Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: vTia3fk+gCktWFAYWjcxJJ48jkhpSDdpKuLzJ0GMHNw=
Subject key identifier: 05:95:94:56:9D:71:01:75:E1:0C:52:FE:82:CE:66:58:A8:F9:D6:7E
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019D9A3EE3F3B6297A1DEA82CAC080F125F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (hash: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: +EGb0s2OohK73WkxCDeAHkiGZiD8uiZNCvQvC9qhvpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e3:f3:b6:29:7a:1d:ea:82:ca:c0:80:f1:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=059594569d710175e10c52fe82ce6658a8f9d67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:a5:a7:ae:49:83:90:78:c2:87:bd:9c:98:
b6:08:cc:aa:c8:9e:ae:1d:d5:73:f0:9e:6e:84:0a:
d0:6b:d3:a8:08:32:6d:72:bb:43:dd:2c:be:21:df:
32:eb:b9:1f:f0:63:97:e3:bb:f3:21:f3:ed:5e:2d:
2a:65:5f:d8:89:44:3c:a8:4e:18:b2:90:52:a1:d9:
1f:01:7f:54:8d:a7:1c:ac:d6:d1:77:f2:2d:69:96:
df:2f:e6:c7:80:ea:44:86:b0:ac:31:93:1a:fb:f4:
d8:5b:0f:72:a1:f9:0e:a9:b0:15:60:68:e1:49:eb:
d4:d5:98:30:77:77:8d:c3:1e:ae:36:24:4d:af:78:
66:43:87:ba:94:69:05:b2:97:85:bc:9e:54:65:f8:
e9:0a:d4:da:fb:6a:83:01:68:6c:a1:ca:c9:d9:a9:
6a:b9:c3:fc:c1:a7:7b:b8:75:88:03:ef:ae:d9:29:
40:11:da:14:49:39:d6:50:71:69:b8:b7:47:d4:10:
bf:f5:cc:97:16:a1:3d:60:74:7c:d6:18:45:16:c5:
08:94:34:83:45:98:fd:8e:c0:1e:66:c8:8f:f1:31:
c8:41:8c:ec:01:57:52:9f:fd:31:aa:7d:95:79:23:
c1:dc:6d:6e:1b:fc:cc:c7:c8:8d:a9:05:e7:fc:92:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:94:56:9D:71:01:75:E1:0C:52:FE:82:CE:66:58:A8:F9:D6:7E
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ab:7c:f2:5c:f3:17:3c:1f:d7:71:fd:de:1b:7b:d6:89:95:
08:7f:7d:4e:66:d1:1d:6f:d1:43:1c:a5:d3:8b:51:d1:af:15:
6e:a5:60:47:a2:ea:86:a7:4b:18:e7:a2:4a:98:ef:01:c1:9c:
5a:d8:c3:1f:94:81:6e:c5:b5:63:96:a6:e9:11:f0:df:8e:b1:
02:f1:3c:0f:ca:d5:56:19:65:8e:3e:90:48:6e:16:91:d3:df:
57:a3:f4:d8:c2:fc:ab:78:fa:f8:6f:d8:a0:32:b4:37:a7:a3:
25:12:a1:b1:7a:6e:51:6a:84:7d:19:fc:d3:cb:8f:c0:e1:3e:
a6:81:09:e7:b4:00:ac:ba:35:c4:43:f0:ca:49:ef:ae:df:f8:
0a:2f:00:16:65:5f:16:5d:87:a8:f8:16:e0:b0:2d:59:f7:58:
82:a0:aa:79:fa:49:f1:48:bc:d8:3c:08:eb:96:8b:6c:c7:65:
91:5d:79:67:90:03:b5:f0:e1:a9:7f:cc:7a:1d:f0:12:ab:dc:
5c:bf:ec:e6:c5:f2:d0:51:df:a1:49:f1:1b:ef:a9:16:5c:57:
0d:fa:01:dc:a2:b9:c4:64:27:c7:86:88:33:e5:cd:ab:56:49:
93:71:0e:30:79:bc:c7:9b:16:ae:47:24:cd:84:0c:b8:1e:9e:
6c:62:5a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPuPztil6HeqCysCA8SXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh
OTQ5YjMwHhcNMjYwNDE3MDcwMTQ1WhcNMjYwNDE4MDcwMTQ1WjAzMTEwLwYDVQQD
EygwNTk1OTQ1NjlkNzEwMTc1ZTEwYzUyZmU4MmNlNjY1OGE4ZjlkNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47elp65Jg5B4woe9nJi2CMyqyJ6u
HdVz8J5uhArQa9OoCDJtcrtD3Sy+Id8y67kf8GOX47vzIfPtXi0qZV/YiUQ8qE4Y
spBSodkfAX9UjaccrNbRd/ItaZbfL+bHgOpEhrCsMZMa+/TYWw9yofkOqbAVYGjh
SevU1Zgwd3eNwx6uNiRNr3hmQ4e6lGkFspeFvJ5UZfjpCtTa+2qDAWhsocrJ2alq
ucP8wad7uHWIA++u2SlAEdoUSTnWUHFpuLdH1BC/9cyXFqE9YHR81hhFFsUIlDSD
RZj9jsAeZsiP8THIQYzsAVdSn/0xqn2VeSPB3G1uG/zMx8iNqQXn/JIRQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWVlFadcQF14QxS/oLOZlio+dZ+MB8GA1UdIwQY
MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It
MDBlZDkwMjY5YmI0LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0
LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6t88lzz
Fzwf13H93ht71omVCH99TmbRHW/RQxyl04tR0a8VbqVgR6LqhqdLGOeiSpjvAcGc
WtjDH5SBbsW1Y5am6RHw346xAvE8D8rVVhlljj6QSG4WkdPfV6P02ML8q3j6+G/Y
oDK0N6ejJRKhsXpuUWqEfRn808uPwOE+poEJ57QArLo1xEPwyknvrt/4Ci8AFmVf
Fl2HqPgW4LAtWfdYgqCqefpJ8Ui82DwI65aLbMdlkV15Z5ADtfDhqX/Meh3wEqvc
XL/s5sXy0FHfoUnxG++pFlxXDfoB3KK5xGQnx4aIM+XNq1ZJk3EOMHm8x5sWrkck
zYQMuB6ebGJaaw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:21 2026 by rpki-client