Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: WCpRO1MDshd7hDbQ5vmI8xzKDK+HqDc3FXZzv+rZG+I=
Subject key identifier: 23:E4:B8:81:B6:93:8A:B6:58:F3:BB:95:B6:1D:65:78:6E:17:4F:84
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019D9BBE3534C0ED6063D0E3E29B6CD28842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:00:26 +0000
Manifest this update: Fri 17 Apr 2026 14:00:26 +0000
Manifest next update: Sat 18 Apr 2026 14:00:26 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: B7rh5BeAxug9kCssY5SCUBizsBHYpB8Q3zfP3AxMZVY=)
2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:35:34:c0:ed:60:63:d0:e3:e2:9b:6c:d2:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Apr 17 14:00:26 2026 GMT
Not After : Apr 18 14:00:26 2026 GMT
Subject: CN=23e4b881b6938ab658f3bb95b61d65786e174f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:86:ef:fc:43:fd:b8:3f:36:85:23:99:e7:
65:9b:5b:97:24:20:83:e4:4b:1a:b5:62:86:0a:31:
9c:2e:10:bd:d7:81:ba:e4:39:24:24:10:32:39:74:
e4:62:ee:03:ef:d2:b9:e9:fd:ad:4b:80:4d:31:71:
c5:39:91:32:b7:35:ef:65:10:0d:70:f2:55:74:f1:
a4:93:e3:ef:04:0c:1b:e6:48:5c:ba:6c:e6:d2:3a:
68:23:47:a4:0f:69:f4:cf:39:7d:64:9d:0f:de:f8:
83:94:0f:b8:35:df:9a:6c:3e:0f:5a:02:ce:60:a7:
7e:ce:31:ed:6f:ed:ac:83:d4:21:15:43:66:46:f6:
b7:b9:a6:66:dc:0f:e6:00:1b:cb:c4:bc:66:c5:14:
6b:c7:50:79:8c:ec:3e:3a:e6:f7:5c:3a:4a:c1:a3:
ba:8c:b9:94:1d:9e:a0:32:23:8a:73:41:1d:f4:58:
f7:7f:56:3c:ed:be:f7:e4:3d:66:25:73:43:02:07:
9f:4c:32:b0:48:91:8e:97:0d:f0:eb:ea:5a:3a:91:
32:46:66:af:dc:cd:45:5a:57:72:2d:6d:c2:32:4a:
c9:c5:59:8c:20:00:90:89:e9:ce:6b:8e:82:98:07:
7f:eb:9d:2a:dd:63:c3:41:7c:75:93:fe:37:9b:26:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:B8:81:B6:93:8A:B6:58:F3:BB:95:B6:1D:65:78:6E:17:4F:84
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:2d:84:7e:22:03:03:db:d3:a6:f7:82:e8:7c:93:b0:3a:
33:6c:2f:02:5e:b2:15:8a:fb:aa:30:08:d4:55:be:dc:00:6c:
76:a1:96:eb:b1:5f:2a:f0:77:2b:05:aa:89:2d:9e:a9:fc:71:
f2:2b:0b:68:96:1a:e3:b2:89:49:10:75:af:3f:57:20:26:08:
51:82:1b:92:30:6b:28:9b:60:e9:2f:ca:5d:91:77:69:16:08:
9d:c6:f2:20:8b:6a:7f:bc:74:25:7e:19:ec:eb:1d:2f:b0:cd:
a6:71:75:56:3f:6d:6b:0a:80:df:c0:6f:be:a1:e4:65:24:d9:
c1:54:20:00:6e:73:bc:01:0b:c9:fe:9e:bd:bb:dd:23:2c:7a:
bf:a1:f3:05:54:56:ca:99:40:a2:df:52:d0:d6:84:bb:c5:ac:
90:2d:be:20:92:4c:2f:15:97:bb:4b:8e:0b:47:61:b6:df:61:
73:9e:a1:63:8d:a2:c1:da:72:af:d3:0a:bd:e8:4f:67:e3:4e:
2a:79:99:e3:41:51:97:a4:e9:b5:e5:1f:d3:be:12:43:83:07:
2e:a4:5a:bc:4f:23:ee:11:93:62:6b:d7:a2:1d:67:31:99:9b:
fc:fe:78:f6:db:22:e7:ba:9e:69:3d:fb:ee:96:b9:fa:22:b9:
b0:b3:31:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvjU0wO1gY9Dj4pts0ohCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzM0M2Y3Y2M2YzIzN2RhM2Y4YjgxMTM4YzA1MWQ4Zjkz
YzljNGQwHhcNMjYwNDE3MTQwMDI2WhcNMjYwNDE4MTQwMDI2WjAzMTEwLwYDVQQD
EygyM2U0Yjg4MWI2OTM4YWI2NThmM2JiOTViNjFkNjU3ODZlMTc0Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp6G7/xD/bg/NoUjmedlm1uXJCCD
5EsatWKGCjGcLhC914G65DkkJBAyOXTkYu4D79K56f2tS4BNMXHFOZEytzXvZRAN
cPJVdPGkk+PvBAwb5khcumzm0jpoI0ekD2n0zzl9ZJ0P3viDlA+4Nd+abD4PWgLO
YKd+zjHtb+2sg9QhFUNmRva3uaZm3A/mABvLxLxmxRRrx1B5jOw+Oub3XDpKwaO6
jLmUHZ6gMiOKc0Ed9Fj3f1Y87b735D1mJXNDAgefTDKwSJGOlw3w6+paOpEyRmav
3M1FWldyLW3CMkrJxVmMIACQienOa46CmAd/650q3WPDQXx1k/43myagHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPkuIG2k4q2WPO7lbYdZXhuF0+EMB8GA1UdIwQY
MBaAFNYzQ/fMbCN9o/i4ETjAUdj5PJxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEt
NTMxODBlZWM1NmZiLzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEtNTMxODBlZWM1NmZi
LzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxsthH4i
AwPb06b3guh8k7A6M2wvAl6yFYr7qjAI1FW+3ABsdqGW67FfKvB3KwWqiS2eqfxx
8isLaJYa47KJSRB1rz9XICYIUYIbkjBrKJtg6S/KXZF3aRYIncbyIItqf7x0JX4Z
7OsdL7DNpnF1Vj9tawqA38BvvqHkZSTZwVQgAG5zvAELyf6evbvdIyx6v6HzBVRW
yplAot9S0NaEu8WskC2+IJJMLxWXu0uOC0dhtt9hc56hY42iwdpyr9MKvehPZ+NO
KnmZ40FRl6TpteUf074SQ4MHLqRavE8j7hGTYmvXoh1nMZmb/P549tsi57qeaT37
7pa5+iK5sLMxdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:38 2026 by rpki-client