Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: 9taFb+B1fmSnIKak085Hm0sWY4/b2O7PpklrD11X1VU=
Subject key identifier: A7:E6:15:07:88:89:C6:CD:E9:BE:6E:2E:38:81:DA:33:D6:4E:6F:22
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 019DA37824A36F4277CA3996FBE20BB12C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 02:00:53 +0000
Manifest this update: Sun 19 Apr 2026 02:00:53 +0000
Manifest next update: Mon 20 Apr 2026 02:00:53 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: e/BSHu1R20JPdHhPcBForQeVBPHppXo0LSsTrXecm6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:24:a3:6f:42:77:ca:39:96:fb:e2:0b:b1:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Apr 19 02:00:53 2026 GMT
Not After : Apr 20 02:00:53 2026 GMT
Subject: CN=a7e615078889c6cde9be6e2e3881da33d64e6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:24:4e:5f:73:c2:64:ac:01:c2:66:91:1b:
5f:96:be:70:42:b1:b1:66:31:59:55:d2:8c:5c:3a:
dd:9e:75:3d:19:a7:ef:aa:21:e2:80:31:8e:f7:f4:
f0:8d:d5:44:a8:d3:ee:c7:52:3d:8d:51:26:a8:bb:
67:2b:f8:89:83:50:fc:93:e9:f0:84:b2:64:8b:a9:
99:45:39:01:1b:52:18:bf:c4:6f:b4:68:10:2d:b9:
ab:43:5b:ca:7f:8a:45:26:c4:48:b1:8c:05:95:d9:
64:15:37:71:9c:01:cb:2f:84:f2:3b:74:72:5c:f4:
6d:ef:a0:dc:18:f6:eb:14:3d:24:89:2b:1a:ef:f3:
f6:c8:42:0f:e0:a5:bf:da:1f:5b:e0:1c:bc:1c:9c:
7a:a7:eb:13:c4:35:7d:60:29:f7:76:c0:bb:30:2b:
c6:3b:f7:35:74:13:fb:a3:2b:03:d0:f3:72:80:8e:
03:42:9c:fe:5d:73:cd:4b:04:e6:3e:99:af:1a:18:
d4:e5:ba:20:d4:cc:09:11:de:36:0a:30:1c:33:9e:
fc:9d:c4:49:2c:7d:c0:33:fd:4a:5a:cb:79:1e:da:
0a:5a:9e:57:f1:cf:f9:b1:fe:e0:1e:4c:0e:79:03:
eb:fd:bd:31:44:a0:f2:4a:15:de:5c:f1:24:bd:a2:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:15:07:88:89:C6:CD:E9:BE:6E:2E:38:81:DA:33:D6:4E:6F:22
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:5a:47:0d:4d:c8:f5:30:37:df:74:77:43:08:b3:f2:80:
ed:a2:5e:27:22:e3:56:98:27:30:80:b2:5e:cc:93:fe:70:e9:
bc:56:77:39:b0:ec:b1:74:f2:db:f1:b4:fc:93:d0:bf:03:b8:
a4:24:df:9a:7f:b7:10:1d:06:bb:60:25:11:4f:66:ac:12:58:
65:1e:7f:c7:d3:eb:10:6a:01:b0:55:de:6d:f0:c0:37:ff:93:
d3:44:d0:e0:5f:99:33:d3:3a:6b:ef:cf:fa:b9:a5:41:92:7c:
19:9e:1d:fb:c9:44:76:11:4b:c6:fb:3f:7f:4f:aa:59:f3:13:
1a:e2:30:38:31:ca:7b:1f:fb:2a:d1:07:70:b1:43:66:40:8a:
a9:01:46:3a:73:dd:e4:e5:2b:cd:1a:fa:9c:14:39:a9:2c:62:
5b:b2:3a:2a:d3:0a:f2:f6:bb:c4:28:94:c2:9a:0a:15:03:cc:
ce:94:f7:33:8f:4d:8f:85:a6:6c:6d:d8:c1:a5:4b:12:5a:79:
0e:6a:2a:ed:83:f8:82:f1:0b:2c:6e:66:48:48:ba:57:65:f9:
c0:61:66:2b:ab:d6:67:52:dd:13:1e:6e:7e:fb:59:f4:45:0b:
d8:25:80:4b:ce:cb:8f:8c:30:ce:02:88:fb:68:a3:a9:54:7d:
02:45:e6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeCSjb0J3yjmW++ILsSweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmQxNTI3NjA3ZDExODhlOWRiODBjZjE2NDk4YTQxMzgy
MDBjZGMwHhcNMjYwNDE5MDIwMDUzWhcNMjYwNDIwMDIwMDUzWjAzMTEwLwYDVQQD
EyhhN2U2MTUwNzg4ODljNmNkZTliZTZlMmUzODgxZGEzM2Q2NGU2ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuskTl9zwmSsAcJmkRtflr5wQrGx
ZjFZVdKMXDrdnnU9GafvqiHigDGO9/TwjdVEqNPux1I9jVEmqLtnK/iJg1D8k+nw
hLJki6mZRTkBG1IYv8RvtGgQLbmrQ1vKf4pFJsRIsYwFldlkFTdxnAHLL4TyO3Ry
XPRt76DcGPbrFD0kiSsa7/P2yEIP4KW/2h9b4By8HJx6p+sTxDV9YCn3dsC7MCvG
O/c1dBP7oysD0PNygI4DQpz+XXPNSwTmPpmvGhjU5bog1MwJEd42CjAcM578ncRJ
LH3AM/1KWst5HtoKWp5X8c/5sf7gHkwOeQPr/b0xRKDyShXeXPEkvaI1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfmFQeIicbN6b5uLjiB2jPWTm8iMB8GA1UdIwQY
MBaAFP0tFSdgfRGI6duAzxZJikE4IAzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzct
ZGMxYWJlYzE2NjZjLzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzctZGMxYWJlYzE2NjZj
LzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBVaRw1N
yPUwN990d0MIs/KA7aJeJyLjVpgnMICyXsyT/nDpvFZ3ObDssXTy2/G0/JPQvwO4
pCTfmn+3EB0Gu2AlEU9mrBJYZR5/x9PrEGoBsFXebfDAN/+T00TQ4F+ZM9M6a+/P
+rmlQZJ8GZ4d+8lEdhFLxvs/f0+qWfMTGuIwODHKex/7KtEHcLFDZkCKqQFGOnPd
5OUrzRr6nBQ5qSxiW7I6KtMK8va7xCiUwpoKFQPMzpT3M49Nj4WmbG3YwaVLElp5
Dmoq7YP4gvELLG5mSEi6V2X5wGFmK6vWZ1LdEx5ufvtZ9EUL2CWAS87Lj4wwzgKI
+2ijqVR9AkXmHw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:30 2026 by rpki-client