Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: d1HI3rJYy8D2p/vcNyehXGJ0uagbShAg1ElltC/ee2Q=
Subject key identifier: A1:EB:22:16:3F:96:72:1A:55:BE:CA:A1:AE:3B:97:72:3B:36:A7:67
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 019D9BBEFBE5369FEBB20FD8BB02AA435585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0D7E
Signing time: Fri 17 Apr 2026 14:01:17 +0000
Manifest this update: Fri 17 Apr 2026 14:01:17 +0000
Manifest next update: Sat 18 Apr 2026 14:01:17 +0000
Files and hashes: 1: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (hash: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw=)
2: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: oVyj/Lv84x43mRem2pb2jQdqz3NmxsmffmzVug4Zxx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:fb:e5:36:9f:eb:b2:0f:d8:bb:02:aa:43:55:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Apr 17 14:01:17 2026 GMT
Not After : Apr 18 14:01:17 2026 GMT
Subject: CN=a1eb22163f96721a55becaa1ae3b97723b36a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:c5:15:5d:db:d7:66:ab:89:2f:09:4c:34:
34:cc:b5:9f:bc:20:fe:b5:99:8b:22:7f:09:11:52:
9e:f1:a6:b1:8a:d3:c1:6d:13:27:78:80:c9:cc:00:
09:8e:1a:b0:5f:cb:15:76:dc:9e:b5:27:c7:8d:eb:
6d:65:90:58:24:78:6b:28:e0:b3:50:7c:84:1e:06:
3d:08:66:e5:fe:32:ee:22:16:39:00:99:97:d0:77:
cb:d2:34:80:3d:bd:2a:41:55:1f:9b:00:d1:a2:68:
8d:cf:0b:b6:58:f0:9c:51:08:41:f7:0a:18:16:ed:
30:5d:d5:cb:49:ca:b4:24:f2:ad:0e:21:1c:d7:00:
d0:fb:e3:87:26:31:6a:ad:01:ab:0d:72:2d:83:74:
6d:3e:42:e7:fc:2d:01:3f:a7:08:d6:3f:e9:fe:3d:
6d:5d:7c:23:d1:c5:3f:84:0d:67:91:e2:76:2c:86:
af:42:df:21:2f:ce:30:78:6b:ad:b8:4c:99:75:a4:
1b:e9:44:b8:52:ca:f1:7d:d5:c8:54:b5:b1:f4:ba:
c9:32:76:9a:ff:74:1c:e0:47:1d:18:05:31:09:50:
31:74:b7:1f:d7:74:80:88:16:38:fd:91:0b:b1:be:
a3:a3:81:8b:65:45:8e:77:a7:9a:5b:47:ee:22:79:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:22:16:3F:96:72:1A:55:BE:CA:A1:AE:3B:97:72:3B:36:A7:67
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:21:9e:16:d3:59:32:ed:a8:9b:41:46:dc:f5:c3:ca:43:01:
ae:59:23:82:20:fb:54:85:62:af:f2:f0:c9:7e:87:8e:20:23:
1e:5e:fb:e0:6c:26:13:4c:25:ff:9a:70:20:39:06:6e:d0:d5:
01:85:1a:8c:11:5c:47:35:8a:90:1e:54:d0:18:52:af:6f:8f:
12:8c:37:16:d7:90:42:43:c4:ea:4b:05:ec:03:0d:fa:84:b2:
56:4f:11:ee:a0:ea:6a:79:f2:c8:3e:40:80:2f:91:71:99:68:
c4:7e:25:c0:ec:5b:a6:fc:14:54:88:86:5a:ff:10:6f:2e:4c:
48:57:f8:be:25:b2:47:8f:ab:37:4b:85:6a:d2:e3:4e:e0:6e:
80:e5:c9:89:1b:4b:31:42:a3:6d:44:61:4c:43:25:18:8b:36:
c0:e0:a9:36:34:5b:f7:72:49:23:81:a5:e6:aa:dc:cd:c7:ea:
8a:2c:d8:69:2c:cb:6d:8f:d6:43:af:49:bc:43:f0:a1:70:7e:
99:ad:7c:58:c0:7d:06:87:67:d9:88:f1:3b:91:07:35:13:46:
6f:87:bd:ab:b2:f1:c9:00:d9:40:0f:84:b8:be:39:04:6b:ab:
b5:5a:0b:19:5a:29:78:f6:0d:1d:0e:29:20:31:94:31:73:24:
ae:76:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:03 2026 by rpki-client