Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: WgD+e1zEUgKMCLW9NkiZHc3A8ru/Lz96QLRHFvfuafQ=
Subject key identifier: 9E:AA:5E:50:5A:E7:91:5C:CB:B3:56:F2:44:8D:00:B2:09:1D:41:6C
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019D9C9A861843B8967AFDEE58079FDEE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 12B5
Signing time: Fri 17 Apr 2026 18:01:05 +0000
Manifest this update: Fri 17 Apr 2026 18:01:05 +0000
Manifest next update: Sat 18 Apr 2026 18:01:05 +0000
Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: QMdSyFU46yjBsL2JneSIVapzBcQxko+yU73A2rkoseM=)
8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:86:18:43:b8:96:7a:fd:ee:58:07:9f:de:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Apr 17 18:01:05 2026 GMT
Not After : Apr 18 18:01:05 2026 GMT
Subject: CN=9eaa5e505ae7915ccbb356f2448d00b2091d416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:c5:6e:8c:dc:08:e4:f6:00:32:4e:e1:16:
97:a1:e4:ab:a8:a1:91:a5:99:bc:12:51:37:bc:93:
10:d3:e9:1d:8e:b5:08:42:0b:30:4f:30:4f:39:a8:
f1:28:76:d3:0c:1c:8b:2b:4a:6f:2e:34:c3:e7:9f:
da:dd:6d:c6:df:89:02:93:16:f6:f4:fc:e6:46:03:
4f:86:7a:48:a2:84:a1:60:20:c0:5e:a0:95:4a:72:
ca:93:6c:50:06:7d:48:e3:2b:48:12:15:17:28:af:
11:69:57:60:1e:01:fc:e9:85:3d:7e:a6:a4:52:af:
77:e5:6e:73:81:11:d7:0a:75:e7:ef:2d:dc:8b:a8:
50:5f:23:42:fa:7f:7f:aa:b4:d3:6f:95:f1:14:54:
ca:8b:be:8e:c2:ef:f5:b0:57:4c:c0:56:77:e3:25:
38:a8:c9:9e:6e:b5:66:cd:6e:82:8a:c5:56:d2:76:
c0:46:88:36:8f:5a:d3:a2:44:e3:72:fb:99:96:ad:
a4:99:f7:0f:7a:78:ba:eb:7c:b6:6f:07:47:86:bf:
70:16:a2:31:84:94:d5:3d:1b:17:d8:9e:33:44:9b:
0e:7d:e4:a9:0d:3d:48:4c:5e:9c:33:68:42:2a:f5:
1f:27:f2:34:4b:21:e9:ef:4f:7d:52:7f:f4:bf:9b:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AA:5E:50:5A:E7:91:5C:CB:B3:56:F2:44:8D:00:B2:09:1D:41:6C
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:b5:25:5a:d2:4f:b9:03:e5:5d:2d:17:50:6e:9e:c3:a8:
da:7e:08:6f:a1:e1:76:0e:ec:3e:8b:94:91:a6:77:1e:98:bc:
02:7d:17:f6:22:88:12:24:9a:7b:02:41:75:e3:7c:64:74:d4:
1b:d5:4a:9e:0e:cd:84:05:29:f0:00:be:3f:81:14:15:2a:c2:
3c:26:28:57:7e:d5:02:8a:14:eb:31:70:9b:21:91:6f:7c:0e:
7a:fd:6c:c0:05:a5:eb:3f:0e:ed:7e:a9:26:f9:e2:28:36:22:
14:23:0a:cc:b5:6d:18:4c:bb:99:af:e8:1b:5f:ab:2b:33:90:
4d:a2:58:18:69:dc:c5:6a:f9:54:8e:a6:81:68:11:c5:b9:d9:
a2:fa:8a:f8:97:47:72:23:cd:8b:e6:9e:91:b1:cf:f2:0c:c9:
d0:7d:81:41:7e:a3:89:5a:a2:54:28:89:09:5f:f6:76:9e:e9:
fb:12:75:c2:6e:29:76:47:59:3b:29:95:0e:86:18:a2:a4:39:
c7:de:04:4e:90:5e:a5:47:79:4c:78:78:c8:ca:7c:44:72:ad:
04:c6:41:8d:78:8e:f2:c0:7e:9a:22:dc:e2:9b:ce:49:ad:a8:
73:7e:8f:b6:8a:d6:8b:42:75:ca:53:42:29:22:ac:ef:a1:34:
cd:6f:d0:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmoYYQ7iWev3uWAef3uisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4
MWQyMDQwHhcNMjYwNDE3MTgwMTA1WhcNMjYwNDE4MTgwMTA1WjAzMTEwLwYDVQQD
Eyg5ZWFhNWU1MDVhZTc5MTVjY2JiMzU2ZjI0NDhkMDBiMjA5MWQ0MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+bFbozcCOT2ADJO4RaXoeSrqKGR
pZm8ElE3vJMQ0+kdjrUIQgswTzBPOajxKHbTDByLK0pvLjTD55/a3W3G34kCkxb2
9PzmRgNPhnpIooShYCDAXqCVSnLKk2xQBn1I4ytIEhUXKK8RaVdgHgH86YU9fqak
Uq935W5zgRHXCnXn7y3ci6hQXyNC+n9/qrTTb5XxFFTKi76Owu/1sFdMwFZ34yU4
qMmebrVmzW6CisVW0nbARog2j1rTokTjcvuZlq2kmfcPeni663y2bwdHhr9wFqIx
hJTVPRsX2J4zRJsOfeSpDT1ITF6cM2hCKvUfJ/I0SyHp7099Un/0v5s0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6qXlBa55Fcy7NW8kSNALIJHUFsMB8GA1UdIwQY
MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct
MWMyMmVmZjcyODE4LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4
LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8m1JVrS
T7kD5V0tF1BunsOo2n4Ib6Hhdg7sPouUkaZ3Hpi8An0X9iKIEiSaewJBdeN8ZHTU
G9VKng7NhAUp8AC+P4EUFSrCPCYoV37VAooU6zFwmyGRb3wOev1swAWl6z8O7X6p
JvniKDYiFCMKzLVtGEy7ma/oG1+rKzOQTaJYGGncxWr5VI6mgWgRxbnZovqK+JdH
ciPNi+aekbHP8gzJ0H2BQX6jiVqiVCiJCV/2dp7p+xJ1wm4pdkdZOymVDoYYoqQ5
x94ETpBepUd5THh4yMp8RHKtBMZBjXiO8sB+miLc4pvOSa2oc36PtorWi0J1ylNC
KSKs76E0zW/Qtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:27 2026 by rpki-client