Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: QxQqFXPxPyM7e5+0LtIODvxmjk1BtDq6cYGUPkG6ez8=
Subject key identifier: D4:02:E8:DC:E6:1D:8E:B5:07:2E:64:CD:89:92:FE:14:C9:28:84:9D
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 019D98868CF2ADBF6762604F05DBEF684915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 06E7
Signing time: Thu 16 Apr 2026 23:00:47 +0000
Manifest this update: Thu 16 Apr 2026 23:00:47 +0000
Manifest next update: Fri 17 Apr 2026 23:00:47 +0000
Files and hashes: 1: hEPLWwWf7jJuBwfcBot8uZscUzg.roa (hash: MqR78deoycBbmzcw7LAPrygstqswKZFRL7vJYn9//Dk=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: DSglUvMbNwaD1MFdguMN5j38qaKlBA/CGom9fdr7Qj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:8c:f2:ad:bf:67:62:60:4f:05:db:ef:68:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Apr 16 23:00:47 2026 GMT
Not After : Apr 17 23:00:47 2026 GMT
Subject: CN=d402e8dce61d8eb5072e64cd8992fe14c928849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:1a:59:7c:e6:ce:13:82:08:d5:af:0c:9a:
74:39:e8:eb:04:63:6a:b0:4b:e8:9d:eb:c5:dd:07:
d9:de:c8:35:4d:8e:4a:4b:1e:00:48:67:b1:d3:94:
c0:13:f8:dc:2f:0d:1a:8f:22:4c:23:70:d2:07:df:
09:4d:97:b2:de:ec:e5:a4:27:4d:18:75:82:ba:1a:
e3:77:72:bc:6f:73:ee:d4:fd:a2:85:50:8e:21:86:
db:5d:47:6d:74:95:db:cb:d7:c3:f8:e8:86:c6:1d:
7c:5a:52:59:5b:a4:4e:c6:ec:f2:de:74:33:95:43:
f4:ca:18:68:6e:57:25:47:42:a4:e1:98:1c:63:62:
3c:f7:21:64:ae:e6:33:2f:d7:b5:09:96:d4:30:e7:
c4:ca:e7:66:55:c1:00:67:30:63:10:62:57:d0:c2:
ea:40:6e:74:8e:94:eb:2d:8a:87:17:1a:c8:8f:99:
0f:a2:5b:fd:5d:2b:5a:e7:a3:87:d8:9a:0a:7f:e6:
3d:9b:2a:4e:c1:57:2c:74:e1:f3:4f:da:d9:83:01:
6c:d6:7e:bf:0c:50:74:bc:a1:c9:46:e5:7a:3a:c9:
5a:8c:45:87:72:14:d2:cb:4e:e5:a4:db:96:41:5a:
ed:fe:7b:f1:2c:9f:da:85:07:2f:e2:04:d7:07:6a:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:E8:DC:E6:1D:8E:B5:07:2E:64:CD:89:92:FE:14:C9:28:84:9D
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:01:ec:27:bc:44:7b:7d:e7:6e:ba:d0:82:b9:45:1b:66:0e:
8a:55:1d:ed:fb:48:f3:3f:ad:7e:22:f1:e6:fb:36:90:15:07:
b7:c3:f9:30:5f:e3:3a:2a:2a:04:0e:75:d6:2c:e6:3b:e3:3a:
bd:87:6d:ec:ef:27:9a:f0:e4:1a:f3:3b:a5:9d:a7:dc:93:e5:
21:cc:f7:d7:cc:97:51:da:64:f0:51:0d:03:e2:0b:97:d7:c0:
24:0d:fc:f5:1f:db:e6:63:0e:86:97:c2:9f:0a:c1:8f:c4:e8:
ba:a5:1a:62:76:c0:94:6d:f9:2a:16:29:88:92:4c:f4:06:9e:
07:bf:e4:5b:8b:27:7b:53:84:dc:b0:b8:a7:55:84:aa:24:dd:
2c:6c:ee:d6:b4:61:30:34:bb:98:35:3a:d2:40:b4:23:70:52:
85:c4:bf:c6:9b:2f:a8:25:5f:46:cc:10:e6:ff:78:f8:39:ee:
25:7a:54:83:d9:22:22:d5:3d:3a:78:c5:d7:c5:33:91:cd:d4:
37:8a:79:ba:d2:ac:70:fd:ab:b4:99:88:f5:13:7d:f5:25:53:
cf:65:13:9f:66:9c:c5:9c:43:d1:d1:66:e0:18:fe:18:48:ce:
8c:e8:b4:1a:56:f1:0e:bb:ed:8e:d1:8b:a0:7a:62:8e:a9:45:
7f:f5:f5:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhozyrb9nYmBPBdvvaEkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWVkMjE4OGRhOWVjYWRhMTE0OTE0NWFlZmE0OTcyNmZl
MDFlOTYwHhcNMjYwNDE2MjMwMDQ3WhcNMjYwNDE3MjMwMDQ3WjAzMTEwLwYDVQQD
EyhkNDAyZThkY2U2MWQ4ZWI1MDcyZTY0Y2Q4OTkyZmUxNGM5Mjg4NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWgaWXzmzhOCCNWvDJp0OejrBGNq
sEvonevF3QfZ3sg1TY5KSx4ASGex05TAE/jcLw0ajyJMI3DSB98JTZey3uzlpCdN
GHWCuhrjd3K8b3Pu1P2ihVCOIYbbXUdtdJXby9fD+OiGxh18WlJZW6ROxuzy3nQz
lUP0yhhoblclR0Kk4ZgcY2I89yFkruYzL9e1CZbUMOfEyudmVcEAZzBjEGJX0MLq
QG50jpTrLYqHFxrIj5kPolv9XSta56OH2JoKf+Y9mypOwVcsdOHzT9rZgwFs1n6/
DFB0vKHJRuV6OslajEWHchTSy07lpNuWQVrt/nvxLJ/ahQcv4gTXB2oLMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQC6NzmHY61By5kzYmS/hTJKISdMB8GA1UdIwQY
MBaAFI+e0hiNqeytoRSRRa76SXJv4B6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2Yt
ZTcyNDEwNDk3NDVhLzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNGM3YzctNTdlZC00NWU2LTlmY2YtZTcyNDEwNDk3NDVh
LzEvajU3U0dJMnA3SzJoRkpGRnJ2cEpjbV9nSHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQHsJ7xE
e33nbrrQgrlFG2YOilUd7ftI8z+tfiLx5vs2kBUHt8P5MF/jOioqBA511izmO+M6
vYdt7O8nmvDkGvM7pZ2n3JPlIcz318yXUdpk8FENA+ILl9fAJA389R/b5mMOhpfC
nwrBj8TouqUaYnbAlG35KhYpiJJM9AaeB7/kW4sne1OE3LC4p1WEqiTdLGzu1rRh
MDS7mDU60kC0I3BShcS/xpsvqCVfRswQ5v94+DnuJXpUg9kiItU9OnjF18Uzkc3U
N4p5utKscP2rtJmI9RN99SVTz2UTn2acxZxD0dFm4Bj+GEjOjOi0GlbxDrvtjtGL
oHpijqlFf/X1Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:41 2026 by rpki-client