Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: a4apNz29uCxNbEE/ADbjiijgG4QG4zaGFDjCej4KGLs=
Subject key identifier: 70:87:DB:17:6A:9C:0D:82:10:B7:D4:4B:75:0B:BC:51:10:86:E5:02
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019D9A06EE798A2380F4A47F2A684B4DC35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 06:00:38 +0000
Manifest this update: Fri 17 Apr 2026 06:00:38 +0000
Manifest next update: Sat 18 Apr 2026 06:00:38 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: FRki6gJtvouEGxoF/RafUV3PDOn/8QRO33JISAUmKCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ee:79:8a:23:80:f4:a4:7f:2a:68:4b:4d:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Apr 17 06:00:38 2026 GMT
Not After : Apr 18 06:00:38 2026 GMT
Subject: CN=7087db176a9c0d8210b7d44b750bbc511086e502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:a5:23:79:ee:43:5d:6d:19:cc:8e:22:43:
c3:9b:93:57:91:ec:a5:22:0c:0b:a4:43:10:fa:ff:
2b:18:65:71:60:b0:07:06:2f:ad:5b:b7:61:4d:f7:
00:8d:e6:b6:2f:1c:bd:fb:de:02:b9:14:76:6e:e8:
3b:9a:77:2b:85:e7:3d:d8:6d:90:2e:8e:12:fd:3a:
14:d8:11:bc:93:e2:99:26:58:cd:58:94:26:11:b4:
48:e5:7f:f4:b4:65:17:f4:ab:60:df:14:2e:be:f3:
a2:63:72:73:7c:36:6f:a3:05:30:e4:4c:df:e1:a6:
0c:65:db:f7:4d:dc:26:86:41:a5:06:36:52:ae:9f:
83:31:ec:fe:01:b2:47:96:3f:57:dd:b5:eb:5f:a0:
52:f3:29:b8:f1:e5:07:bd:5c:ad:28:c2:fd:0d:87:
e5:89:d1:f5:17:08:c8:19:b9:72:e4:1b:38:1a:7a:
d5:bb:3e:5d:35:18:d3:6b:2e:6f:19:16:9f:ad:c9:
b1:18:19:fa:5f:d8:d4:7f:85:be:12:37:05:ac:27:
d4:94:0f:b9:08:53:77:e6:68:32:b6:19:3e:b4:80:
04:cb:6c:cf:dc:d2:89:18:01:f2:a3:ff:a3:fc:d4:
e8:a5:00:0b:26:8f:c8:41:5d:4b:98:0a:b4:4f:93:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:DB:17:6A:9C:0D:82:10:B7:D4:4B:75:0B:BC:51:10:86:E5:02
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:2a:eb:04:52:be:e4:ca:f3:0b:49:14:59:08:9e:10:a8:
77:54:aa:6c:af:47:22:97:51:10:86:e6:88:c4:80:76:bf:8f:
ec:8f:6b:63:44:23:e3:d9:d2:44:c0:7e:50:0b:c7:aa:61:3c:
29:ee:17:ea:8c:2b:44:9e:29:44:45:eb:a5:e8:94:50:b8:a1:
cb:5a:63:91:69:e4:11:8a:f7:cc:74:3f:e5:e8:14:45:c7:c0:
77:24:92:83:ba:4c:d0:d5:ca:a9:9f:3c:0e:66:bf:65:25:2c:
4e:cc:51:7e:d4:25:cc:33:95:37:4d:03:1f:1e:e8:01:1a:f8:
0a:a1:ea:b5:0e:ec:58:b3:a6:ff:b2:2c:b7:13:54:81:39:7a:
8c:a9:a9:a2:48:88:5d:11:85:bb:1c:43:eb:4f:55:9c:14:1d:
a1:9f:5e:a5:d0:4c:d8:3f:92:74:69:23:44:b2:43:a0:ae:f0:
a3:d9:b3:ed:47:33:2e:65:6b:b1:12:fd:ed:44:aa:82:a9:e7:
5b:fa:5d:b0:85:09:1e:6a:6d:64:a4:7c:ed:9f:92:9e:c3:47:
a8:89:64:1f:02:28:a8:8f:4d:23:c2:34:00:11:6d:32:fd:30:
77:57:63:a9:ae:ec:21:5a:79:81:9c:78:b8:ce:04:51:93:22:
a0:e1:7a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBu55iiOA9KR/KmhLTcNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjYwNDE3MDYwMDM4WhcNMjYwNDE4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg3MDg3ZGIxNzZhOWMwZDgyMTBiN2Q0NGI3NTBiYmM1MTEwODZlNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt46lI3nuQ11tGcyOIkPDm5NXkeyl
IgwLpEMQ+v8rGGVxYLAHBi+tW7dhTfcAjea2Lxy9+94CuRR2bug7mncrhec92G2Q
Lo4S/ToU2BG8k+KZJljNWJQmEbRI5X/0tGUX9Ktg3xQuvvOiY3JzfDZvowUw5Ezf
4aYMZdv3TdwmhkGlBjZSrp+DMez+AbJHlj9X3bXrX6BS8ym48eUHvVytKML9DYfl
idH1FwjIGbly5Bs4GnrVuz5dNRjTay5vGRafrcmxGBn6X9jUf4W+EjcFrCfUlA+5
CFN35mgythk+tIAEy2zP3NKJGAHyo/+j/NTopQALJo/IQV1LmAq0T5PJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCH2xdqnA2CELfUS3ULvFEQhuUCMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBEq6wRS
vuTK8wtJFFkInhCod1SqbK9HIpdREIbmiMSAdr+P7I9rY0Qj49nSRMB+UAvHqmE8
Ke4X6owrRJ4pREXrpeiUULihy1pjkWnkEYr3zHQ/5egURcfAdySSg7pM0NXKqZ88
Dma/ZSUsTsxRftQlzDOVN00DHx7oARr4CqHqtQ7sWLOm/7IstxNUgTl6jKmpokiI
XRGFuxxD609VnBQdoZ9epdBM2D+SdGkjRLJDoK7wo9mz7UczLmVrsRL97USqgqnn
W/pdsIUJHmptZKR87Z+SnsNHqIlkHwIoqI9NI8I0ABFtMv0wd1djqa7sIVp5gZx4
uM4EUZMioOF6bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:59 2026 by rpki-client