Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: 4CGlgcZRl8+2/ule+nJn8rz58NuCRAuFgD8/Lgan5JE=
Subject key identifier: 77:C7:43:50:8F:D5:69:F3:60:4A:83:AD:A9:13:FD:A7:17:F0:6C:22
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019DA30A00804B6C29EE0E85B10245E7D02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 1101
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: W2R_v-2PPRrVboMkPWH3Dj3JLrg.roa (hash: rkDwJt2K+Km3nsqaf+K/HYTojuHm7A1VkU7dA/qfqmQ=)
2: WgVuaq8pi4PEvuwDOmYyXIWprRU.roa (hash: oOdve/P3iAIAYO1Vt2jG8C9dlYkYXKP6wSYOHPb5U5c=)
3: l3ZvOxpIrbUcB01N9M89_gpX50g.roa (hash: waibiTCkXa3tlVwbpLhiCRrC9KIAbQGlow3ILlHZv2k=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: oIFWKioM0AjEk7cLRde0HQetFHJe03Davr1yI+u1fHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:00:80:4b:6c:29:ee:0e:85:b1:02:45:e7:d0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=77c743508fd569f3604a83ada913fda717f06c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:47:b9:6a:fc:a5:fc:92:0b:d7:b2:5c:6c:
95:9e:2f:6c:bc:94:bf:6c:71:90:11:19:97:08:e0:
29:35:98:bb:0b:4c:b5:f6:b6:14:3d:fc:9b:95:44:
ae:cc:b5:f9:4e:dc:03:32:a3:b1:37:65:0f:ce:a5:
5d:5d:85:b2:be:04:3a:64:fa:95:a1:43:51:23:af:
19:20:55:29:f6:5a:77:76:41:ee:79:93:ec:78:e2:
3a:9d:a1:e3:fc:30:c9:da:cc:b7:77:bd:75:ad:79:
ef:56:54:62:06:ba:e7:82:40:d2:c9:5f:97:43:5c:
5f:9c:c4:ea:0d:9a:1a:14:9e:3b:ce:ce:9c:c4:a4:
ad:19:91:19:5c:33:34:8b:e5:63:89:86:5f:1a:d0:
22:04:d6:28:f2:60:7d:9c:ad:e4:37:c0:ab:45:f7:
a1:a3:75:ad:e5:1a:16:f8:8e:a1:15:32:6d:ba:04:
36:60:a7:8a:d3:30:32:ab:4e:76:39:91:53:29:93:
0c:ea:59:dd:d0:05:f6:b2:48:cd:e6:99:f2:b3:79:
e7:bf:0b:bd:fd:60:b7:af:36:3d:12:fa:a9:74:84:
fd:07:32:21:f9:18:7b:64:48:56:df:d7:f5:8c:4e:
db:63:0e:c0:8b:62:d7:ea:0a:4d:da:cd:50:f0:06:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:43:50:8F:D5:69:F3:60:4A:83:AD:A9:13:FD:A7:17:F0:6C:22
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:eb:28:f7:f3:fb:45:27:b9:1b:2d:b0:e2:a0:da:b4:e9:
04:ff:46:f0:23:ad:8b:e6:d1:2d:72:12:d1:a7:10:ea:77:50:
3a:f6:d1:ff:8e:9c:44:28:5e:01:22:43:ac:87:25:07:00:9b:
ab:30:55:18:85:41:a4:5a:b9:09:af:e0:d4:d8:ed:4b:29:79:
4f:fa:e8:53:f8:c3:c4:c9:c7:10:ac:22:ba:2a:51:fe:fe:fc:
71:09:64:cb:d1:13:00:16:b5:e4:7f:80:ef:07:16:a2:c1:63:
b3:55:ee:2e:b7:86:98:8c:d7:e2:58:f1:cb:b3:2d:0d:09:a3:
35:e3:59:c7:ae:c2:b5:52:e4:61:df:b8:22:1a:40:77:dc:b0:
9f:08:58:54:c2:9d:80:3c:00:84:f0:43:25:7e:3f:e8:77:53:
0a:e0:53:24:b7:de:36:04:d4:c6:c8:37:4a:9e:f4:f5:af:36:
63:e4:0b:e0:c9:4c:53:eb:ad:17:15:3d:3b:d4:e3:d8:e5:cb:
df:48:24:86:08:64:db:18:fb:fa:aa:8b:5e:68:98:23:93:98:
c5:00:c2:de:e0:82:34:5b:45:ff:1b:0b:42:a1:4a:0d:09:1a:
03:cb:64:6c:29:d4:25:fb:39:bd:6b:36:d2:b5:7f:4a:eb:51:
5f:58:02:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCgCAS2wp7g6FsQJF59AsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz
ODA0MDkwHhcNMjYwNDE5MDAwMDM0WhcNMjYwNDIwMDAwMDM0WjAzMTEwLwYDVQQD
Eyg3N2M3NDM1MDhmZDU2OWYzNjA0YTgzYWRhOTEzZmRhNzE3ZjA2YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+JHuWr8pfySC9eyXGyVni9svJS/
bHGQERmXCOApNZi7C0y19rYUPfyblUSuzLX5TtwDMqOxN2UPzqVdXYWyvgQ6ZPqV
oUNRI68ZIFUp9lp3dkHueZPseOI6naHj/DDJ2sy3d711rXnvVlRiBrrngkDSyV+X
Q1xfnMTqDZoaFJ47zs6cxKStGZEZXDM0i+VjiYZfGtAiBNYo8mB9nK3kN8CrRfeh
o3Wt5RoW+I6hFTJtugQ2YKeK0zAyq052OZFTKZMM6lnd0AX2skjN5pnys3nnvwu9
/WC3rzY9EvqpdIT9BzIh+Rh7ZEhW39f1jE7bYw7Ai2LX6gpN2s1Q8AZ7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfHQ1CP1WnzYEqDrakT/acX8GwiMB8GA1UdIwQY
MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt
NDhkNzM4YzU5NDdkLzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk
LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGbrKPfz
+0UnuRstsOKg2rTpBP9G8COti+bRLXIS0acQ6ndQOvbR/46cRCheASJDrIclBwCb
qzBVGIVBpFq5Ca/g1NjtSyl5T/roU/jDxMnHEKwiuipR/v78cQlky9ETABa15H+A
7wcWosFjs1XuLreGmIzX4ljxy7MtDQmjNeNZx67CtVLkYd+4IhpAd9ywnwhYVMKd
gDwAhPBDJX4/6HdTCuBTJLfeNgTUxsg3Sp709a82Y+QL4MlMU+utFxU9O9Tj2OXL
30gkhghk2xj7+qqLXmiYI5OYxQDC3uCCNFtF/xsLQqFKDQkaA8tkbCnUJfs5vWs2
0rV/SutRX1gCIA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:17 2026 by rpki-client