Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: y5hCqmRdNu8efZBDX2TNznTqXVqXyoYOF9y7Zilol1A=
Subject key identifier: 4D:0E:FD:2C:97:C3:47:4D:4D:04:F7:76:23:7F:9C:81:B7:78:BA:04
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019DA3789E78C778ADA89B0D675219B02811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 02:01:23 +0000
Manifest this update: Sun 19 Apr 2026 02:01:23 +0000
Manifest next update: Mon 20 Apr 2026 02:01:23 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: PvqQiT74+uEXSAr3Ccz8Hi3tEIXKAvabxW7x8gLeUgA=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:9e:78:c7:78:ad:a8:9b:0d:67:52:19:b0:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Apr 19 02:01:23 2026 GMT
Not After : Apr 20 02:01:23 2026 GMT
Subject: CN=4d0efd2c97c3474d4d04f776237f9c81b778ba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:03:37:e7:08:a1:78:7c:08:16:2b:5d:e7:
64:45:7e:11:e7:09:ad:e3:31:ff:40:6e:2c:df:ab:
86:fd:56:82:6d:26:c1:08:ce:54:eb:d0:bb:8d:f9:
52:3a:3d:30:4a:5c:90:66:f8:1b:5c:0e:9a:1e:f9:
be:46:31:80:68:72:ca:25:95:77:44:55:95:e4:d1:
38:7c:73:d6:de:04:11:55:78:24:6a:ae:3e:a0:b6:
57:36:a9:35:15:d6:eb:1c:2f:ca:b8:69:33:b2:6f:
38:65:f9:8c:a5:29:30:dc:15:4e:3a:98:b6:df:c8:
82:b4:c1:68:87:69:a1:d7:0b:14:9e:d3:0e:0d:2d:
94:8f:33:ec:43:dd:f6:82:e9:14:a8:78:b2:b0:c7:
12:20:89:3a:97:8d:b8:70:27:eb:64:f5:54:1a:09:
2c:74:66:5f:8b:04:fd:06:a4:da:4e:07:95:2c:68:
66:3f:8f:b8:7a:23:36:4c:56:0d:ff:b8:09:16:a8:
d5:68:4e:f5:96:79:58:64:b7:4f:a8:98:7d:14:ce:
37:f5:5e:54:6a:cf:f1:34:98:51:26:2c:32:90:b3:
f4:27:0c:88:e5:bd:e0:74:75:b2:94:72:92:ee:95:
b5:a8:9c:1e:36:64:e7:61:e0:48:2f:f6:0e:a8:41:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:FD:2C:97:C3:47:4D:4D:04:F7:76:23:7F:9C:81:B7:78:BA:04
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c8:6f:13:38:a2:b6:2c:80:45:a0:7e:68:e8:40:ab:63:d4:
bd:e7:2e:12:e8:26:8a:f8:51:5a:e2:36:0c:47:8c:77:61:ad:
42:0c:26:f5:63:22:26:bc:35:22:f9:52:92:62:59:62:7c:52:
97:bf:55:f3:80:3f:61:05:24:2b:36:00:62:f9:f4:a3:ba:2d:
6b:64:6c:61:03:12:e0:68:f5:1f:92:bf:b0:92:cc:ff:68:37:
bb:53:e9:d9:8c:55:e8:d9:76:2d:ce:a0:f0:e0:d0:a2:43:81:
3b:2e:a1:b9:3a:88:21:7d:c1:5e:5d:f2:41:c1:72:0a:6a:f4:
a8:b2:ac:37:80:76:e1:88:15:ce:1a:0d:36:97:e8:d8:64:3b:
e1:5e:ac:1e:7d:12:21:50:ff:2c:62:40:2c:09:0f:01:92:1e:
84:d4:6e:b7:39:d7:df:0e:78:6b:ce:20:90:dd:ac:eb:2a:0e:
89:91:6d:c4:e8:ba:cc:7b:ae:5b:a5:70:9a:b3:15:8f:c8:81:
45:11:4e:5e:61:05:d7:79:d8:85:44:58:c8:70:41:1b:24:15:
ff:aa:47:cc:4a:2d:87:f5:0e:57:d3:e0:23:96:95:ac:0c:ab:
06:8e:4e:37:31:7b:54:ad:76:2e:e8:29:7e:4c:28:35:1c:52:
d2:4a:ca:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeJ54x3itqJsNZ1IZsCgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx
Njk4YjUwHhcNMjYwNDE5MDIwMTIzWhcNMjYwNDIwMDIwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDBlZmQyYzk3YzM0NzRkNGQwNGY3NzYyMzdmOWM4MWI3NzhiYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumADN+cIoXh8CBYrXedkRX4R5wmt
4zH/QG4s36uG/VaCbSbBCM5U69C7jflSOj0wSlyQZvgbXA6aHvm+RjGAaHLKJZV3
RFWV5NE4fHPW3gQRVXgkaq4+oLZXNqk1FdbrHC/KuGkzsm84ZfmMpSkw3BVOOpi2
38iCtMFoh2mh1wsUntMODS2UjzPsQ932gukUqHiysMcSIIk6l424cCfrZPVUGgks
dGZfiwT9BqTaTgeVLGhmP4+4eiM2TFYN/7gJFqjVaE71lnlYZLdPqJh9FM439V5U
as/xNJhRJiwykLP0JwyI5b3gdHWylHKS7pW1qJweNmTnYeBIL/YOqEF8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0O/SyXw0dNTQT3diN/nIG3eLoEMB8GA1UdIwQY
MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt
ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl
LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8hvEzii
tiyARaB+aOhAq2PUvecuEugmivhRWuI2DEeMd2GtQgwm9WMiJrw1IvlSkmJZYnxS
l79V84A/YQUkKzYAYvn0o7ota2RsYQMS4Gj1H5K/sJLM/2g3u1Pp2YxV6Nl2Lc6g
8ODQokOBOy6huTqIIX3BXl3yQcFyCmr0qLKsN4B24YgVzhoNNpfo2GQ74V6sHn0S
IVD/LGJALAkPAZIehNRutznX3w54a84gkN2s6yoOiZFtxOi6zHuuW6VwmrMVj8iB
RRFOXmEF13nYhURYyHBBGyQV/6pHzEoth/UOV9PgI5aVrAyrBo5ONzF7VK12Lugp
fkwoNRxS0krKLA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:10 2026 by rpki-client