Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier: 7jy5AfY/wYhg6GFjE5asbVrXduZ0qNfHNeMqr9cTP5Y=
Subject key identifier: 13:68:FA:6C:AF:E1:DC:51:7B:0A:93:6E:83:64:62:A7:D0:39:E1:49
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial: 019DA48ACDA7345F0926441DF1C6E5CC0827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:00:53 +0000
Manifest this update: Sun 19 Apr 2026 07:00:53 +0000
Manifest next update: Mon 20 Apr 2026 07:00:53 +0000
Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: 6POPaYDqnZ+OL2f1/uCHtZQtDUfyOzbo/iC5fqiN3/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:cd:a7:34:5f:09:26:44:1d:f1:c6:e5:cc:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Validity
Not Before: Apr 19 07:00:53 2026 GMT
Not After : Apr 20 07:00:53 2026 GMT
Subject: CN=1368fa6cafe1dc517b0a936e836462a7d039e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:10:e3:99:c3:ae:dd:79:17:1f:7b:a1:85:
e1:82:2a:aa:1f:28:f7:0a:15:52:73:06:74:b2:02:
94:39:8e:80:78:46:4f:8b:f0:b1:56:f7:b8:dc:69:
c2:48:eb:d3:4c:e1:dd:54:4c:cc:24:54:43:09:36:
c8:7a:73:b8:fa:7f:28:91:5c:88:ef:ba:93:8e:8e:
57:65:c6:fc:23:c1:df:dc:0a:40:f0:eb:33:92:61:
85:b8:bf:86:03:cc:75:e0:b6:39:56:be:a1:fd:60:
7b:3a:5b:17:10:80:f7:94:61:8f:72:a4:f4:58:ad:
8a:fb:4d:14:16:97:2a:52:d8:cb:a6:8a:f1:ac:c7:
8c:8d:98:66:fc:1c:ad:9b:d0:00:dc:fd:94:41:b1:
9f:6c:00:db:e5:81:e7:bf:94:35:26:26:2b:22:13:
f6:4f:e5:b5:9a:74:6f:73:23:59:e2:26:fb:57:c9:
52:a9:e3:29:ff:ae:b8:a2:c8:b4:41:71:3a:f5:47:
74:4e:ab:f8:57:ad:b7:bb:4d:dc:d5:12:29:35:63:
e4:8e:8d:4f:55:33:b6:54:0a:2f:c4:b5:de:6f:20:
cf:d6:75:8c:e2:4a:c1:29:ea:a1:26:6f:cd:f3:bc:
aa:93:aa:3d:98:4d:02:57:58:21:a7:9b:8b:2c:c0:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:FA:6C:AF:E1:DC:51:7B:0A:93:6E:83:64:62:A7:D0:39:E1:49
X509v3 Authority Key Identifier:
keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2e:7b:d5:9d:e8:e7:64:21:ca:c2:88:92:51:48:8f:d6:bf:
35:c3:c9:fb:76:e5:e6:ca:b1:bb:68:0f:11:da:cd:99:48:51:
38:0c:45:98:5d:9f:6f:15:10:81:99:23:64:1a:34:ca:1c:20:
7e:a3:aa:28:e2:fb:6d:82:91:36:71:cc:51:ee:4a:a3:66:64:
47:c7:2d:d4:a3:f0:a0:87:67:cb:e2:47:70:c9:68:3d:4a:73:
c7:c4:4d:5b:36:98:be:f6:79:cf:1c:0e:1d:b7:07:0d:fb:17:
f5:ed:9b:c9:9c:4f:1f:ab:57:9f:ce:a9:ab:61:fe:99:8e:26:
91:01:c8:8d:d1:31:dc:37:47:ff:19:25:0d:e0:1b:42:b2:f3:
89:42:c4:a1:bc:f3:d5:ac:74:d8:34:fe:22:bd:5e:38:fc:7f:
06:d3:09:f6:24:6e:18:9b:d3:6b:b3:d0:96:98:81:90:64:de:
b9:07:cb:99:4b:6f:ff:e3:2f:97:9e:d8:2a:a3:50:0d:8a:3c:
a3:30:85:a0:53:45:12:60:7a:28:4f:96:72:1b:59:fe:d7:91:
13:af:91:10:96:9d:98:81:03:57:12:e7:79:9e:32:f8:07:cc:
5e:85:74:69:0c:79:3d:02:74:1e:bb:fc:4a:e3:9c:05:d8:8f:
90:37:75:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kis2nNF8JJkQd8cblzAgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4
YjQ4MWYwHhcNMjYwNDE5MDcwMDUzWhcNMjYwNDIwMDcwMDUzWjAzMTEwLwYDVQQD
EygxMzY4ZmE2Y2FmZTFkYzUxN2IwYTkzNmU4MzY0NjJhN2QwMzllMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYQ45nDrt15Fx97oYXhgiqqHyj3
ChVScwZ0sgKUOY6AeEZPi/CxVve43GnCSOvTTOHdVEzMJFRDCTbIenO4+n8okVyI
77qTjo5XZcb8I8Hf3ApA8OszkmGFuL+GA8x14LY5Vr6h/WB7OlsXEID3lGGPcqT0
WK2K+00UFpcqUtjLporxrMeMjZhm/Bytm9AA3P2UQbGfbADb5YHnv5Q1JiYrIhP2
T+W1mnRvcyNZ4ib7V8lSqeMp/664osi0QXE69Ud0Tqv4V623u03c1RIpNWPkjo1P
VTO2VAovxLXebyDP1nWM4krBKeqhJm/N87yqk6o9mE0CV1ghp5uLLMCMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNo+myv4dxRewqTboNkYqfQOeFJMB8GA1UdIwQY
MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt
M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx
LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy571Z3o
52QhysKIklFIj9a/NcPJ+3bl5sqxu2gPEdrNmUhROAxFmF2fbxUQgZkjZBo0yhwg
fqOqKOL7bYKRNnHMUe5Ko2ZkR8ct1KPwoIdny+JHcMloPUpzx8RNWzaYvvZ5zxwO
HbcHDfsX9e2byZxPH6tXn86pq2H+mY4mkQHIjdEx3DdH/xklDeAbQrLziULEobzz
1ax02DT+Ir1eOPx/BtMJ9iRuGJvTa7PQlpiBkGTeuQfLmUtv/+Mvl57YKqNQDYo8
ozCFoFNFEmB6KE+WchtZ/teRE6+REJadmIEDVxLneZ4y+AfMXoV0aQx5PQJ0Hrv8
SuOcBdiPkDd11w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:18 2026 by rpki-client