Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
File: _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json)
Hash identifier: bwhZGMVpU4uZpbabx4SMwcC0uNt+O7mBigYQhmmLJKk=
Subject key identifier: C1:32:D2:C7:00:12:18:F7:FF:B7:A0:20:89:63:54:EB:37:B2:49:06
Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
Certificate issuer: /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Certificate serial: 019D9D3F8C2E7BC383F8216BB28B8056AB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
Manifest number: 018D
Signing time: Fri 17 Apr 2026 21:01:20 +0000
Manifest this update: Fri 17 Apr 2026 21:01:20 +0000
Manifest next update: Sat 18 Apr 2026 21:01:20 +0000
Files and hashes: 1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=)
2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: zFmIwq7n9FobhcVzNZ1aysd7AUKmPvPQ/hyyst8vq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:8c:2e:7b:c3:83:f8:21:6b:b2:8b:80:56:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15
Validity
Not Before: Apr 17 21:01:20 2026 GMT
Not After : Apr 18 21:01:20 2026 GMT
Subject: CN=c132d2c7001218f7ffb7a020896354eb37b24906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:ec:f3:1e:b3:ad:db:14:5d:45:c8:ca:b0:
eb:ce:ee:83:31:45:0f:8f:3e:d7:25:06:44:6b:01:
30:60:a0:b1:1a:19:88:df:a3:a2:b8:8e:15:11:2e:
b5:84:48:3e:78:01:64:65:9c:3c:27:6b:81:b8:c4:
be:56:06:e4:8f:0e:ff:b5:e7:ac:80:80:bc:4b:0f:
5c:ed:27:6e:9f:95:1e:70:e7:c0:ad:77:ad:07:e2:
37:89:c8:86:f7:ac:e7:52:db:cc:c0:22:0a:24:b6:
c8:db:94:b9:a1:2f:d2:06:d2:a0:0c:3c:dc:6c:47:
3c:17:64:36:c3:64:5a:f5:e8:fe:a9:05:b5:26:f3:
52:1c:44:81:6c:ea:7e:97:d3:f3:79:8f:f3:34:f2:
c1:3d:7c:57:a4:b3:e6:47:3f:03:0a:52:dd:96:8b:
d7:f6:09:60:07:5b:81:a1:0c:21:65:dc:4f:37:0b:
0e:a4:78:12:1c:54:4b:03:6c:b4:ee:c6:43:2c:af:
b8:7e:7a:08:1e:a3:d0:de:f4:72:d5:04:e9:39:ec:
d4:53:c3:53:d9:32:a8:d8:ff:fe:c3:20:d9:8c:33:
38:d9:dd:71:75:8c:dc:22:63:42:f0:3e:71:ea:26:
c4:a5:91:d7:fc:b8:10:37:88:c2:89:a9:f9:5e:06:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:D2:C7:00:12:18:F7:FF:B7:A0:20:89:63:54:EB:37:B2:49:06
X509v3 Authority Key Identifier:
keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9e:24:22:b8:29:2a:53:cc:ec:6f:9e:4f:ea:7c:bf:16:31:
28:2a:33:ce:e6:e7:a2:60:04:f8:84:0a:7b:91:c5:f3:c3:bb:
f2:51:94:b9:57:52:61:37:f6:fc:05:10:48:d5:e6:d0:3e:ae:
e6:22:2d:cf:cd:76:ed:1b:90:66:7c:ea:81:48:07:bf:2b:e8:
00:a8:8a:76:f2:54:fa:3e:09:36:12:8e:4d:c1:30:03:82:80:
dc:ea:d1:f0:59:56:30:23:8b:6e:64:d5:c1:b2:f2:74:31:b6:
e7:a8:6a:bd:fc:48:e5:4a:7c:31:39:22:c3:b2:20:c0:be:de:
7b:17:1c:72:e4:29:37:52:ab:b5:a2:99:9d:37:c6:8f:9c:fa:
41:74:98:d2:be:1b:b2:3b:1f:af:fc:6a:cf:52:95:96:60:25:
a9:eb:d4:62:74:80:a9:de:5f:69:a8:2c:d1:43:a1:55:e5:2e:
af:54:93:47:da:6e:af:95:9d:2f:c6:50:32:43:bb:4a:8d:25:
19:d4:22:85:55:cc:83:ad:8e:be:0c:7f:55:21:05:b7:17:c8:
5f:8b:ab:f4:c1:36:c2:c0:2c:a9:95:cf:bf:d0:40:da:ea:77:
6e:8a:cb:6a:c1:28:77:52:73:c4:28:9a:9d:00:2b:2e:58:16:
b3:35:94:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dP4wue8OD+CFrsouAVqtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMjIwNDJkNzY4YjEzZmZkYTgyOWNiM2YxZDdkMmNmM2Zi
ZThhMTUwHhcNMjYwNDE3MjEwMTIwWhcNMjYwNDE4MjEwMTIwWjAzMTEwLwYDVQQD
EyhjMTMyZDJjNzAwMTIxOGY3ZmZiN2EwMjA4OTYzNTRlYjM3YjI0OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkjs8x6zrdsUXUXIyrDrzu6DMUUP
jz7XJQZEawEwYKCxGhmI36OiuI4VES61hEg+eAFkZZw8J2uBuMS+Vgbkjw7/tees
gIC8Sw9c7Sdun5UecOfArXetB+I3iciG96znUtvMwCIKJLbI25S5oS/SBtKgDDzc
bEc8F2Q2w2Ra9ej+qQW1JvNSHESBbOp+l9PzeY/zNPLBPXxXpLPmRz8DClLdlovX
9glgB1uBoQwhZdxPNwsOpHgSHFRLA2y07sZDLK+4fnoIHqPQ3vRy1QTpOezUU8NT
2TKo2P/+wyDZjDM42d1xdYzcImNC8D5x6ibEpZHX/LgQN4jCian5Xga7qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEy0scAEhj3/7egIIljVOs3skkGMB8GA1UdIwQY
MBaAFPwiBC12ixP/2oKcs/HX0s8/vooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgt
YTFjYzFmN2M4OTdmLzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgtYTFjYzFmN2M4OTdm
LzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ4kIrgp
KlPM7G+eT+p8vxYxKCozzubnomAE+IQKe5HF88O78lGUuVdSYTf2/AUQSNXm0D6u
5iItz8127RuQZnzqgUgHvyvoAKiKdvJU+j4JNhKOTcEwA4KA3OrR8FlWMCOLbmTV
wbLydDG256hqvfxI5Up8MTkiw7IgwL7eexcccuQpN1KrtaKZnTfGj5z6QXSY0r4b
sjsfr/xqz1KVlmAlqevUYnSAqd5faags0UOhVeUur1STR9pur5WdL8ZQMkO7So0l
GdQihVXMg62Ovgx/VSEFtxfIX4ur9ME2wsAsqZXPv9BA2up3borLasEod1JzxCia
nQArLlgWszWUYg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:23:07 2026 by rpki-client