Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: OuO3cL4qRPdWpWCpsA88D41U54igNhXAlHlUU/wbByY=
Subject key identifier: 88:A8:76:10:A5:62:A8:F4:C9:2D:71:59:F0:66:0F:03:BD:A8:47:EC
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019D984FA0A5A3161395B508F0D5AAE0FC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (hash: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk=)
2: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: zq/QkX6xk5XgnNodvMSFcch2VhKPQoaO2l1eC0BDodw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a0:a5:a3:16:13:95:b5:08:f0:d5:aa:e0:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=88a87610a562a8f4c92d7159f0660f03bda847ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:68:6d:d6:bd:d4:ab:49:a4:a2:99:15:0f:
89:4c:12:aa:ae:26:20:6e:b6:6e:dd:1f:32:cc:24:
ff:2b:58:cf:3c:d1:93:e0:53:51:21:ea:c3:7b:92:
1c:8d:12:77:80:78:ba:1c:e8:22:ec:5c:6d:ac:97:
31:6d:f7:a8:5a:be:33:56:0d:16:cf:04:c8:23:4e:
45:dc:7d:a1:bd:fa:fe:c6:64:48:f3:b8:22:c6:82:
0b:57:85:3d:ae:e2:25:82:64:43:6f:e5:83:67:18:
0d:16:75:9c:0f:8e:4a:93:02:4c:08:9b:2e:b3:59:
f3:4b:aa:a6:43:6e:bb:93:7e:dd:3d:6c:5d:76:7b:
e8:a3:4b:ec:c3:d6:b5:7f:b7:d2:30:82:43:9a:b9:
b2:f4:bd:1d:74:df:68:82:8d:a6:1d:be:9a:41:2e:
bb:df:3a:2e:75:75:eb:54:70:9e:c9:e5:40:cd:5e:
43:b7:66:08:d1:29:54:c9:93:67:c2:f8:b2:fd:54:
f1:be:a7:f8:e7:e7:3f:45:72:ca:60:ab:7f:0f:8c:
69:0e:7d:ac:bf:f2:9b:e1:cc:51:25:7f:5b:f4:1d:
60:b1:7a:d1:93:c2:40:8a:b7:68:7a:2a:96:79:bc:
c2:8b:52:9c:20:43:42:b5:f1:9d:ac:8b:34:13:9d:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:76:10:A5:62:A8:F4:C9:2D:71:59:F0:66:0F:03:BD:A8:47:EC
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:f2:32:fd:20:e1:ab:0f:3b:87:b1:c5:cf:0d:a3:0e:4a:
57:8c:43:4a:3a:42:08:60:e1:7c:e9:59:04:78:15:cc:41:40:
05:8e:6b:c8:f5:e7:f5:38:fa:86:fc:57:43:3c:67:32:82:81:
d0:6a:c4:96:c5:e3:43:e4:c9:77:a9:57:83:a8:2d:60:3c:05:
1f:2d:24:15:fb:d0:c7:d5:33:77:76:7d:10:a7:f3:4f:67:42:
0c:5e:b5:43:b9:c6:77:af:69:6d:35:7f:31:85:69:d9:15:f8:
b2:db:30:41:27:c2:20:06:79:b8:9f:cc:cd:bb:d6:f1:d4:95:
93:38:f5:60:4e:0d:1c:e0:c6:af:d5:de:05:62:c2:36:ae:dc:
c0:1d:67:9d:bf:5c:f1:be:11:4e:3b:eb:50:06:19:08:45:6b:
32:ad:c6:56:60:9b:20:e7:17:a8:58:ad:87:e6:a7:a8:03:fb:
83:8e:1d:e4:23:e2:62:dc:84:67:15:22:63:7b:da:8d:92:e8:
e7:9b:54:a3:8a:b1:f3:17:b1:f5:a7:b7:58:a4:8e:cb:ec:1b:
df:4b:6e:c5:f5:61:be:6a:4e:4d:1f:04:24:b3:82:4a:88:e1:
11:ab:5a:8e:55:18:d0:dd:84:e9:04:40:56:2c:b8:eb:1b:1e:
45:56:e9:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT6CloxYTlbUI8NWq4PwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl
ZDI2NmQwHhcNMjYwNDE2MjIwMDQ4WhcNMjYwNDE3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg4OGE4NzYxMGE1NjJhOGY0YzkyZDcxNTlmMDY2MGYwM2JkYTg0N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Robda91KtJpKKZFQ+JTBKqriYg
brZu3R8yzCT/K1jPPNGT4FNRIerDe5IcjRJ3gHi6HOgi7FxtrJcxbfeoWr4zVg0W
zwTII05F3H2hvfr+xmRI87gixoILV4U9ruIlgmRDb+WDZxgNFnWcD45KkwJMCJsu
s1nzS6qmQ267k37dPWxddnvoo0vsw9a1f7fSMIJDmrmy9L0ddN9ogo2mHb6aQS67
3zoudXXrVHCeyeVAzV5Dt2YI0SlUyZNnwviy/VTxvqf45+c/RXLKYKt/D4xpDn2s
v/Kb4cxRJX9b9B1gsXrRk8JAirdoeiqWebzCi1KcIENCtfGdrIs0E51KVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiodhClYqj0yS1xWfBmDwO9qEfsMB8GA1UdIwQY
MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt
YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5
LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2vyMv0g
4asPO4exxc8Now5KV4xDSjpCCGDhfOlZBHgVzEFABY5ryPXn9Tj6hvxXQzxnMoKB
0GrElsXjQ+TJd6lXg6gtYDwFHy0kFfvQx9Uzd3Z9EKfzT2dCDF61Q7nGd69pbTV/
MYVp2RX4stswQSfCIAZ5uJ/MzbvW8dSVkzj1YE4NHODGr9XeBWLCNq7cwB1nnb9c
8b4RTjvrUAYZCEVrMq3GVmCbIOcXqFith+anqAP7g44d5CPiYtyEZxUiY3vajZLo
55tUo4qx8xex9ae3WKSOy+wb30tuxfVhvmpOTR8EJLOCSojhEatajlUY0N2E6QRA
Viy46xseRVbpOg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:46 2026 by rpki-client