Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: OwVRVWxcsnenO5Uiu5Tg0nKKt0jbSPEStoWgFXRdvhw=
Subject key identifier: 11:37:A3:7E:BF:16:17:A0:31:3D:10:C2:EA:98:AB:F6:76:06:95:E6
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019D992B2ABD741628DBAF89BEC04F6D62A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 091A
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: VRxnUB2ZaptCTYHFRK0t4k9nnTBKhOJ08m+QNRu5mj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2a:bd:74:16:28:db:af:89:be:c0:4f:6d:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=1137a37ebf1617a0313d10c2ea98abf6760695e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:ee:45:8b:11:6d:31:79:b7:f3:f1:28:af:
b9:dc:18:9c:fd:30:8c:3c:ba:ea:7b:c7:9c:88:e3:
07:24:14:d9:21:af:e4:fd:86:55:8f:95:a5:d9:f2:
a2:dd:e1:a4:f6:49:b5:1d:33:20:71:25:a7:e6:24:
b0:5d:5f:28:8a:4b:a8:c2:91:67:2a:ee:8b:2c:c3:
c1:51:21:c9:f1:79:7e:a3:9b:b8:e7:92:ff:b8:de:
fd:81:82:48:6b:2a:49:70:bb:8f:ce:f6:8d:ea:4e:
22:0e:f5:61:5b:22:a8:25:c5:fd:7a:d4:6e:e5:fd:
08:42:e1:1b:1f:dc:03:4f:20:6e:6e:16:df:77:54:
30:a7:93:50:f7:f3:84:c1:1e:2e:cb:f8:3d:2e:79:
16:80:ef:89:da:ef:ac:55:98:18:09:e3:00:bc:cd:
8f:7c:a8:cd:2d:69:fa:bd:fb:ad:83:5f:2e:8d:3b:
29:b3:e3:6c:3e:03:c5:e5:46:a0:29:56:1f:3f:2f:
09:7d:c5:d9:b1:04:49:1a:56:b5:8b:a4:cc:82:f7:
24:1c:8a:fd:3d:1a:a8:5a:f2:a2:5b:5f:ff:55:6e:
10:d6:cf:44:de:30:68:d1:85:2f:cf:11:02:8d:1a:
45:f8:23:c0:1f:28:d7:ca:c2:c3:31:e0:59:64:af:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:A3:7E:BF:16:17:A0:31:3D:10:C2:EA:98:AB:F6:76:06:95:E6
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:71:fc:0c:75:a5:45:9a:ef:d9:27:90:1d:3f:82:8f:67:
29:b5:e0:a6:e7:7e:f6:5f:02:9f:67:77:55:c5:24:6d:23:2f:
b7:c8:c3:8c:c2:08:f6:a1:90:6c:ef:38:97:5b:7d:af:92:56:
e0:0a:b0:84:24:62:5b:e9:d0:c8:a5:ab:36:69:b3:3c:dd:56:
02:5c:78:28:42:4d:98:96:33:40:0d:a9:f3:90:44:db:e7:81:
2a:88:bf:a5:6b:04:c8:2e:5c:62:ec:5a:da:c8:37:c7:25:ed:
fd:4b:47:69:50:9f:0d:bc:52:bd:6c:3e:c5:3c:32:71:07:d8:
88:6f:02:6d:89:4d:ed:b2:70:fd:87:40:ab:b1:89:00:11:09:
be:0c:79:81:06:50:bb:9a:d1:04:9f:aa:55:7c:88:04:94:a0:
58:22:c7:75:6d:0e:30:5c:3e:3e:d9:f8:a9:7b:a1:7f:fa:67:
c6:c0:9e:a5:a2:7d:73:b5:44:45:c7:98:7a:59:6d:d3:d0:22:
d4:3e:f5:d6:cb:77:4e:3d:57:88:9d:03:29:f4:aa:74:79:b2:
c3:ff:d2:90:b6:8a:f6:f8:3b:a1:5a:99:ca:00:ff:23:7e:6a:
71:48:55:74:1e:d6:30:bf:00:69:96:43:fa:e2:5c:fc:a2:75:
07:fe:ec:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKyq9dBYo26+JvsBPbWKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjYwNDE3MDIwMDM2WhcNMjYwNDE4MDIwMDM2WjAzMTEwLwYDVQQD
EygxMTM3YTM3ZWJmMTYxN2EwMzEzZDEwYzJlYTk4YWJmNjc2MDY5NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXzuRYsRbTF5t/PxKK+53Bic/TCM
PLrqe8eciOMHJBTZIa/k/YZVj5Wl2fKi3eGk9km1HTMgcSWn5iSwXV8oikuowpFn
Ku6LLMPBUSHJ8Xl+o5u455L/uN79gYJIaypJcLuPzvaN6k4iDvVhWyKoJcX9etRu
5f0IQuEbH9wDTyBubhbfd1Qwp5NQ9/OEwR4uy/g9LnkWgO+J2u+sVZgYCeMAvM2P
fKjNLWn6vfutg18ujTsps+NsPgPF5UagKVYfPy8JfcXZsQRJGla1i6TMgvckHIr9
PRqoWvKiW1//VW4Q1s9E3jBo0YUvzxECjRpF+CPAHyjXysLDMeBZZK85kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE3o36/FhegMT0QwuqYq/Z2BpXmMB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2lx/Ax1
pUWa79knkB0/go9nKbXgpud+9l8Cn2d3VcUkbSMvt8jDjMII9qGQbO84l1t9r5JW
4AqwhCRiW+nQyKWrNmmzPN1WAlx4KEJNmJYzQA2p85BE2+eBKoi/pWsEyC5cYuxa
2sg3xyXt/UtHaVCfDbxSvWw+xTwycQfYiG8CbYlN7bJw/YdAq7GJABEJvgx5gQZQ
u5rRBJ+qVXyIBJSgWCLHdW0OMFw+Ptn4qXuhf/pnxsCepaJ9c7VERceYellt09Ai
1D711st3Tj1XiJ0DKfSqdHmyw//SkLaK9vg7oVqZygD/I35qcUhVdB7WML8AaZZD
+uJc/KJ1B/7slQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:45:40 2026 by rpki-client