Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
File: I--d4hUq7xsqYqMfsvNehZCzrYQ.mft (raw, json)
Hash identifier: 4gad1I1lrWJ2SIQ+KS0JFwu5Jnm4XRdEGJQYexUHDJ0=
Subject key identifier: 0E:5D:6A:1F:29:3D:CF:65:6A:48:8B:E9:88:9F:A8:F9:4B:E6:87:C1
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 019D9998E2B4AB78AC5210B8A1D9B56E76F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
Manifest number: 0912
Signing time: Fri 17 Apr 2026 04:00:26 +0000
Manifest this update: Fri 17 Apr 2026 04:00:26 +0000
Manifest next update: Sat 18 Apr 2026 04:00:26 +0000
Files and hashes: 1: I--d4hUq7xsqYqMfsvNehZCzrYQ.crl (hash: ZK6lWuZkiAGL0cRInpqi8q39E6ssp20FYrCBhHKuE44=)
2: c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa (hash: dkOdUS1B4RLrr1wGef0PpA8JuUzSKd3BvzN3ojn4kHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e2:b4:ab:78:ac:52:10:b8:a1:d9:b5:6e:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Apr 17 04:00:26 2026 GMT
Not After : Apr 18 04:00:26 2026 GMT
Subject: CN=0e5d6a1f293dcf656a488be9889fa8f94be687c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:09:98:71:2a:5c:a4:ec:c1:71:48:76:b6:
ff:c5:a5:52:23:77:d2:71:3f:94:d7:af:bc:27:37:
88:e2:a2:00:3c:86:fb:41:5e:8d:ef:50:a7:d8:ac:
3b:19:08:ff:75:6e:25:7a:38:8d:b0:85:73:c4:4b:
4d:b9:11:ab:13:8b:72:d4:af:b8:c1:4e:7c:be:d2:
91:15:0f:c1:d6:6e:89:3b:74:a4:a5:f6:0b:88:f2:
6f:ab:8b:a8:e6:23:01:ae:04:a9:b2:ec:76:9f:8f:
72:32:58:f4:63:1e:73:4a:92:f7:6b:8f:75:16:d6:
a2:03:8b:dc:ad:24:cc:90:e4:cc:4d:17:9c:2e:35:
71:da:93:3b:a1:74:c5:36:e4:01:ce:a4:4d:5f:34:
b3:9b:a7:0b:b8:c3:70:0f:9c:69:df:35:9c:c2:1b:
60:d3:2a:e1:56:1c:73:3b:a4:14:ca:ba:ff:ea:69:
00:68:df:13:b0:69:b4:a5:0f:cf:9e:47:a2:06:cf:
f5:1b:03:76:8d:09:69:4c:48:23:ba:73:15:b8:66:
99:93:d5:db:c9:f7:4f:f5:3b:f1:2c:17:69:3e:ec:
1d:fd:f3:9d:de:aa:fc:79:fd:9f:91:52:30:49:6e:
b5:4d:39:90:37:8a:c9:01:03:f8:a8:e1:93:ba:e9:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:6A:1F:29:3D:CF:65:6A:48:8B:E9:88:9F:A8:F9:4B:E6:87:C1
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:1f:08:36:c7:b4:90:1d:95:30:06:f0:57:5b:3a:b4:43:
a5:eb:0e:e7:ec:81:96:77:5e:59:54:ce:a9:d2:42:de:d9:a6:
69:99:f4:d8:60:45:1c:6c:70:8f:d6:5b:ed:b7:cf:61:3e:88:
61:80:76:5a:6d:e8:d6:a9:1b:bf:c1:4a:73:d4:c7:cf:2e:3c:
99:29:b4:10:9c:1a:ad:32:9a:8d:61:0d:fb:af:89:4a:75:f2:
7b:cd:6f:6f:78:62:d2:d6:e5:a4:67:41:4b:a2:30:fb:4d:92:
3d:53:53:e1:5a:8e:6e:36:f3:5f:25:85:d8:8a:4d:ed:27:0b:
4f:bf:c0:95:8a:d9:18:84:cc:96:f3:59:67:95:46:b0:a1:24:
24:e1:9c:64:f6:17:ea:08:f9:2f:b7:7e:0f:0a:96:32:58:4d:
b4:12:c9:25:7a:f2:0c:d7:b0:ef:a0:a2:44:af:d2:92:b7:39:
3f:ba:55:20:96:3a:49:74:09:58:93:25:f0:3d:c3:69:a1:09:
32:74:a7:df:13:fe:f9:a8:67:86:16:58:6a:05:0f:69:81:e3:
6b:a3:43:f1:49:3a:27:7b:f2:b1:1a:8e:dd:6c:d6:b0:8f:4f:
7a:39:d0:67:a9:e6:55:f8:d8:dd:ed:71:0a:b4:ff:a2:6f:d0:
ba:2f:00:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmOK0q3isUhC4odm1bnbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWY5ZGUyMTUyYWVmMWIyYTYyYTMxZmIyZjM1ZTg1OTBi
M2FkODQwHhcNMjYwNDE3MDQwMDI2WhcNMjYwNDE4MDQwMDI2WjAzMTEwLwYDVQQD
EygwZTVkNmExZjI5M2RjZjY1NmE0ODhiZTk4ODlmYThmOTRiZTY4N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RIJmHEqXKTswXFIdrb/xaVSI3fS
cT+U16+8JzeI4qIAPIb7QV6N71Cn2Kw7GQj/dW4lejiNsIVzxEtNuRGrE4ty1K+4
wU58vtKRFQ/B1m6JO3SkpfYLiPJvq4uo5iMBrgSpsux2n49yMlj0Yx5zSpL3a491
FtaiA4vcrSTMkOTMTRecLjVx2pM7oXTFNuQBzqRNXzSzm6cLuMNwD5xp3zWcwhtg
0yrhVhxzO6QUyrr/6mkAaN8TsGm0pQ/PnkeiBs/1GwN2jQlpTEgjunMVuGaZk9Xb
yfdP9TvxLBdpPuwd/fOd3qr8ef2fkVIwSW61TTmQN4rJAQP4qOGTuulVLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5dah8pPc9lakiL6YifqPlL5ofBMB8GA1UdIwQY
MBaAFCPvneIVKu8bKmKjH7LzXoWQs62EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS0tZDRoVXE3eHNxWXFNZnN2TmVoWkN6cllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jM2YzY2MtYzU2Yi00ZDM1LWI3N2Yt
M2JjNmViMGEzNDdmLzEvSS0tZDRoVXE3eHNxWXFNZnN2TmVoWkN6cllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jM2YzY2MtYzU2Yi00ZDM1LWI3N2YtM2JjNmViMGEzNDdm
LzEvSS0tZDRoVXE3eHNxWXFNZnN2TmVoWkN6cllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVgfCDbH
tJAdlTAG8FdbOrRDpesO5+yBlndeWVTOqdJC3tmmaZn02GBFHGxwj9Zb7bfPYT6I
YYB2Wm3o1qkbv8FKc9THzy48mSm0EJwarTKajWEN+6+JSnXye81vb3hi0tblpGdB
S6Iw+02SPVNT4VqObjbzXyWF2IpN7ScLT7/AlYrZGITMlvNZZ5VGsKEkJOGcZPYX
6gj5L7d+DwqWMlhNtBLJJXryDNew76CiRK/Skrc5P7pVIJY6SXQJWJMl8D3DaaEJ
MnSn3xP++ahnhhZYagUPaYHja6ND8Uk6J3vysRqO3WzWsI9PejnQZ6nmVfjY3e1x
CrT/om/Qui8ADg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:44 2026 by rpki-client