Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: eShviFyyKf4MjL+kBiJPD6Ag9o93S2aogIUpXvUPTDI=
Subject key identifier: 75:5F:B7:10:EA:6B:3C:F8:B4:05:81:F3:DD:6C:76:79:76:FE:E2:A7
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019DA378ABB34F3BAF7B5D60AABA7D16E687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:27 +0000
Manifest this update: Sun 19 Apr 2026 02:01:27 +0000
Manifest next update: Mon 20 Apr 2026 02:01:27 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: feFE6KVkVb8jVjW9kbw6Tg7gqEKsqWe9rRCdLkzSL/c=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:ab:b3:4f:3b:af:7b:5d:60:aa:ba:7d:16:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Apr 19 02:01:27 2026 GMT
Not After : Apr 20 02:01:27 2026 GMT
Subject: CN=755fb710ea6b3cf8b40581f3dd6c767976fee2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:f3:07:73:57:e0:71:19:e3:b4:9c:dc:fa:
e7:3e:a0:fb:56:49:8d:f5:a5:27:89:d7:ff:49:21:
2a:92:cd:99:f1:66:7a:8a:58:e7:57:32:7f:ca:a2:
09:36:6e:6b:f3:e1:84:dc:ab:b9:c7:fb:34:32:1f:
81:5e:97:13:af:76:8f:3b:66:1d:3f:e0:7c:ac:b6:
6a:c6:9f:62:36:ec:d0:79:81:d2:6e:ed:a4:e5:af:
7a:cc:2c:c1:d5:f5:8d:1c:a9:57:2a:1d:4f:0a:5c:
e3:f0:6b:6a:81:3e:8e:3a:53:88:51:a3:3e:a8:a7:
1d:4b:75:e0:ba:9b:42:19:11:0b:47:bc:39:24:5b:
16:b9:95:aa:13:05:17:1d:21:78:09:c7:ba:ae:34:
d3:67:1c:89:be:cc:33:8f:b9:8d:88:09:f9:9f:e7:
04:13:46:71:5a:7f:0f:02:82:70:22:07:b6:9a:d7:
ec:25:75:e9:bc:73:a3:c9:2d:17:14:71:b2:6c:36:
11:ad:83:e6:9f:36:cd:de:36:ac:e9:97:1e:53:58:
90:23:80:89:84:bf:b7:a7:d9:be:b4:96:60:a3:7d:
08:81:a7:54:5c:5e:d5:3e:a5:5e:0c:d1:51:d8:0d:
99:b0:3a:20:b9:67:df:a6:b2:cd:d6:12:36:ca:c8:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:B7:10:EA:6B:3C:F8:B4:05:81:F3:DD:6C:76:79:76:FE:E2:A7
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:71:f7:21:2e:7b:9c:8e:69:fa:26:12:ee:cc:c6:4d:87:
5e:f8:15:c5:f1:f7:4a:bc:fc:0d:55:5f:92:33:6f:d4:2e:ad:
02:3f:88:29:67:68:de:1e:f1:f6:a6:61:6c:ef:b7:23:3d:0e:
38:ff:f2:65:3a:67:b7:64:de:36:83:32:b3:df:71:6c:f3:a8:
39:94:4e:9d:4c:39:b5:d3:53:6e:54:e3:8d:a0:34:1b:bf:3b:
29:2d:20:ca:64:54:d0:95:e5:e8:46:23:23:62:1d:43:c7:7c:
f8:06:0b:08:19:d9:5d:96:83:bd:0c:d4:2f:c4:e4:f5:ec:3c:
17:31:dc:54:98:81:d8:25:34:cf:3d:cf:e4:8f:e7:35:e8:06:
06:eb:b5:07:4b:01:af:a3:f8:87:64:80:58:b8:6a:99:0b:c6:
b2:c1:9f:c4:bc:3a:dd:f7:9d:a9:a5:13:b1:04:51:6f:b5:24:
b5:03:2a:6a:e6:60:3f:79:70:dc:fb:31:24:6c:57:a8:08:1e:
6d:36:be:c1:85:d6:8c:2c:78:1d:ae:d5:33:13:b3:3d:dd:26:
d2:b5:73:02:d0:14:bf:d2:5e:4f:70:0a:b3:a7:33:79:1b:7e:
b5:30:d7:da:88:29:2c:07:f6:25:33:34:73:a8:36:ac:10:17:
b2:18:68:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeKuzTzuve11gqrp9FuaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjYwNDE5MDIwMTI3WhcNMjYwNDIwMDIwMTI3WjAzMTEwLwYDVQQD
Eyg3NTVmYjcxMGVhNmIzY2Y4YjQwNTgxZjNkZDZjNzY3OTc2ZmVlMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9XzB3NX4HEZ47Sc3PrnPqD7VkmN
9aUnidf/SSEqks2Z8WZ6iljnVzJ/yqIJNm5r8+GE3Ku5x/s0Mh+BXpcTr3aPO2Yd
P+B8rLZqxp9iNuzQeYHSbu2k5a96zCzB1fWNHKlXKh1PClzj8GtqgT6OOlOIUaM+
qKcdS3XguptCGRELR7w5JFsWuZWqEwUXHSF4Cce6rjTTZxyJvswzj7mNiAn5n+cE
E0ZxWn8PAoJwIge2mtfsJXXpvHOjyS0XFHGybDYRrYPmnzbN3jas6ZceU1iQI4CJ
hL+3p9m+tJZgo30IgadUXF7VPqVeDNFR2A2ZsDoguWffprLN1hI2ysgxMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVftxDqazz4tAWB891sdnl2/uKnMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaVx9yEu
e5yOafomEu7Mxk2HXvgVxfH3Srz8DVVfkjNv1C6tAj+IKWdo3h7x9qZhbO+3Iz0O
OP/yZTpnt2TeNoMys99xbPOoOZROnUw5tdNTblTjjaA0G787KS0gymRU0JXl6EYj
I2IdQ8d8+AYLCBnZXZaDvQzUL8Tk9ew8FzHcVJiB2CU0zz3P5I/nNegGBuu1B0sB
r6P4h2SAWLhqmQvGssGfxLw63fedqaUTsQRRb7UktQMqauZgP3lw3PsxJGxXqAge
bTa+wYXWjCx4Ha7VMxOzPd0m0rVzAtAUv9JeT3AKs6czeRt+tTDX2ogpLAf2JTM0
c6g2rBAXshhoPg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:08 2026 by rpki-client