Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: g32cmwPY+q06OUhaZ9VuSRQY5wDIT2V8E/wIfJuoEjM=
Subject key identifier: 88:67:EA:B2:C2:7F:23:E9:BC:B4:06:DA:D4:37:BF:45:9A:47:A6:3C
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019D9A06CA4760D9D69EF0170041A77B9F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 1443
Signing time: Fri 17 Apr 2026 06:00:29 +0000
Manifest this update: Fri 17 Apr 2026 06:00:29 +0000
Manifest next update: Sat 18 Apr 2026 06:00:29 +0000
Files and hashes: 1: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: MAtBCpVB60xKamwQbgdfAV/tbUu20i0D7lwLws00dLo=)
2: bKdz8rFHyrzAIFA57TIT19mDKGc.roa (hash: 22Fu9At8wBjrLfQsilSYa4ZG0swleKB41MAi2nrwzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ca:47:60:d9:d6:9e:f0:17:00:41:a7:7b:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Apr 17 06:00:29 2026 GMT
Not After : Apr 18 06:00:29 2026 GMT
Subject: CN=8867eab2c27f23e9bcb406dad437bf459a47a63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:b7:2d:60:bf:8d:19:13:a0:29:cb:19:03:
d0:14:03:9e:ad:6c:14:ae:0b:08:6a:a0:89:31:a3:
cc:3e:15:16:74:f1:b2:ab:2d:f3:a6:de:4e:7c:82:
d3:41:f6:b2:76:e4:1c:1f:ff:b5:80:0c:ce:e0:77:
37:80:c3:0a:6c:69:f9:fe:95:a4:65:00:80:66:e0:
ee:5c:a0:2e:b2:5c:bf:eb:b1:ee:5a:6a:a6:34:c8:
24:60:68:3e:27:17:e1:c1:bc:a7:9d:f0:b4:5f:27:
5b:6f:22:25:d7:79:05:b3:69:fe:8d:d4:e7:ff:5f:
1d:62:6c:ff:c1:07:70:ab:be:ee:a2:f1:44:d5:bd:
41:69:4b:a9:d5:9e:5b:e6:6d:95:bd:dd:59:2a:71:
71:9e:0a:3e:90:5e:03:d2:9a:ee:1d:28:90:02:7b:
33:6c:9e:05:8b:a3:bf:7d:9d:0a:32:a1:b1:c4:3b:
b2:d5:6f:b3:3d:64:9d:94:b7:23:1e:08:bf:81:30:
10:fd:41:65:93:a7:12:2d:74:3f:7c:d1:64:89:33:
96:5e:93:e1:f1:a7:13:ce:df:6a:59:1e:3c:64:d6:
17:ca:17:0a:2c:a9:77:4a:13:ae:c7:b3:a4:63:b4:
ed:66:9c:f7:d9:6a:ff:57:b2:7f:e6:6c:ce:62:b8:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:EA:B2:C2:7F:23:E9:BC:B4:06:DA:D4:37:BF:45:9A:47:A6:3C
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3e:f2:0a:28:5f:6c:27:57:2d:92:3a:ac:1a:d7:67:f0:5c:
da:28:13:0c:fe:df:40:e7:7b:af:3c:68:b8:75:6a:1d:19:ef:
53:b0:58:4b:2b:01:9b:09:30:2f:3b:79:3d:7e:eb:9d:0b:1f:
41:17:63:ea:26:d9:c4:bf:5d:49:91:ca:be:da:cd:48:11:a7:
f0:fc:d1:f0:2a:f4:4f:f0:14:b6:fd:79:6b:75:7f:91:32:06:
32:84:b8:a9:c2:75:e6:cc:3f:21:09:04:15:63:ea:44:04:cf:
a9:e1:19:ab:d1:74:07:da:69:e6:40:4a:cb:90:04:fb:c6:1e:
9e:c0:fe:26:5a:86:9d:96:1d:88:58:b8:ee:cf:24:09:67:4d:
14:54:f3:da:46:25:53:83:d4:be:c8:c9:08:42:9b:3a:9b:7c:
bf:7e:f1:8d:f3:6f:7b:d6:b2:76:33:c7:f1:01:2f:c3:b8:32:
4f:dc:6f:6a:a0:af:38:38:46:a0:4e:eb:76:d6:c2:64:5e:22:
ee:8b:01:88:00:4c:c8:e0:0c:46:f8:34:68:6f:3a:d8:74:52:
7d:30:d7:bf:56:08:3c:b3:a6:36:41:85:36:3d:85:fb:32:71:
70:c5:b9:8f:b1:2e:8b:46:8e:90:92:e7:6e:96:fc:64:b5:31:
b6:19:73:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBspHYNnWnvAXAEGne59iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz
ZGYyM2IwHhcNMjYwNDE3MDYwMDI5WhcNMjYwNDE4MDYwMDI5WjAzMTEwLwYDVQQD
Eyg4ODY3ZWFiMmMyN2YyM2U5YmNiNDA2ZGFkNDM3YmY0NTlhNDdhNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7q3LWC/jRkToCnLGQPQFAOerWwU
rgsIaqCJMaPMPhUWdPGyqy3zpt5OfILTQfayduQcH/+1gAzO4Hc3gMMKbGn5/pWk
ZQCAZuDuXKAusly/67HuWmqmNMgkYGg+JxfhwbynnfC0XydbbyIl13kFs2n+jdTn
/18dYmz/wQdwq77uovFE1b1BaUup1Z5b5m2Vvd1ZKnFxngo+kF4D0pruHSiQAnsz
bJ4Fi6O/fZ0KMqGxxDuy1W+zPWSdlLcjHgi/gTAQ/UFlk6cSLXQ/fNFkiTOWXpPh
8acTzt9qWR48ZNYXyhcKLKl3ShOux7OkY7TtZpz32Wr/V7J/5mzOYrgDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhn6rLCfyPpvLQG2tQ3v0WaR6Y8MB8GA1UdIwQY
MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt
MWIzYTM2ZTFhY2E4LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4
LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz7yCihf
bCdXLZI6rBrXZ/Bc2igTDP7fQOd7rzxouHVqHRnvU7BYSysBmwkwLzt5PX7rnQsf
QRdj6ibZxL9dSZHKvtrNSBGn8PzR8Cr0T/AUtv15a3V/kTIGMoS4qcJ15sw/IQkE
FWPqRATPqeEZq9F0B9pp5kBKy5AE+8YensD+JlqGnZYdiFi47s8kCWdNFFTz2kYl
U4PUvsjJCEKbOpt8v37xjfNve9aydjPH8QEvw7gyT9xvaqCvODhGoE7rdtbCZF4i
7osBiABMyOAMRvg0aG862HRSfTDXv1YIPLOmNkGFNj2F+zJxcMW5j7Eui0aOkJLn
bpb8ZLUxthlzdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:04 2026 by rpki-client