Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: iW+YhPQ7bOnhJZ2LdWNFbK8vJkfCpdaIGFk4rbLx3ow=
Subject key identifier: 21:20:F1:44:E6:6A:B4:4E:5E:12:9B:3E:07:06:9D:E3:25:63:D2:85
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019D99626CD143453B5B1D89BD58F51C988D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0950
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: WADmyE52RT9kr7PMHxMSiJwrV3q5O5wszul93cGqBys=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6c:d1:43:45:3b:5b:1d:89:bd:58:f5:1c:98:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=2120f144e66ab44e5e129b3e07069de32563d285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:d5:20:0c:59:b4:99:4a:fa:7d:32:fb:92:
99:80:a1:d8:80:12:60:01:d0:64:43:b4:ad:c8:ba:
c4:01:69:f7:df:78:cc:14:1a:2f:95:cd:69:c1:41:
a9:7d:39:a1:67:05:8a:04:a9:98:1e:f0:0a:f1:21:
83:b7:a4:fe:08:c7:4d:35:96:78:e9:3a:de:4e:c5:
aa:63:38:d8:5d:f3:9a:fc:ae:05:32:08:41:5b:e9:
30:69:24:e0:6a:24:69:66:11:7e:15:5a:c9:74:81:
0f:f3:97:1c:db:53:7b:84:a4:d4:66:c3:07:ee:74:
b6:78:27:b2:ed:d4:4e:f2:8c:70:cf:d1:e7:c8:76:
80:5a:d3:15:0b:3f:8d:fb:2e:03:5f:6f:34:05:93:
16:2c:8e:aa:51:62:10:18:c2:c6:82:8e:90:8a:2b:
61:a8:7c:70:8f:9d:eb:be:a7:35:e7:52:29:15:6f:
b1:ee:be:72:24:43:40:6e:6b:ea:72:db:8d:52:43:
09:a3:9b:46:f7:60:61:e4:55:5a:6a:fd:01:18:bd:
5d:f7:98:ce:86:a9:7f:a9:b8:3a:f8:80:86:e6:a6:
45:10:c3:d3:fb:75:ac:4e:68:78:6e:53:45:e0:0f:
97:16:bb:f0:2d:7a:0e:f7:77:a2:93:ae:d9:f0:78:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:F1:44:E6:6A:B4:4E:5E:12:9B:3E:07:06:9D:E3:25:63:D2:85
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3d:ac:d8:5a:db:3a:f1:5b:b9:07:ff:ac:60:1f:71:db:be:
00:de:2d:0d:75:c7:22:2a:7e:c9:0b:83:ab:70:76:19:66:4e:
ba:bd:36:1c:8b:e2:b4:b1:90:ab:f4:c5:9a:cd:a3:23:b2:85:
2e:bf:a6:73:ea:8f:54:8d:4b:9d:f3:82:54:28:4f:91:73:02:
45:67:b9:43:87:4f:7d:7e:7a:30:e7:89:e6:3a:9c:cc:59:cf:
0c:6b:05:67:d1:d3:33:6d:97:80:ac:0e:db:2d:5b:47:9f:27:
a2:56:87:fd:97:a5:4b:2d:ae:71:0e:f1:de:8f:bd:e6:ce:b4:
40:83:84:4a:7b:d5:c5:35:24:4d:98:fa:0b:8e:35:b6:2b:49:
6d:0a:62:d7:49:78:20:7b:7b:60:d0:5b:31:63:7b:9c:a2:f4:
8d:87:e6:f3:d6:fa:f2:9b:3f:aa:ef:be:60:02:c5:3d:90:cb:
74:c8:d4:ed:54:3c:54:72:b1:41:76:f3:ac:cb:c1:41:67:c2:
af:2d:bb:ee:58:48:26:4d:82:66:5b:7a:e6:56:d3:1a:16:04:
43:dd:97:83:d8:29:9f:f7:30:58:40:02:ff:c0:0b:55:87:f1:
9f:dc:e4:2e:f3:77:88:f5:62:97:df:e0:74:96:0b:49:9e:27:
b5:01:be:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmzRQ0U7Wx2JvVj1HJiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl
ZmIzNzAwHhcNMjYwNDE3MDMwMDU3WhcNMjYwNDE4MDMwMDU3WjAzMTEwLwYDVQQD
EygyMTIwZjE0NGU2NmFiNDRlNWUxMjliM2UwNzA2OWRlMzI1NjNkMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fVIAxZtJlK+n0y+5KZgKHYgBJg
AdBkQ7StyLrEAWn333jMFBovlc1pwUGpfTmhZwWKBKmYHvAK8SGDt6T+CMdNNZZ4
6TreTsWqYzjYXfOa/K4FMghBW+kwaSTgaiRpZhF+FVrJdIEP85cc21N7hKTUZsMH
7nS2eCey7dRO8oxwz9HnyHaAWtMVCz+N+y4DX280BZMWLI6qUWIQGMLGgo6Qiith
qHxwj53rvqc151IpFW+x7r5yJENAbmvqctuNUkMJo5tG92Bh5FVaav0BGL1d95jO
hql/qbg6+ICG5qZFEMPT+3WsTmh4blNF4A+XFrvwLXoO93eik67Z8HitwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEg8UTmarROXhKbPgcGneMlY9KFMB8GA1UdIwQY
MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt
MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2
LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT2s2Frb
OvFbuQf/rGAfcdu+AN4tDXXHIip+yQuDq3B2GWZOur02HIvitLGQq/TFms2jI7KF
Lr+mc+qPVI1LnfOCVChPkXMCRWe5Q4dPfX56MOeJ5jqczFnPDGsFZ9HTM22XgKwO
2y1bR58nolaH/ZelSy2ucQ7x3o+95s60QIOESnvVxTUkTZj6C441titJbQpi10l4
IHt7YNBbMWN7nKL0jYfm89b68ps/qu++YALFPZDLdMjU7VQ8VHKxQXbzrMvBQWfC
ry277lhIJk2CZlt65lbTGhYEQ92Xg9gpn/cwWEAC/8ALVYfxn9zkLvN3iPVil9/g
dJYLSZ4ntQG+rA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:53 2026 by rpki-client