Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: EFo71IQy3QRm6vrw98c6Sqj7AUDAFSLBQg3kHvtWMhU=
Subject key identifier: 49:8B:EB:DE:B9:7E:A1:A4:8D:C9:91:5E:EC:86:6E:0A:9F:6C:CF:62
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 019D9C9A24925BB19C83822ECD9AD5409002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0972
Signing time: Fri 17 Apr 2026 18:00:40 +0000
Manifest this update: Fri 17 Apr 2026 18:00:40 +0000
Manifest next update: Sat 18 Apr 2026 18:00:40 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: eACY+LVcpd4BBWV6TJ2M4y3PVxYh26WaqVN2h5DgDuk=)
2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:24:92:5b:b1:9c:83:82:2e:cd:9a:d5:40:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Apr 17 18:00:40 2026 GMT
Not After : Apr 18 18:00:40 2026 GMT
Subject: CN=498bebdeb97ea1a48dc9915eec866e0a9f6ccf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:c8:a0:11:e2:c7:a6:3f:0e:66:b7:3a:51:
7c:a4:6b:0d:5c:a7:ad:06:a2:0c:50:c3:44:4d:97:
52:5e:14:9e:97:76:30:79:2d:aa:a5:2a:02:99:ba:
ab:1b:c5:8b:c0:62:7e:10:3f:d5:6d:22:98:55:71:
a1:35:75:3d:80:6b:e2:a1:3c:d3:8e:c1:47:bd:1a:
02:3e:98:04:ba:03:27:20:f7:80:27:94:e5:cc:b1:
1a:1a:57:b2:06:60:c1:16:7a:b7:77:c8:e0:2e:84:
f8:7d:16:80:d8:be:d8:e4:13:3f:57:16:b8:4c:21:
88:55:95:a9:47:27:de:79:2d:94:37:f2:40:0f:0c:
18:ac:42:13:d3:38:12:b3:ba:1a:2d:15:30:13:85:
70:69:d0:35:1c:84:c4:e7:50:2c:b3:6f:f1:9c:9f:
3c:f5:df:30:17:a1:25:75:52:e3:5b:cf:74:44:b0:
78:42:b5:74:30:43:45:a9:e0:5f:66:84:9e:70:13:
14:8e:57:14:6b:03:8b:51:80:ad:a9:90:bc:8b:8f:
a5:24:f2:e2:ec:22:ce:25:ae:3c:00:78:86:ed:da:
44:6f:7f:71:a0:4a:65:f3:44:ef:6a:90:3f:cc:09:
c6:b6:b9:9c:46:ba:48:51:83:df:aa:64:e2:0f:1c:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:EB:DE:B9:7E:A1:A4:8D:C9:91:5E:EC:86:6E:0A:9F:6C:CF:62
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:b8:1f:40:8c:f4:10:b5:f0:d5:d1:74:5f:4b:48:a2:64:
5a:45:eb:10:9a:d1:df:d0:3e:34:24:9c:d0:5f:9f:2c:a7:cb:
fd:90:b7:1e:e7:77:7c:d6:f9:8e:d4:c5:69:7e:6b:09:fd:6d:
e3:29:bc:d5:8f:18:85:65:50:9b:3c:11:84:8a:67:d2:4f:51:
5d:f4:7c:51:1f:f0:ad:1e:4d:7a:6b:51:a2:a8:79:32:8d:10:
48:bf:4b:ad:8d:4a:c0:cd:b4:5b:61:71:25:d4:de:d4:4a:be:
52:89:f4:18:70:70:c7:50:eb:ec:0c:5d:04:c7:35:5c:c0:30:
15:94:71:b8:58:02:8e:52:5e:02:79:96:de:d5:94:ed:d3:79:
44:5f:2c:73:2c:d3:89:64:a0:6f:10:c1:24:ad:ec:22:fa:fc:
d6:6d:ed:b7:e3:dc:82:f7:d4:2e:49:4e:13:ba:c5:81:3f:0e:
d5:29:0d:af:11:53:10:24:74:25:0e:f3:1c:e4:15:07:48:8c:
9c:15:d0:b8:6d:33:29:90:e2:bb:95:2e:59:c0:52:c1:81:1c:
18:66:20:dd:46:41:da:35:f8:5b:2b:09:0f:83:62:cb:be:ae:
2f:02:98:4c:41:51:ac:35:76:2e:45:f5:c9:2e:05:40:f2:6b:
15:e0:65:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmiSSW7Gcg4IuzZrVQJACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2
ZjIzYzQwHhcNMjYwNDE3MTgwMDQwWhcNMjYwNDE4MTgwMDQwWjAzMTEwLwYDVQQD
Eyg0OThiZWJkZWI5N2VhMWE0OGRjOTkxNWVlYzg2NmUwYTlmNmNjZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9nIoBHix6Y/Dma3OlF8pGsNXKet
BqIMUMNETZdSXhSel3YweS2qpSoCmbqrG8WLwGJ+ED/VbSKYVXGhNXU9gGvioTzT
jsFHvRoCPpgEugMnIPeAJ5TlzLEaGleyBmDBFnq3d8jgLoT4fRaA2L7Y5BM/Vxa4
TCGIVZWpRyfeeS2UN/JADwwYrEIT0zgSs7oaLRUwE4VwadA1HITE51Ass2/xnJ88
9d8wF6EldVLjW890RLB4QrV0MENFqeBfZoSecBMUjlcUawOLUYCtqZC8i4+lJPLi
7CLOJa48AHiG7dpEb39xoEpl80TvapA/zAnGtrmcRrpIUYPfqmTiDxwTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmL6965fqGkjcmRXuyGbgqfbM9iMB8GA1UdIwQY
MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt
Nzk5M2I5ZTAzYjBmLzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm
LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyu4H0CM
9BC18NXRdF9LSKJkWkXrEJrR39A+NCSc0F+fLKfL/ZC3Hud3fNb5jtTFaX5rCf1t
4ym81Y8YhWVQmzwRhIpn0k9RXfR8UR/wrR5NemtRoqh5Mo0QSL9LrY1KwM20W2Fx
JdTe1Eq+Uon0GHBwx1Dr7AxdBMc1XMAwFZRxuFgCjlJeAnmW3tWU7dN5RF8scyzT
iWSgbxDBJK3sIvr81m3tt+PcgvfULklOE7rFgT8O1SkNrxFTECR0JQ7zHOQVB0iM
nBXQuG0zKZDiu5UuWcBSwYEcGGYg3UZB2jX4WysJD4Niy76uLwKYTEFRrDV2LkX1
yS4FQPJrFeBlMw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:05 2026 by rpki-client