Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: MDWNTJori2Dn3CdGbbVJ9E5QBmC0alvbbUSrGZxEpuQ=
Subject key identifier: F9:1B:82:3D:BE:BB:8B:3E:29:B9:87:88:68:32:31:9B:6E:10:DD:8A
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 019D9A06AEC8FCCD8D72D6F90B8A20BBD994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: E1_qOVvH8nrOWTOLw8OYuG7I7l4.roa (hash: pIFcjaUirrK025T2zVEMwQTVwHipFJl67DIxSrVxIxo=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: HGPchW3oVw5tFEVViI6ZdErGnie98DcHUSfKrqhAxkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ae:c8:fc:cd:8d:72:d6:f9:0b:8a:20:bb:d9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=f91b823dbebb8b3e29b987886832319b6e10dd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:c3:0f:57:2e:bb:95:92:92:8a:f8:9c:d0:
db:94:c5:62:17:20:df:dc:4e:de:d3:b7:1e:1f:8e:
a6:5d:bb:e1:99:a9:56:74:0c:d3:cf:69:45:3f:19:
ce:a4:15:b6:32:1b:f8:a4:c5:63:55:94:0d:b5:4d:
b7:dc:48:4b:1c:74:de:07:8b:b5:40:bf:eb:b9:b1:
fc:62:26:cc:2d:d3:a3:90:3d:d2:0b:82:9f:ef:6f:
49:02:d2:86:8a:30:0b:6c:5d:6a:79:47:a9:e9:43:
92:66:1f:85:8b:df:24:0a:cb:b5:19:fa:dc:84:09:
e7:02:79:c8:28:d8:67:3e:37:e0:0c:8c:92:13:35:
84:d3:0c:65:ba:c0:f3:ac:d5:90:77:e4:12:be:7f:
0e:d4:c9:42:79:8e:78:4b:87:6c:89:80:93:59:8c:
9e:3b:72:3d:ba:8b:b2:8b:77:d0:b1:e7:ab:f3:24:
96:c7:10:68:15:83:54:a6:48:9f:38:88:7d:d7:e8:
c7:83:25:14:ff:da:56:ee:35:12:38:cc:fc:c1:4c:
67:98:69:16:75:43:c9:00:02:00:3d:ce:d4:bc:95:
b2:8d:1e:5b:33:5a:05:00:f0:13:81:12:f6:d1:b0:
7d:d6:53:34:ab:dd:88:a5:50:01:df:a4:c1:48:4a:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:82:3D:BE:BB:8B:3E:29:B9:87:88:68:32:31:9B:6E:10:DD:8A
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c8:c7:ee:0c:15:96:b3:5a:7b:24:d9:d2:36:b0:ea:73:f1:
e1:af:0e:e0:3c:3a:f3:6c:e6:c0:b3:c2:8a:a4:42:b0:98:64:
b6:f3:a1:e6:71:a5:c1:38:0e:18:17:e4:da:8f:bf:29:e0:6a:
eb:01:2f:ff:17:5b:a6:2a:ff:8b:26:92:a9:80:cf:4c:02:a1:
43:a1:41:67:dd:b2:16:ad:f4:b1:00:d8:f2:64:3c:4c:2f:57:
d0:46:88:d3:d5:69:7f:62:6b:d8:fb:f7:ee:78:e4:eb:26:a0:
7b:9f:a6:84:e7:d1:cc:29:0d:f2:cf:d3:41:11:2c:c4:59:68:
b4:f2:a8:96:91:24:ce:e4:bb:cf:45:51:3d:f7:0f:8d:73:6d:
d4:e9:09:ac:f0:61:57:f2:e3:1e:54:e0:47:d7:87:e6:70:52:
a6:c8:b9:f7:91:19:a2:e7:bd:8d:11:21:7c:8c:79:ef:a2:4a:
72:6e:75:4f:0d:09:f8:ed:26:83:34:36:f5:c3:10:09:e4:3a:
bf:89:78:5d:e6:80:2b:8b:b7:70:73:f3:a1:ab:aa:b8:66:64:
6d:1f:84:65:1a:2e:7f:dc:2c:07:c7:47:d2:24:94:ea:9d:55:
bf:d3:6c:bd:17:6e:a6:7b:7a:e0:4e:ce:79:b6:c4:83:64:53:
b7:0c:30:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBq7I/M2Nctb5C4ogu9mUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzAzNTYxMzVhZGY0N2VkOTcwOGNiMGExMzY4MDg5NGMy
MzM5ZWEwHhcNMjYwNDE3MDYwMDIyWhcNMjYwNDE4MDYwMDIyWjAzMTEwLwYDVQQD
EyhmOTFiODIzZGJlYmI4YjNlMjliOTg3ODg2ODMyMzE5YjZlMTBkZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE7DD1cuu5WSkor4nNDblMViFyDf
3E7e07ceH46mXbvhmalWdAzTz2lFPxnOpBW2Mhv4pMVjVZQNtU233EhLHHTeB4u1
QL/rubH8YibMLdOjkD3SC4Kf729JAtKGijALbF1qeUep6UOSZh+Fi98kCsu1Gfrc
hAnnAnnIKNhnPjfgDIySEzWE0wxlusDzrNWQd+QSvn8O1MlCeY54S4dsiYCTWYye
O3I9uouyi3fQseer8ySWxxBoFYNUpkifOIh91+jHgyUU/9pW7jUSOMz8wUxnmGkW
dUPJAAIAPc7UvJWyjR5bM1oFAPATgRL20bB91lM0q92IpVAB36TBSEp8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkbgj2+u4s+KbmHiGgyMZtuEN2KMB8GA1UdIwQY
MBaAFBFwNWE1rfR+2XCMsKE2gIlMIznqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEt
ZTYzMTQ2M2IxMjNiLzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jOGI0MGMtMmMwYi00N2ZmLWI5MjEtZTYzMTQ2M2IxMjNi
LzEvRVhBMVlUV3Q5SDdaY0l5d29UYUFpVXdqT2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8jH7gwV
lrNaeyTZ0jaw6nPx4a8O4Dw682zmwLPCiqRCsJhktvOh5nGlwTgOGBfk2o+/KeBq
6wEv/xdbpir/iyaSqYDPTAKhQ6FBZ92yFq30sQDY8mQ8TC9X0EaI09Vpf2Jr2Pv3
7njk6yage5+mhOfRzCkN8s/TQREsxFlotPKolpEkzuS7z0VRPfcPjXNt1OkJrPBh
V/LjHlTgR9eH5nBSpsi595EZoue9jREhfIx576JKcm51Tw0J+O0mgzQ29cMQCeQ6
v4l4XeaAK4u3cHPzoauquGZkbR+EZRouf9wsB8dH0iSU6p1Vv9NsvRdupnt64E7O
ebbEg2RTtwwwbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:08 2026 by rpki-client