Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: O9E/CQJck2THuO6HGf39Q95gSY3iWptjfXBArYYCZHQ=
Subject key identifier: 96:A4:6D:6B:92:FB:C2:39:93:11:35:8D:43:6C:F5:36:84:24:4E:F0
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019D9BBE5CA611BB8790D445E678CD1FDD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 14:00:37 +0000
Manifest this update: Fri 17 Apr 2026 14:00:37 +0000
Manifest next update: Sat 18 Apr 2026 14:00:37 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: Ov7JcOypii+2wxPr02Ap0tQfoRsyLj4A60WaeLvkato=)
2: WPaT0Y7RS5CA12LK1l6IVoc8b5w.roa (hash: RbeOiouCG0/fdoKUcqWun90nLWJeLto+KTqvRhLoP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:5c:a6:11:bb:87:90:d4:45:e6:78:cd:1f:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Apr 17 14:00:37 2026 GMT
Not After : Apr 18 14:00:37 2026 GMT
Subject: CN=96a46d6b92fbc2399311358d436cf53684244ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:16:7a:6d:09:6c:bd:b6:22:c8:c0:27:bb:
84:ac:b6:0a:46:eb:6b:7c:b9:ef:98:28:39:c6:bc:
62:7d:88:48:36:c2:5f:3c:a7:60:89:2f:8e:5e:0f:
70:ca:33:41:70:15:82:97:22:05:36:9b:76:ce:b9:
7d:cb:f1:a5:00:12:76:82:d3:ec:41:5e:31:e0:ee:
d8:c0:3b:fc:78:48:f3:2b:95:22:8f:4a:c6:ff:72:
0a:95:25:4c:c0:b3:78:a5:47:ca:34:c4:3b:1e:85:
f7:62:18:3b:03:55:ad:b2:71:0b:95:6a:7e:f0:cc:
99:97:e9:c0:2b:64:c6:ae:9e:ce:44:e2:ca:bf:30:
65:04:bc:35:f0:71:a4:80:e4:b2:1d:46:ab:2c:b0:
3a:55:19:b0:16:34:b6:bd:9d:44:7e:66:4d:45:29:
56:0f:94:90:d2:a8:a9:7a:de:21:19:a9:aa:ea:eb:
6f:1c:e6:67:de:0c:01:f8:08:f1:9f:ef:b1:33:d2:
5f:6f:23:3b:89:1c:df:14:c3:db:95:86:5b:91:c1:
7c:b5:43:09:1b:4a:1c:a9:2c:9e:14:bc:a8:63:6b:
b0:cd:d6:8c:00:c6:17:92:7e:40:60:ab:c9:af:25:
f5:ac:c5:5b:47:f1:a9:7c:8b:11:97:33:32:fb:af:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:6D:6B:92:FB:C2:39:93:11:35:8D:43:6C:F5:36:84:24:4E:F0
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:39:e6:c5:26:e2:4f:3b:08:80:6e:22:e2:d6:86:ec:53:e7:
2a:e8:88:5f:c2:94:3d:17:b6:00:64:dd:72:90:a3:d3:38:6b:
6b:7b:f8:47:f6:6a:b8:45:a7:8d:cd:44:75:63:8c:d6:a2:17:
8e:a4:ee:86:bc:3f:f4:1e:e1:31:22:46:48:93:cd:08:c1:9d:
03:9d:57:56:7d:66:7c:b2:c6:78:d4:3c:74:18:e8:0c:51:41:
93:af:df:45:66:a0:4b:26:0b:20:93:16:c6:db:48:75:5a:ff:
7f:bf:dd:02:ee:f6:f4:09:32:cc:90:a4:08:db:69:c0:dc:af:
92:60:ad:0e:57:27:cf:39:13:e2:fc:91:cf:de:27:16:90:af:
6c:dd:de:7b:54:36:08:90:d1:6f:5b:6b:56:38:15:37:c5:4f:
fb:16:32:94:f8:88:a6:78:99:41:c8:da:67:91:4d:57:f5:e1:
ca:ed:58:71:d5:e0:35:af:6a:8e:11:74:59:b5:11:9f:0a:f4:
4a:d6:a5:e1:ac:05:52:04:a8:46:53:75:40:39:6a:55:bb:fe:
79:ee:8b:78:dc:7a:29:3c:39:0e:b8:cf:12:77:9a:ae:83:83:
b3:db:57:39:49:b3:16:ee:0a:47:ed:57:54:d1:d5:5d:d0:0e:
ff:a3:a8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvlymEbuHkNRF5njNH92cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjYwNDE3MTQwMDM3WhcNMjYwNDE4MTQwMDM3WjAzMTEwLwYDVQQD
Eyg5NmE0NmQ2YjkyZmJjMjM5OTMxMTM1OGQ0MzZjZjUzNjg0MjQ0ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwWem0JbL22IsjAJ7uErLYKRutr
fLnvmCg5xrxifYhINsJfPKdgiS+OXg9wyjNBcBWClyIFNpt2zrl9y/GlABJ2gtPs
QV4x4O7YwDv8eEjzK5Uij0rG/3IKlSVMwLN4pUfKNMQ7HoX3Yhg7A1WtsnELlWp+
8MyZl+nAK2TGrp7OROLKvzBlBLw18HGkgOSyHUarLLA6VRmwFjS2vZ1EfmZNRSlW
D5SQ0qipet4hGamq6utvHOZn3gwB+Ajxn++xM9JfbyM7iRzfFMPblYZbkcF8tUMJ
G0ocqSyeFLyoY2uwzdaMAMYXkn5AYKvJryX1rMVbR/GpfIsRlzMy+6/wiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJakbWuS+8I5kxE1jUNs9TaEJE7wMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYznmxSbi
TzsIgG4i4taG7FPnKuiIX8KUPRe2AGTdcpCj0zhra3v4R/ZquEWnjc1EdWOM1qIX
jqTuhrw/9B7hMSJGSJPNCMGdA51XVn1mfLLGeNQ8dBjoDFFBk6/fRWagSyYLIJMW
xttIdVr/f7/dAu729AkyzJCkCNtpwNyvkmCtDlcnzzkT4vyRz94nFpCvbN3ee1Q2
CJDRb1trVjgVN8VP+xYylPiIpniZQcjaZ5FNV/Xhyu1YcdXgNa9qjhF0WbURnwr0
Stal4awFUgSoRlN1QDlqVbv+ee6LeNx6KTw5DrjPEnearoODs9tXOUmzFu4KR+1X
VNHVXdAO/6OoYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:04 2026 by rpki-client