Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File: 1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier: MeU75SCrQB/FkKPu8zhu/jGGL915TlMMrsOQm8jjhV8=
Subject key identifier: F0:FA:C1:DE:11:2A:4A:D6:8D:86:DD:BA:D0:BD:F8:57:DA:35:6D:9F
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial: 019D9A3E3F1BF03E647D1A6468D5B786A0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: pmVRcGbZJErIKhVZrIPWzaTv6EdyWPVPffYZocwxZVA=)
2: X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa (hash: FFDTmh8Q3nrNL2M4JqNRzlrW4SSQct1GaW84BBkxSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3f:1b:f0:3e:64:7d:1a:64:68:d5:b7:86:a0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=f0fac1de112a4ad68d86ddbad0bdf857da356d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:e3:e5:2d:7e:3e:93:04:c6:ba:e9:b6:31:
0a:1d:9f:b0:ca:be:af:92:a6:a3:00:dd:35:ad:94:
38:01:db:de:1a:e9:a4:a9:a7:01:37:79:65:cb:fb:
ff:1d:02:38:60:18:51:79:be:85:7a:91:f0:70:41:
6e:ff:f5:ba:c0:8f:ca:89:e6:2e:92:97:7c:7b:60:
f6:94:63:3b:fd:4d:11:da:8a:fd:90:46:29:3d:ed:
2e:3a:f2:c1:3a:e2:83:99:b8:e6:47:99:ca:b2:25:
d9:fa:30:7f:51:9f:7f:63:0d:10:0c:e7:6b:88:f7:
44:50:4f:a3:d6:e7:48:39:70:32:94:51:f6:f6:4c:
89:1a:8b:1f:18:7b:7c:dc:a7:5c:70:24:f3:b9:4d:
98:df:ef:d7:cb:14:58:05:2d:d1:cb:f8:dd:cb:67:
40:5a:78:5e:43:8c:6b:39:4e:8e:4b:20:a4:78:f1:
3c:9f:16:5a:c5:e3:ed:8a:7c:0a:c7:0c:81:dc:78:
b4:31:f3:de:03:db:8c:45:a6:37:ef:53:9c:a1:59:
ec:89:60:74:66:e7:91:bd:1b:2a:81:5d:d0:45:f8:
fd:d2:bf:b1:ba:ea:99:3c:9d:65:c4:44:4c:5e:05:
06:2d:be:7f:7c:fb:0c:bc:99:16:ed:fd:fe:c5:9a:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:C1:DE:11:2A:4A:D6:8D:86:DD:BA:D0:BD:F8:57:DA:35:6D:9F
X509v3 Authority Key Identifier:
keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:68:7d:f8:ef:06:6d:fb:e2:52:c9:0b:1e:62:2d:c7:34:
89:82:1b:9d:2a:05:bb:31:69:02:9a:5b:c4:fc:89:7c:87:4b:
20:df:e3:73:92:e2:7b:ba:79:3f:bc:46:8a:14:47:e0:10:50:
28:34:ed:ab:04:a2:ca:ec:f3:7c:58:93:bc:fa:0d:5d:ac:8d:
a6:6b:d8:2e:9f:40:9c:a7:28:e4:42:56:29:fd:71:c6:dd:af:
a7:95:45:ff:61:aa:9e:98:ae:c9:28:5b:2e:07:0c:8b:f2:e2:
9b:55:31:74:16:ea:9b:bd:ed:9b:22:82:18:7c:bc:53:ed:6e:
6a:72:54:9f:15:4b:c4:d6:ed:1b:e8:20:4c:46:3f:f6:e2:e3:
63:66:8c:46:39:01:df:57:2e:3a:33:e7:7d:0f:45:bc:bf:bc:
d8:a2:d6:9d:fe:42:4d:53:06:09:cf:b9:f8:ef:64:32:84:9c:
80:77:2e:50:e2:0e:df:70:b1:29:aa:7b:dc:53:c4:2c:9a:43:
6a:25:c6:d5:28:d5:50:b9:16:73:89:a1:39:62:91:2b:eb:70:
f9:27:bc:78:b7:5b:1e:59:7c:6a:90:a5:4d:54:37:72:df:a5:
2f:f4:79:0c:e5:b9:e2:9f:39:2b:63:05:ea:2b:7e:d9:9d:74:
fb:61:ee:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPj8b8D5kfRpkaNW3hqDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTgyNTZjNGY2MjFkOGM0YzE3MDY2NWU4NzhlYTg4ZWNi
YjNmNTEwHhcNMjYwNDE3MDcwMTAzWhcNMjYwNDE4MDcwMTAzWjAzMTEwLwYDVQQD
EyhmMGZhYzFkZTExMmE0YWQ2OGQ4NmRkYmFkMGJkZjg1N2RhMzU2ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT/j5S1+PpMExrrptjEKHZ+wyr6v
kqajAN01rZQ4AdveGumkqacBN3lly/v/HQI4YBhReb6FepHwcEFu//W6wI/KieYu
kpd8e2D2lGM7/U0R2or9kEYpPe0uOvLBOuKDmbjmR5nKsiXZ+jB/UZ9/Yw0QDOdr
iPdEUE+j1udIOXAylFH29kyJGosfGHt83KdccCTzuU2Y3+/XyxRYBS3Ry/jdy2dA
WnheQ4xrOU6OSyCkePE8nxZaxePtinwKxwyB3Hi0MfPeA9uMRaY371OcoVnsiWB0
ZueRvRsqgV3QRfj90r+xuuqZPJ1lxERMXgUGLb5/fPsMvJkW7f3+xZogjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD6wd4RKkrWjYbdutC9+FfaNW2fMB8GA1UdIwQY
MBaAFNXoJWxPYh2MTBcGZeh46ojsuz9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2It
ZGNiM2Y4YWM3NTVlLzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2ItZGNiM2Y4YWM3NTVl
LzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/5offjv
Bm374lLJCx5iLcc0iYIbnSoFuzFpAppbxPyJfIdLIN/jc5Lie7p5P7xGihRH4BBQ
KDTtqwSiyuzzfFiTvPoNXayNpmvYLp9AnKco5EJWKf1xxt2vp5VF/2GqnpiuyShb
LgcMi/Lim1UxdBbqm73tmyKCGHy8U+1uanJUnxVLxNbtG+ggTEY/9uLjY2aMRjkB
31cuOjPnfQ9FvL+82KLWnf5CTVMGCc+5+O9kMoScgHcuUOIO33CxKap73FPELJpD
aiXG1SjVULkWc4mhOWKRK+tw+Se8eLdbHll8apClTVQ3ct+lL/R5DOW54p85K2MF
6it+2Z10+2HucA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:31 2026 by rpki-client