Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: 73944rldoCoB8Lp+v0YB1FVDIKx3g0CQYKejelMM99E=
Subject key identifier: 53:17:88:2C:CB:56:BD:3A:88:EE:A8:68:AF:4F:A4:7A:9F:55:C3:54
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 019D99992A767356517166266D8E4753FECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: j5iTBfQexadasqTPZf3BdqF-LoM.roa (hash: cKixD027h0pGrgVj07zhaZHgaHhvJuIsf5swfvNOu00=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: YgHmcfIx3yZEkoqnVgUssjqmz0IEFVfxQVbrsVc+rCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2a:76:73:56:51:71:66:26:6d:8e:47:53:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=5317882ccb56bd3a88eea868af4fa47a9f55c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:5f:c8:d6:44:41:59:46:6a:22:be:33:6e:
2e:98:0a:76:bc:97:6b:ca:8b:58:02:7d:17:59:5e:
41:56:f9:9a:9d:40:66:3d:32:e1:25:b9:ba:6d:69:
44:e8:1c:61:1f:07:6f:42:34:38:d0:1e:f2:7d:ce:
aa:a2:46:38:3c:fb:f5:62:c4:d2:c2:af:d7:6f:0a:
7b:e2:71:09:e3:5c:91:15:70:3b:68:10:60:2b:07:
1b:ea:a2:a0:5e:19:f2:5c:fe:9e:fc:d2:c4:e7:b7:
4f:b6:2f:81:94:f0:f3:ac:41:2e:62:35:45:34:85:
57:56:31:07:55:f0:19:26:c2:d3:1c:6f:af:92:ae:
3b:f5:d9:80:fb:07:55:92:9e:2b:bf:ae:df:87:c0:
ff:18:6d:eb:81:e5:94:34:9c:16:ef:58:6b:8b:39:
29:30:b3:95:97:8e:df:04:81:c4:ef:a2:09:dd:c5:
53:40:43:6a:1d:24:84:81:da:48:2b:0e:35:c0:09:
9e:98:fe:27:79:e9:cd:e0:7b:f3:ac:b4:0f:da:d6:
42:e8:2a:a4:ac:2f:ce:7c:9f:0a:0e:70:ef:17:20:
1f:f4:01:30:c1:01:b6:40:1c:3b:f6:ca:8a:24:cd:
1a:05:6a:f2:93:e7:e2:b7:e1:4d:3f:b9:e6:d9:5d:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:88:2C:CB:56:BD:3A:88:EE:A8:68:AF:4F:A4:7A:9F:55:C3:54
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e7:18:32:ae:88:d8:1c:fc:35:c9:2a:da:4c:bf:4a:ff:44:
16:d1:90:2c:58:d4:c5:35:0e:1a:17:2a:02:df:af:fd:04:4d:
49:b0:3b:bb:29:f7:80:2a:5d:dc:d0:3c:26:39:b8:9d:90:99:
a2:47:f6:98:db:54:86:c1:4a:54:9e:a9:1a:72:1f:72:6e:e7:
62:d0:32:19:6c:76:02:dd:55:7b:bd:1b:0d:8e:35:86:c0:31:
fd:24:71:86:cf:e6:d6:13:fe:be:51:6d:48:62:0c:0d:c1:2b:
0b:cb:b5:72:5a:7f:72:e1:e1:99:8d:c8:2d:3d:c5:40:8d:15:
0f:21:81:75:e9:79:73:75:3b:5a:18:41:77:7b:0e:d3:24:1f:
4b:26:19:29:fa:78:78:83:e4:3f:26:d5:b2:c7:28:f1:03:14:
36:0f:2d:4d:c6:6d:bf:6a:72:1a:b0:3f:cf:c8:ef:f3:1f:12:
e7:e4:ca:0a:df:69:61:ae:e6:7f:96:22:c2:33:71:bd:2d:0c:
f5:87:72:92:7c:0b:29:98:c3:11:75:2e:b9:2e:ef:43:ae:67:
5f:7f:0d:ad:27:04:8c:96:b6:36:28:a0:e6:df:76:85:3e:7e:
6f:b6:bf:16:f9:5d:2d:da:f7:67:c7:53:14:9a:4d:2b:06:76:
6d:83:30:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSp2c1ZRcWYmbY5HU/7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGViMmUxZjg1YTE3ZGEyNDBjZmM4MTZkOTcyYzg1ZTQx
MWU2MjQwHhcNMjYwNDE3MDQwMDQ0WhcNMjYwNDE4MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg1MzE3ODgyY2NiNTZiZDNhODhlZWE4NjhhZjRmYTQ3YTlmNTVjMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkktfyNZEQVlGaiK+M24umAp2vJdr
yotYAn0XWV5BVvmanUBmPTLhJbm6bWlE6BxhHwdvQjQ40B7yfc6qokY4PPv1YsTS
wq/Xbwp74nEJ41yRFXA7aBBgKwcb6qKgXhnyXP6e/NLE57dPti+BlPDzrEEuYjVF
NIVXVjEHVfAZJsLTHG+vkq479dmA+wdVkp4rv67fh8D/GG3rgeWUNJwW71hrizkp
MLOVl47fBIHE76IJ3cVTQENqHSSEgdpIKw41wAmemP4neenN4HvzrLQP2tZC6Cqk
rC/OfJ8KDnDvFyAf9AEwwQG2QBw79sqKJM0aBWryk+fit+FNP7nm2V2snwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMXiCzLVr06iO6oaK9PpHqfVcNUMB8GA1UdIwQY
MBaAFJnesuH4WhfaJAz8gW2XLIXkEeYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAt
OGRjOTRlODliZjAzLzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAtOGRjOTRlODliZjAz
LzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcucYMq6I
2Bz8Nckq2ky/Sv9EFtGQLFjUxTUOGhcqAt+v/QRNSbA7uyn3gCpd3NA8Jjm4nZCZ
okf2mNtUhsFKVJ6pGnIfcm7nYtAyGWx2At1Ve70bDY41hsAx/SRxhs/m1hP+vlFt
SGIMDcErC8u1clp/cuHhmY3ILT3FQI0VDyGBdel5c3U7WhhBd3sO0yQfSyYZKfp4
eIPkPybVssco8QMUNg8tTcZtv2pyGrA/z8jv8x8S5+TKCt9pYa7mf5YiwjNxvS0M
9YdyknwLKZjDEXUuuS7vQ65nX38NrScEjJa2Niig5t92hT5+b7a/FvldLdr3Z8dT
FJpNKwZ2bYMwVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:30 2026 by rpki-client