
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: DeQ1RxZ1suKACufpOZ+2JQ9+1jS2ItUgsr8F8iYiSC0=
Subject key identifier: DE:8A:56:5A:CF:79:26:C6:43:6F:B5:2D:D9:B5:52:1E:A3:35:17:24
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 019D9961EAF143003C5158114482DB9FCD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:24 +0000
Manifest this update: Fri 17 Apr 2026 03:00:24 +0000
Manifest next update: Sat 18 Apr 2026 03:00:24 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: mk9YFB74qtFP5IlgleTrXIv7b0jl7eV+wCwMEk1Ekbw=)
2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ea:f1:43:00:3c:51:58:11:44:82:db:9f:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Apr 17 03:00:24 2026 GMT
Not After : Apr 18 03:00:24 2026 GMT
Subject: CN=de8a565acf7926c6436fb52dd9b5521ea3351724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:80:5d:f4:6c:b7:7e:bf:91:32:5e:38:f0:
79:3c:b3:bf:9d:dc:f8:9d:2e:44:dc:89:4e:01:bd:
24:ef:c2:aa:69:7d:ad:ef:be:44:7c:25:e2:17:10:
6e:48:55:d2:1a:cf:9b:56:1d:97:cc:cc:46:df:ac:
25:e3:5a:cd:42:1e:56:f5:aa:af:1c:87:54:31:fb:
c8:ca:c6:7d:29:25:04:b8:99:fd:27:84:2f:f3:09:
46:eb:ae:0b:8d:67:89:23:7b:46:16:41:4c:b7:0e:
ad:a6:d4:9a:13:52:3e:8b:10:a0:26:98:f8:4b:0c:
77:f4:0f:50:ca:0e:81:4f:40:e5:22:09:15:f2:de:
3b:7c:a3:7c:9e:39:3c:f7:4d:c8:56:57:b1:8a:ed:
c4:be:a5:9b:d9:69:82:57:63:9d:f8:75:dd:82:ef:
b1:74:81:0c:c0:c2:c2:c9:af:99:12:01:a4:cc:85:
66:c8:2c:89:b0:3f:9e:dd:eb:13:bd:90:cc:f5:c9:
e1:f6:a9:84:04:75:b3:b9:72:12:3f:f9:6c:5d:be:
71:83:af:86:10:16:e1:61:29:a0:61:d4:64:88:aa:
7d:d3:9a:9b:dd:18:8e:b2:7a:3d:cb:7a:cc:8c:6f:
09:12:ff:07:fc:96:4b:b6:9c:ec:f7:3d:4d:12:57:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:56:5A:CF:79:26:C6:43:6F:B5:2D:D9:B5:52:1E:A3:35:17:24
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e9:7b:e6:49:1d:86:f2:54:7e:e6:f8:b8:f8:f7:15:1b:0d:
f3:f5:6d:95:16:83:db:f5:d5:19:0c:89:34:64:d3:f7:f3:1a:
97:34:65:b1:53:45:71:04:d4:c7:69:b9:00:81:23:93:a7:0a:
0f:00:9c:b3:99:29:dd:4d:7b:b4:a1:4f:6e:62:39:96:27:66:
6e:e4:83:12:0c:a4:54:8e:32:86:03:af:e9:ed:ef:91:bf:fd:
b0:c1:cd:2e:46:ac:71:9e:77:17:06:3d:05:a6:cf:60:f5:8a:
9c:71:7d:0a:8d:ed:3a:98:7b:28:71:a4:17:47:fd:14:95:5f:
10:ef:ca:1b:7e:1d:74:22:72:71:44:45:88:bc:9b:9e:dd:4a:
30:88:e4:a5:c8:fd:95:08:d9:40:db:8a:9f:78:35:c6:cf:ce:
1e:83:4a:bd:ee:29:03:c4:3f:a1:68:d7:cf:dc:18:eb:91:60:
a1:83:f9:b3:5c:f2:fa:54:a2:9a:25:20:e5:00:0e:1b:8e:8b:
8c:6b:61:0e:1b:ce:b7:4d:16:64:d4:77:a5:94:c6:67:00:14:
a7:f4:bf:74:e1:04:45:78:24:67:40:82:1c:d8:69:09:2c:43:
dd:5b:ae:b5:b2:d3:09:ce:dd:0b:8b:3e:d4:f4:e2:fb:aa:5f:
07:4b:9e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYerxQwA8UVgRRILbn80JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk
OTdjNTAwHhcNMjYwNDE3MDMwMDI0WhcNMjYwNDE4MDMwMDI0WjAzMTEwLwYDVQQD
EyhkZThhNTY1YWNmNzkyNmM2NDM2ZmI1MmRkOWI1NTIxZWEzMzUxNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpyAXfRst36/kTJeOPB5PLO/ndz4
nS5E3IlOAb0k78KqaX2t775EfCXiFxBuSFXSGs+bVh2XzMxG36wl41rNQh5W9aqv
HIdUMfvIysZ9KSUEuJn9J4Qv8wlG664LjWeJI3tGFkFMtw6tptSaE1I+ixCgJpj4
Swx39A9Qyg6BT0DlIgkV8t47fKN8njk8903IVlexiu3EvqWb2WmCV2Od+HXdgu+x
dIEMwMLCya+ZEgGkzIVmyCyJsD+e3esTvZDM9cnh9qmEBHWzuXISP/lsXb5xg6+G
EBbhYSmgYdRkiKp905qb3RiOsno9y3rMjG8JEv8H/JZLtpzs9z1NEle1JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6KVlrPeSbGQ2+1Ldm1Uh6jNRckMB8GA1UdIwQY
MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt
ZTI2ZTlmNTFkZGIyLzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy
LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOl75kkd
hvJUfub4uPj3FRsN8/VtlRaD2/XVGQyJNGTT9/MalzRlsVNFcQTUx2m5AIEjk6cK
DwCcs5kp3U17tKFPbmI5lidmbuSDEgykVI4yhgOv6e3vkb/9sMHNLkascZ53FwY9
BabPYPWKnHF9Co3tOph7KHGkF0f9FJVfEO/KG34ddCJycURFiLybnt1KMIjkpcj9
lQjZQNuKn3g1xs/OHoNKve4pA8Q/oWjXz9wY65FgoYP5s1zy+lSimiUg5QAOG46L
jGthDhvOt00WZNR3pZTGZwAUp/S/dOEERXgkZ0CCHNhpCSxD3VuutbLTCc7dC4s+
1PTi+6pfB0ueVg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:51 2026 by rpki-client