Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: SpuQkorMJcaLHdINwL5buZ5req/rX7RtdtmG06OYGHg=
Subject key identifier: 3F:D9:A7:88:6D:B0:1F:BF:56:2D:A9:14:EA:A6:EB:77:07:78:14:B0
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 019D9A074377D2C81E9378304A8E38BFDF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:01:00 +0000
Manifest this update: Fri 17 Apr 2026 06:01:00 +0000
Manifest next update: Sat 18 Apr 2026 06:01:00 +0000
Files and hashes: 1: e5AN9CeaovW_-N5WzIokstkAxl8.roa (hash: sBlMBRCxbZS22yXbnNUeVngysMGnAhuVKxhszpfbMQc=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: CMqg2YR49gsdxW14To29qrj6MJ8CuR7RO5M//OmtmBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:43:77:d2:c8:1e:93:78:30:4a:8e:38:bf:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Apr 17 06:01:00 2026 GMT
Not After : Apr 18 06:01:00 2026 GMT
Subject: CN=3fd9a7886db01fbf562da914eaa6eb77077814b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:db:67:29:dc:35:31:c6:4c:41:bf:b7:e2:
3d:54:e1:ef:65:89:40:e0:48:26:7b:22:7e:54:80:
89:95:c2:3e:3b:2f:ea:fd:60:fc:41:88:53:85:88:
82:bc:d7:21:71:7f:63:a1:ec:1b:7b:df:98:48:f8:
21:43:7e:b8:78:20:bd:ee:db:34:22:7d:2e:df:99:
43:06:d1:9d:e0:74:da:36:d2:5e:c3:2a:99:fb:90:
80:53:5d:81:e8:f1:c4:67:99:5c:af:c6:4e:55:19:
eb:1d:69:7b:94:d9:cd:b9:b3:d9:2b:ed:29:38:c6:
bd:22:4d:bb:54:f7:02:6c:44:86:7a:a5:d9:c7:fe:
ea:6f:48:38:80:a3:dd:e6:83:37:4a:62:7b:63:a3:
0a:67:e5:a9:33:6a:1d:6e:cb:c3:b3:a5:3b:a0:ae:
19:7e:e8:63:a2:0e:7a:cf:3a:2d:15:83:61:75:b2:
fb:62:60:82:40:b6:9e:4b:8a:2e:f4:99:ee:5a:25:
44:31:84:2e:bc:66:64:6d:c7:29:d0:e7:86:7a:98:
97:f7:43:5a:37:6a:61:04:a3:7e:22:52:87:c6:d2:
0c:73:21:aa:b5:93:95:0a:e5:fc:4f:55:17:46:2b:
1d:6f:d0:36:95:14:82:f6:47:5f:52:74:53:85:1b:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:A7:88:6D:B0:1F:BF:56:2D:A9:14:EA:A6:EB:77:07:78:14:B0
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b0:ed:78:ab:3f:87:d0:65:b7:15:09:c7:10:59:1b:2b:08:
c3:1a:17:13:9d:a8:90:e5:4c:af:8c:aa:39:9c:f2:7b:99:ad:
98:3f:4f:33:3c:ab:87:a2:16:cd:19:a1:ef:d8:89:8f:c6:d5:
39:1d:2f:fe:07:36:75:e2:b4:8c:c8:e7:09:a1:c0:c7:b8:24:
1b:47:46:90:d4:f3:61:de:08:54:9f:c6:2c:53:e7:91:19:22:
21:a5:20:0e:52:66:b9:bc:bb:e0:61:23:1d:81:de:f9:24:98:
6a:61:22:65:39:a9:5e:bd:14:3e:31:2a:5e:eb:c4:32:78:f4:
d4:99:c8:c6:ce:b6:61:79:7f:b6:80:e3:3f:c7:bf:14:0c:a0:
a4:15:32:ad:79:09:97:cb:51:59:ed:70:ea:c1:0a:5b:87:1a:
31:9e:8a:c1:e8:97:6c:f3:25:35:11:59:65:17:f0:05:b6:73:
15:9d:9e:48:26:04:43:e9:b4:75:05:1a:b7:4a:02:8e:5f:5c:
db:eb:ab:38:4c:e1:48:a1:8e:ff:4f:07:a6:e6:e9:ea:e2:f1:
3f:63:64:61:17:6b:f6:8f:e5:99:70:d3:49:ed:19:60:43:5b:
08:73:24:4f:2e:ae:0f:f5:1d:13:74:8b:0d:c7:cc:13:f4:07:
42:cb:38:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB0N30sgek3gwSo44v99AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh
Yzc3MzIwHhcNMjYwNDE3MDYwMTAwWhcNMjYwNDE4MDYwMTAwWjAzMTEwLwYDVQQD
EygzZmQ5YTc4ODZkYjAxZmJmNTYyZGE5MTRlYWE2ZWI3NzA3NzgxNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbPbZyncNTHGTEG/t+I9VOHvZYlA
4EgmeyJ+VICJlcI+Oy/q/WD8QYhThYiCvNchcX9joewbe9+YSPghQ364eCC97ts0
In0u35lDBtGd4HTaNtJewyqZ+5CAU12B6PHEZ5lcr8ZOVRnrHWl7lNnNubPZK+0p
OMa9Ik27VPcCbESGeqXZx/7qb0g4gKPd5oM3SmJ7Y6MKZ+WpM2odbsvDs6U7oK4Z
fuhjog56zzotFYNhdbL7YmCCQLaeS4ou9JnuWiVEMYQuvGZkbccp0OeGepiX90Na
N2phBKN+IlKHxtIMcyGqtZOVCuX8T1UXRisdb9A2lRSC9kdfUnRThRs/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/Zp4htsB+/Vi2pFOqm63cHeBSwMB8GA1UdIwQY
MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt
MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi
LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1LDteKs/
h9BltxUJxxBZGysIwxoXE52okOVMr4yqOZzye5mtmD9PMzyrh6IWzRmh79iJj8bV
OR0v/gc2deK0jMjnCaHAx7gkG0dGkNTzYd4IVJ/GLFPnkRkiIaUgDlJmuby74GEj
HYHe+SSYamEiZTmpXr0UPjEqXuvEMnj01JnIxs62YXl/toDjP8e/FAygpBUyrXkJ
l8tRWe1w6sEKW4caMZ6KweiXbPMlNRFZZRfwBbZzFZ2eSCYEQ+m0dQUat0oCjl9c
2+urOEzhSKGO/08Hpubp6uLxP2NkYRdr9o/lmXDTSe0ZYENbCHMkTy6uD/UdE3SL
DcfME/QHQss4Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:18 2026 by rpki-client