Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: nFdYmYA2ph8rCcGg19dfPyBsEyAaNLk9TXPybiJYUg8=
Subject key identifier: 9D:92:AC:DB:D8:1A:AF:E3:83:CC:B6:39:FA:40:92:D1:CB:AC:06:BB
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019D9A74AA725C9EBBD611F9C92AB89BF9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0E71
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: pgMce7CICXd7Aa4PzaN3lWAy7P05z93Z3j6o52GihNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:aa:72:5c:9e:bb:d6:11:f9:c9:2a:b8:9b:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=9d92acdbd81aafe383ccb639fa4092d1cbac06bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:64:e6:2e:a8:2a:47:f6:36:be:b4:c4:bc:
7c:77:ce:1e:03:aa:50:c4:e1:2b:c5:d8:4b:a7:05:
1a:44:9d:b1:e6:e4:24:ed:a6:5d:b3:37:ff:31:45:
7b:6a:2d:91:bb:da:84:07:f4:53:cd:a4:a8:d8:8d:
e4:8a:a0:b8:4b:85:68:dc:8d:d4:f4:70:fc:bd:64:
2f:63:f8:bb:3d:72:37:33:39:97:d6:ca:45:79:53:
85:c0:f3:22:bd:a6:c0:9d:3d:a8:32:2f:74:e4:2f:
38:33:56:54:be:8d:13:ee:12:a0:bb:ec:ac:74:db:
3e:a5:18:46:bf:e3:5c:9e:de:8a:e8:a3:aa:fe:68:
e7:6c:83:c0:c8:8d:a6:08:e6:3c:f9:53:5f:5e:ec:
c0:d1:d3:ef:d0:8a:35:4a:e8:99:23:1b:b0:b9:fe:
9c:28:f4:c2:bc:53:b4:72:65:6b:2e:bf:54:a7:64:
55:7e:83:af:b4:ae:57:56:a0:f0:1c:76:99:58:fd:
0c:fd:c5:2a:9a:aa:5e:7d:15:fc:12:2b:d1:c2:87:
a0:12:07:35:3b:b6:a6:48:be:84:c6:4b:02:7b:f2:
5b:97:e5:04:8d:de:0c:e0:b1:13:ff:78:6f:37:a4:
1b:35:38:3e:55:65:af:65:17:f5:c3:cf:25:78:eb:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:AC:DB:D8:1A:AF:E3:83:CC:B6:39:FA:40:92:D1:CB:AC:06:BB
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:a7:68:4f:32:28:e5:4d:6f:95:f2:18:c2:ee:63:39:e5:
65:7f:97:ef:02:60:76:83:6c:32:56:4b:04:7f:97:3f:ad:17:
04:a2:df:77:f9:8d:a1:e3:47:47:bd:41:5c:73:f9:0d:84:c2:
93:11:dd:91:4c:78:a4:8d:e0:49:57:03:11:e5:72:00:9d:99:
48:1d:c0:15:ce:7d:a6:02:42:e6:7c:f5:cb:72:10:7e:02:ad:
9d:da:49:07:3e:79:82:d8:7b:09:c6:70:14:3b:ac:8c:00:64:
a4:29:99:33:a1:27:80:21:69:8a:2c:06:4a:da:cc:b4:96:f9:
77:4b:ae:1d:1e:00:c4:4e:64:2e:9c:16:29:ae:a5:ce:52:cd:
99:08:e5:73:9d:40:da:e6:e7:3d:49:3f:75:af:a6:30:96:ed:
2e:f2:68:62:af:15:3b:f4:37:5e:3b:bd:95:70:19:12:4c:f6:
54:5d:85:ee:52:56:af:8d:0b:95:5d:ee:75:03:e1:e5:8f:ab:
eb:85:85:a3:8a:11:41:f5:ac:7a:54:ca:71:1b:7a:ac:bf:fb:
9c:79:f4:51:72:79:c5:3e:b4:98:71:26:33:78:3e:ba:4a:e0:
8d:c5:22:6a:24:82:6c:35:84:3c:4d:e7:df:83:0e:2f:49:ee:
50:9c:02:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKpyXJ671hH5ySq4m/mnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjYwNDE3MDgwMDMwWhcNMjYwNDE4MDgwMDMwWjAzMTEwLwYDVQQD
Eyg5ZDkyYWNkYmQ4MWFhZmUzODNjY2I2MzlmYTQwOTJkMWNiYWMwNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmppk5i6oKkf2Nr60xLx8d84eA6pQ
xOErxdhLpwUaRJ2x5uQk7aZdszf/MUV7ai2Ru9qEB/RTzaSo2I3kiqC4S4Vo3I3U
9HD8vWQvY/i7PXI3MzmX1spFeVOFwPMivabAnT2oMi905C84M1ZUvo0T7hKgu+ys
dNs+pRhGv+Ncnt6K6KOq/mjnbIPAyI2mCOY8+VNfXuzA0dPv0Io1SuiZIxuwuf6c
KPTCvFO0cmVrLr9Up2RVfoOvtK5XVqDwHHaZWP0M/cUqmqpefRX8EivRwoegEgc1
O7amSL6ExksCe/Jbl+UEjd4M4LET/3hvN6QbNTg+VWWvZRf1w88leOvCpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2SrNvYGq/jg8y2OfpAktHLrAa7MB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzSnaE8y
KOVNb5XyGMLuYznlZX+X7wJgdoNsMlZLBH+XP60XBKLfd/mNoeNHR71BXHP5DYTC
kxHdkUx4pI3gSVcDEeVyAJ2ZSB3AFc59pgJC5nz1y3IQfgKtndpJBz55gth7CcZw
FDusjABkpCmZM6EngCFpiiwGStrMtJb5d0uuHR4AxE5kLpwWKa6lzlLNmQjlc51A
2ubnPUk/da+mMJbtLvJoYq8VO/Q3Xju9lXAZEkz2VF2F7lJWr40LlV3udQPh5Y+r
64WFo4oRQfWselTKcRt6rL/7nHn0UXJ5xT60mHEmM3g+ukrgjcUiaiSCbDWEPE3n
34MOL0nuUJwCAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:52 2026 by rpki-client