRk2Zy9FbVafO0hGiWq3el3R/fXZyl
qqitJLD1X8MeUIE/8F2klvOQPpT9Bg6Id6MpoT7SRseL54P0ToFITaEoTVIAXbKb
29t3tTyZ5/ryRbn1wNj0nGxw0x3fV1eHqTQm/xdvOXi80c60TFxxb6bJ+UQJBc24
9xtu6BAuZuhaUNxTqPJLcaDEqppvY7TzxcvIVT8m/kRSl1N9ilLXRDiYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0NBkYNDiJobpGIoY9I2viZ8ZsOMB8GA1UdIwQY
MBaAFLTAQ5x5VVEQLW8eTOttHFL7xeo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjct
ZThlZGU1YTJmODc1LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NmJhMDItZjk3MC00ODY5LWJlMjctZThlZGU1YTJmODc1
LzEvdE1CRG5IbFZVUkF0Yng1TTYyMGNVdnZGNmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKphhR/hU
3SF2ctXI/Jx/YPeX55gJAKlPVDFuZzcb5YR6mhzVhDCqII5MG0NjhcsUXEhET9SO
Fm8Pb7KVq6/t7WyXF+KWCYYXjyCvx7jxPK+Y+gugZjrjQolCKhi/EWOc+bJY4ZPn
hR6NH4F4Fs5WxBuzm6V1ZVirrBt95Gk4x9eqz7mIhk+JUJ7sI7cE93s6jdSif1GM
JVQSIOOS4UwREfSxAiTpKg7bgOsuS9vrz3SY6bsmKUsON4LFHp/3SSikCUlOv4Lp
bIa4IZnPczcJ0WmRI0rK7tzf3JR/4WhUiy0afIGWyh7b6Eh2MgbM4Oupxy2xeL39
nWQdF87G7lyaqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:06 2026 by rpki-client