Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: hIm8s4lZ2ahJ5C0X7EzKuFtaEZfQBk94N+6uSvKKXfU=
Subject key identifier: AC:AE:7E:37:21:73:38:AF:D3:09:9E:45:E4:A1:00:0F:CC:D8:C1:1D
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019D992B6C335DD6F554B06C991BEA844CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1875
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: 9pC-ibevAKS-26VHnfb369UjvOo.roa (hash: 4g/AIjuZ+wenceNroAaqj5Lh9HfADzpHeXflVuUhXzA=)
2: cTlliJQGudEc-EL6iDNgBU6q-DI.roa (hash: fFq0wxKYSeUMmP8/3JXlsdr3hGg6WxNOxEODFwgQ024=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: xxxaRhB3lFKci/sxhuuzJiACbmW84/VXFc2ciX19c3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6c:33:5d:d6:f5:54:b0:6c:99:1b:ea:84:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=acae7e37217338afd3099e45e4a1000fccd8c11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:f9:1c:f2:c3:7b:57:91:5b:14:32:fb:fe:
a8:71:dd:e1:61:2c:8d:ce:ce:c5:6e:27:56:16:c9:
47:a6:42:88:e8:81:bb:8e:52:36:48:39:c4:ce:e3:
04:a6:82:59:64:87:d4:96:c4:eb:96:b0:d8:79:23:
6d:90:f2:c6:fd:f4:1a:29:97:ec:23:20:45:63:19:
c6:b7:e5:f0:30:7a:ed:b5:1c:84:0d:3a:48:ce:13:
0c:c3:11:cc:10:7a:ec:56:32:95:bd:64:d6:9c:68:
41:7a:20:80:26:44:b4:7a:bd:78:44:38:d8:93:f3:
e4:eb:af:f6:43:12:4c:ca:c9:5d:42:07:f8:e0:af:
74:11:89:ab:a1:7d:f6:bf:cf:01:ec:41:09:1f:df:
43:c3:f8:99:c4:c9:47:20:68:f6:09:30:f4:54:ad:
23:36:67:fb:ab:2d:b9:96:9b:6d:7d:e2:a9:e9:f1:
06:4d:c8:47:02:3b:ab:cb:64:1c:3a:26:d6:88:e1:
bc:f4:3d:f3:3b:a3:10:8d:0d:c6:b9:e2:1d:ba:08:
a9:60:f0:87:f2:4e:95:5a:b4:25:a8:1c:9e:3d:43:
6e:61:43:ed:8b:83:0e:f6:0f:10:19:4e:94:26:ad:
eb:d9:d2:cb:54:be:0b:3e:0d:cf:7e:a6:51:76:13:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:7E:37:21:73:38:AF:D3:09:9E:45:E4:A1:00:0F:CC:D8:C1:1D
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:35:51:29:ae:61:61:5c:65:7d:77:e1:17:ca:05:76:79:40:
c3:44:3b:41:f1:67:c4:c9:14:d5:fb:02:e3:1a:34:8d:b6:c4:
c9:11:2d:e9:e5:f9:08:21:40:e9:f7:f0:87:a4:9d:fe:b7:8f:
72:ed:55:e8:bf:8b:24:77:bd:6b:7a:9a:3e:9b:bf:69:67:4e:
2d:de:ed:70:89:fa:48:00:ec:a9:91:00:6b:79:4f:ae:4e:b6:
f0:06:ae:40:76:a3:bf:68:00:d2:f2:ff:d8:f7:c5:4e:4a:09:
4e:78:0c:8f:e5:01:db:09:7d:bf:96:bd:3b:32:d7:b0:9b:19:
54:0b:75:4e:35:3e:7c:4a:35:02:1a:82:c0:cf:bd:00:c3:45:
65:3b:d7:c6:3c:fd:17:89:eb:ce:21:da:85:82:01:6d:6d:9e:
90:d0:62:f3:8c:f3:90:9c:49:6b:3f:c8:11:77:3a:80:95:6f:
52:fd:c0:3f:59:6a:47:f0:2f:0e:8c:08:67:ea:31:f2:61:89:
48:54:5a:fa:98:c0:73:8c:23:a6:ad:67:ce:1c:e8:38:b3:f9:
3a:4e:d4:36:0e:3b:be:c4:af:09:ff:7e:88:15:e9:8c:c1:2d:
6e:b2:f2:72:43:9b:36:1a:36:21:8a:dd:ec:66:ab:34:ca:16:
bd:ff:0f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK2wzXdb1VLBsmRvqhEytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYwNDE3MDIwMDUyWhcNMjYwNDE4MDIwMDUyWjAzMTEwLwYDVQQD
EyhhY2FlN2UzNzIxNzMzOGFmZDMwOTllNDVlNGExMDAwZmNjZDhjMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLb5HPLDe1eRWxQy+/6ocd3hYSyN
zs7FbidWFslHpkKI6IG7jlI2SDnEzuMEpoJZZIfUlsTrlrDYeSNtkPLG/fQaKZfs
IyBFYxnGt+XwMHrttRyEDTpIzhMMwxHMEHrsVjKVvWTWnGhBeiCAJkS0er14RDjY
k/Pk66/2QxJMysldQgf44K90EYmroX32v88B7EEJH99Dw/iZxMlHIGj2CTD0VK0j
Nmf7qy25lpttfeKp6fEGTchHAjury2QcOibWiOG89D3zO6MQjQ3GueIdugipYPCH
8k6VWrQlqByePUNuYUPti4MO9g8QGU6UJq3r2dLLVL4LPg3PfqZRdhOmCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyufjchcziv0wmeReShAA/M2MEdMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTVRKa5h
YVxlfXfhF8oFdnlAw0Q7QfFnxMkU1fsC4xo0jbbEyREt6eX5CCFA6ffwh6Sd/reP
cu1V6L+LJHe9a3qaPpu/aWdOLd7tcIn6SADsqZEAa3lPrk628AauQHajv2gA0vL/
2PfFTkoJTngMj+UB2wl9v5a9OzLXsJsZVAt1TjU+fEo1AhqCwM+9AMNFZTvXxjz9
F4nrziHahYIBbW2ekNBi84zzkJxJaz/IEXc6gJVvUv3AP1lqR/AvDowIZ+ox8mGJ
SFRa+pjAc4wjpq1nzhzoOLP5Ok7UNg47vsSvCf9+iBXpjMEtbrLyckObNho2IYrd
7GarNMoWvf8PNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:34 2026 by rpki-client