Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: 6jCjH2sdLqvbsEV6GtPLEYS5TOyuQsvGCWG3o8Qw3Mw=
Subject key identifier: C4:AC:31:4E:35:6F:F6:44:E6:3A:58:2B:3F:1C:8A:06:DF:79:41:B4
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019D992B040578DEDC6B2A265020DCFB892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 130A
Signing time: Fri 17 Apr 2026 02:00:26 +0000
Manifest this update: Fri 17 Apr 2026 02:00:26 +0000
Manifest next update: Sat 18 Apr 2026 02:00:26 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: r7Z9Hxj0YogHR5cy36NeU+CefRlgcV/BcQD6f3bHWSI=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:04:05:78:de:dc:6b:2a:26:50:20:dc:fb:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Apr 17 02:00:26 2026 GMT
Not After : Apr 18 02:00:26 2026 GMT
Subject: CN=c4ac314e356ff644e63a582b3f1c8a06df7941b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:b8:1c:4c:39:74:75:ef:14:01:fe:ce:ad:
77:6d:62:e5:1a:79:46:11:9a:70:bc:c5:ca:8a:e5:
58:5b:12:9b:74:fe:51:f3:c2:71:9d:be:02:cd:9b:
30:3a:47:6e:91:f9:95:cc:48:6d:74:fd:f9:cd:ba:
4d:1a:b9:c3:85:83:05:f5:87:f3:e4:39:e7:23:8e:
d2:7d:1c:f9:f1:60:0e:19:3c:99:af:19:90:4e:57:
00:9d:1a:15:91:1e:19:4b:27:8d:52:03:7b:13:15:
b0:d2:04:c9:53:07:e8:00:4d:3d:06:92:f6:58:d0:
26:18:d1:14:0a:50:ee:39:15:da:20:e3:a0:16:dc:
54:43:75:14:74:64:5b:56:a8:64:80:3d:f6:02:a0:
0b:a2:53:a7:4e:99:b7:7c:60:bf:39:c1:6a:bb:7b:
65:9c:45:d6:3b:f2:4c:1d:07:71:ee:d0:39:33:1b:
34:33:28:f8:9e:02:13:83:35:81:1e:98:ee:74:74:
75:95:58:c9:a4:2a:c9:3d:7b:cc:bd:03:30:02:93:
97:6c:04:bd:ab:06:fb:46:66:68:d3:11:79:5b:b5:
04:54:10:b8:88:42:69:9a:dd:9c:d6:bb:ce:46:d1:
5b:ca:9f:44:99:e0:c9:22:88:b7:82:7a:19:6f:68:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AC:31:4E:35:6F:F6:44:E6:3A:58:2B:3F:1C:8A:06:DF:79:41:B4
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:48:9f:ad:33:24:89:39:e1:ac:d1:d6:d0:91:13:6c:7e:
c6:38:93:9a:dc:bd:e2:17:38:98:3f:79:ac:59:0b:40:19:84:
2d:5a:78:9e:fe:9e:3c:9a:6c:77:15:e9:41:5a:e7:4f:8e:ca:
9e:09:3b:56:0c:64:b5:fa:15:9a:67:aa:89:49:7e:94:8b:d6:
52:56:41:33:08:19:63:90:1f:35:7b:f4:86:58:6c:ef:4d:ef:
8f:6e:ae:2d:fe:da:72:98:a8:5c:8b:c6:2d:6a:d8:95:57:33:
3a:5e:f6:78:07:05:40:16:8d:e6:ab:f4:86:c9:b1:f2:85:e6:
5a:ff:58:bd:c0:64:62:7e:b4:e9:7c:84:85:5a:9d:ad:97:45:
d8:e9:2a:f2:35:37:c6:57:1f:e6:95:32:32:32:95:ab:df:b0:
1b:93:13:63:a3:a5:dd:9d:6b:e8:e5:83:0b:2d:c7:2e:ef:8e:
e4:3d:fa:a4:7e:8a:7d:6c:1d:b7:e1:5d:d8:1b:27:0b:be:85:
33:f8:68:d3:9c:35:e5:65:28:12:66:f7:85:a0:13:c1:f2:69:
18:13:c6:09:cf:1a:0e:fa:d1:d7:5d:a7:86:9c:ea:eb:35:20:
2d:38:1e:92:94:11:c5:5e:20:0d:f2:f5:81:7e:37:05:f5:f8:
58:4b:e8:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKwQFeN7cayomUCDc+4ksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYwNDE3MDIwMDI2WhcNMjYwNDE4MDIwMDI2WjAzMTEwLwYDVQQD
EyhjNGFjMzE0ZTM1NmZmNjQ0ZTYzYTU4MmIzZjFjOGEwNmRmNzk0MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDW4HEw5dHXvFAH+zq13bWLlGnlG
EZpwvMXKiuVYWxKbdP5R88Jxnb4CzZswOkdukfmVzEhtdP35zbpNGrnDhYMF9Yfz
5DnnI47SfRz58WAOGTyZrxmQTlcAnRoVkR4ZSyeNUgN7ExWw0gTJUwfoAE09BpL2
WNAmGNEUClDuORXaIOOgFtxUQ3UUdGRbVqhkgD32AqALolOnTpm3fGC/OcFqu3tl
nEXWO/JMHQdx7tA5Mxs0Myj4ngITgzWBHpjudHR1lVjJpCrJPXvMvQMwApOXbAS9
qwb7RmZo0xF5W7UEVBC4iEJpmt2c1rvORtFbyp9EmeDJIoi3gnoZb2hUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSsMU41b/ZE5jpYKz8cigbfeUG0MB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINtIn60z
JIk54azR1tCRE2x+xjiTmty94hc4mD95rFkLQBmELVp4nv6ePJpsdxXpQVrnT47K
ngk7VgxktfoVmmeqiUl+lIvWUlZBMwgZY5AfNXv0hlhs703vj26uLf7acpioXIvG
LWrYlVczOl72eAcFQBaN5qv0hsmx8oXmWv9YvcBkYn606XyEhVqdrZdF2Okq8jU3
xlcf5pUyMjKVq9+wG5MTY6Ol3Z1r6OWDCy3HLu+O5D36pH6KfWwdt+Fd2BsnC76F
M/ho05w15WUoEmb3haATwfJpGBPGCc8aDvrR112nhpzq6zUgLTgekpQRxV4gDfL1
gX43BfX4WEvoOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:51 2026 by rpki-client