Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: Hm++rMeB6MDwWt2u26iu1DNv/aNv0EkcIYp2Fo9ESX4=
Subject key identifier: 4A:95:1B:1D:26:C2:74:F4:47:1E:1A:F7:FC:63:23:B1:09:6A:FA:3A
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 019D9BBF33893329BCCC1AC748474976B70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:01:32 +0000
Manifest this update: Fri 17 Apr 2026 14:01:32 +0000
Manifest next update: Sat 18 Apr 2026 14:01:32 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: 5sL23fKTkp7u7d/7tY67Ibx3Cfzz8OyVTQADoNYp7Ck=)
2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:33:89:33:29:bc:cc:1a:c7:48:47:49:76:b7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Apr 17 14:01:32 2026 GMT
Not After : Apr 18 14:01:32 2026 GMT
Subject: CN=4a951b1d26c274f4471e1af7fc6323b1096afa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:ba:60:08:60:27:66:c9:60:98:66:66:39:
12:87:57:0f:59:5d:d3:dc:05:f7:2d:80:20:f4:df:
82:ba:f1:b0:b3:a5:9b:aa:66:01:ba:20:6c:f5:4b:
3d:ef:66:fb:4b:58:63:6f:ee:6e:bf:5d:00:74:c9:
b8:de:c5:d8:83:7b:b9:78:2d:df:40:ef:e4:b7:b9:
a4:68:82:e7:b1:3c:cf:7c:3c:0f:3b:98:d4:33:20:
86:70:bb:51:52:c3:77:3b:17:9e:b0:a9:5b:52:3c:
3e:c2:a1:8b:74:6e:88:9e:db:2e:11:ac:7c:b1:9b:
be:06:aa:f4:fb:65:c9:a8:f3:b3:af:80:91:8b:c5:
2e:e3:a9:f5:41:d7:68:54:e1:63:fb:98:b2:f9:3a:
ab:95:48:e8:1b:c4:29:67:09:ec:08:64:16:24:a9:
1c:1c:23:a3:17:e4:09:f9:97:35:42:92:08:4b:a9:
40:46:58:d3:96:72:f3:26:84:c1:c0:3b:11:f7:30:
59:0e:9d:a7:95:d1:a5:2b:2c:48:9e:75:15:b6:8c:
af:f7:f0:e7:35:07:6a:29:3d:a4:b5:82:99:ea:ed:
98:bb:cf:ae:10:d5:03:93:b8:16:25:6a:52:02:88:
d2:10:ef:67:07:37:ee:18:97:29:c1:73:01:d8:1f:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:1B:1D:26:C2:74:F4:47:1E:1A:F7:FC:63:23:B1:09:6A:FA:3A
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a8:0f:f8:ef:11:bf:73:8e:ce:3b:59:04:d6:09:4d:64:47:
e1:1a:9e:a1:6b:9e:51:45:cd:f5:af:f6:dc:0f:c8:74:f4:87:
d0:24:68:c5:3b:12:c3:36:27:75:34:04:d5:5f:7c:dc:ca:18:
3d:03:d4:e3:b1:f4:a6:3c:30:50:1a:e6:37:ad:a7:50:02:dc:
9f:49:df:01:da:71:0e:ef:67:ac:6e:bb:05:2c:8f:8b:2e:44:
8c:e8:56:cd:2d:39:83:31:c8:85:1a:79:ff:7e:b5:da:45:31:
14:2a:e7:1b:d2:bb:ac:87:29:cb:9f:ac:7d:ad:72:67:4d:91:
46:7b:61:ac:7e:ef:60:04:06:84:ea:57:f8:c1:22:a0:a6:36:
16:41:23:ab:16:d6:e9:4f:5b:c5:7e:2c:c3:83:6d:20:88:ba:
2c:a1:cd:18:2e:ca:9e:db:86:9c:b0:8c:d1:ee:73:74:b5:7d:
8e:0d:a2:be:f4:3d:c5:63:c7:2e:c3:28:ac:ed:b0:e6:06:de:
86:e0:3e:81:57:87:06:c7:18:72:ac:75:f4:50:e3:86:d0:09:
9c:e7:11:f3:a6:00:9f:6c:de:1d:57:32:b5:ba:13:1d:4c:1b:
40:e8:51:a2:6f:cd:8b:e2:2e:ff:da:8e:37:72:56:8d:d2:96:
08:d2:fe:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvzOJMym8zBrHSEdJdrcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjYwNDE3MTQwMTMyWhcNMjYwNDE4MTQwMTMyWjAzMTEwLwYDVQQD
Eyg0YTk1MWIxZDI2YzI3NGY0NDcxZTFhZjdmYzYzMjNiMTA5NmFmYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8C6YAhgJ2bJYJhmZjkSh1cPWV3T
3AX3LYAg9N+CuvGws6WbqmYBuiBs9Us972b7S1hjb+5uv10AdMm43sXYg3u5eC3f
QO/kt7mkaILnsTzPfDwPO5jUMyCGcLtRUsN3OxeesKlbUjw+wqGLdG6IntsuEax8
sZu+Bqr0+2XJqPOzr4CRi8Uu46n1QddoVOFj+5iy+TqrlUjoG8QpZwnsCGQWJKkc
HCOjF+QJ+Zc1QpIIS6lARljTlnLzJoTBwDsR9zBZDp2nldGlKyxInnUVtoyv9/Dn
NQdqKT2ktYKZ6u2Yu8+uENUDk7gWJWpSAojSEO9nBzfuGJcpwXMB2B8Y4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqVGx0mwnT0Rx4a9/xjI7EJavo6MB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6gP+O8R
v3OOzjtZBNYJTWRH4RqeoWueUUXN9a/23A/IdPSH0CRoxTsSwzYndTQE1V983MoY
PQPU47H0pjwwUBrmN62nUALcn0nfAdpxDu9nrG67BSyPiy5EjOhWzS05gzHIhRp5
/3612kUxFCrnG9K7rIcpy5+sfa1yZ02RRnthrH7vYAQGhOpX+MEioKY2FkEjqxbW
6U9bxX4sw4NtIIi6LKHNGC7KntuGnLCM0e5zdLV9jg2ivvQ9xWPHLsMorO2w5gbe
huA+gVeHBscYcqx19FDjhtAJnOcR86YAn2zeHVcytboTHUwbQOhRom/Ni+Iu/9qO
N3JWjdKWCNL+Tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:00 2026 by rpki-client