Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier: M0iQveFlaY5MromfM7pwZbmgqsJO+HoFi4QWFXWBBpU=
Subject key identifier: F4:49:53:D8:16:A3:90:E9:D5:3A:CD:F2:F7:74:3B:74:EB:5B:FA:8A
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 019D984FCCE8EE38C8887CDE75E608D28F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:59 +0000
Manifest this update: Thu 16 Apr 2026 22:00:59 +0000
Manifest next update: Fri 17 Apr 2026 22:00:59 +0000
Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: tEiS+eHxXbe5tT6uPDScMlg6HUWoCSTUDDLHa21Dqdo=)
2: J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa (hash: vYs9Iafl6ODvzqSPTNj74leQVCe3/0UGQl7TxkQZF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:cc:e8:ee:38:c8:88:7c:de:75:e6:08:d2:8f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Apr 16 22:00:59 2026 GMT
Not After : Apr 17 22:00:59 2026 GMT
Subject: CN=f44953d816a390e9d53acdf2f7743b74eb5bfa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:6e:e3:07:cf:43:7b:62:af:8a:83:50:1f:
17:01:55:59:d2:60:34:bf:7e:16:e3:50:55:ba:c3:
07:98:ff:51:30:6e:92:d0:c9:6c:4d:78:62:ef:d6:
a2:c1:a0:37:8d:1d:f6:e3:1e:3a:9a:2f:7f:e4:ed:
d2:c8:c4:7e:83:f7:b2:c6:92:92:80:2b:7a:72:2c:
2e:e3:7c:00:9a:78:db:96:05:25:af:96:10:d5:0b:
9e:ba:c6:f3:54:dc:13:3a:04:1d:54:71:67:87:74:
01:d5:4b:7b:ae:52:d0:5b:66:a4:a1:09:96:7a:68:
3f:56:0d:e5:0c:f4:05:47:bd:09:26:04:83:1f:4d:
33:8c:59:dc:76:62:73:78:2d:5b:95:ff:bc:e9:dd:
00:01:d7:71:84:55:09:6a:32:71:d5:c5:0e:0f:18:
72:dc:91:e3:ac:c2:6b:ae:74:8a:d1:6e:7a:ab:cc:
78:dc:39:a7:55:82:9d:ea:19:22:cc:13:2e:16:47:
a4:78:73:37:4f:ae:5e:40:26:6f:f4:dc:34:09:2e:
e7:98:6d:f6:c8:ce:c2:be:77:ad:af:ac:a5:66:62:
2c:da:b2:0e:d7:0d:08:0e:79:27:b0:49:1b:2b:b5:
c1:53:1b:25:78:8b:80:01:bd:9e:d6:c4:30:c1:64:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:49:53:D8:16:A3:90:E9:D5:3A:CD:F2:F7:74:3B:74:EB:5B:FA:8A
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:7b:5a:5f:99:e1:95:71:5b:ce:06:74:80:b1:d3:e2:97:
b2:71:6f:98:2c:a6:d4:dc:b9:f1:2f:54:f6:9f:b1:26:06:f4:
08:e6:d7:29:ad:63:70:f7:e1:f6:57:52:b4:28:15:65:87:9e:
c1:ec:57:c8:51:77:3e:be:44:e2:2e:de:68:63:b6:8b:e7:d6:
29:39:c3:95:58:ef:38:6e:80:86:dc:75:14:2c:23:dd:44:95:
0a:b7:02:66:4c:31:47:91:27:e9:41:eb:22:04:a1:1c:59:1a:
c1:01:69:49:7f:42:62:90:34:95:59:18:3f:3b:73:e6:b5:56:
6e:ee:38:32:4c:03:99:70:48:1e:e7:0c:23:5a:c0:47:2f:04:
fc:76:2d:e4:31:f5:b1:e2:de:d3:9c:0b:e0:d5:12:75:aa:8c:
ea:d3:8d:86:90:ab:52:93:49:9f:0f:9a:82:9f:44:da:72:6e:
70:75:dc:2d:16:d3:46:ef:0b:e0:6b:5d:2a:f0:4f:f0:25:8d:
6a:de:a1:12:40:d8:81:f9:3c:33:08:19:53:cf:a2:39:96:eb:
d2:d1:e5:72:d0:42:e7:81:30:4a:a8:ab:bc:bf:9b:42:06:29:
eb:49:bd:a5:e1:04:b3:1d:c7:ff:8e:24:62:4e:3a:02:2b:a6:
96:38:89:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT8zo7jjIiHzedeYI0o92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YWRhOTAxZDQwOGJmN2Y1Yjk0MzU5MjFlNDgwMGE4Zjgy
ZGJkYWIwHhcNMjYwNDE2MjIwMDU5WhcNMjYwNDE3MjIwMDU5WjAzMTEwLwYDVQQD
EyhmNDQ5NTNkODE2YTM5MGU5ZDUzYWNkZjJmNzc0M2I3NGViNWJmYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jpu4wfPQ3tir4qDUB8XAVVZ0mA0
v34W41BVusMHmP9RMG6S0MlsTXhi79aiwaA3jR324x46mi9/5O3SyMR+g/eyxpKS
gCt6ciwu43wAmnjblgUlr5YQ1QueusbzVNwTOgQdVHFnh3QB1Ut7rlLQW2akoQmW
emg/Vg3lDPQFR70JJgSDH00zjFncdmJzeC1blf+86d0AAddxhFUJajJx1cUODxhy
3JHjrMJrrnSK0W56q8x43DmnVYKd6hkizBMuFkekeHM3T65eQCZv9Nw0CS7nmG32
yM7Cvnetr6ylZmIs2rIO1w0IDnknsEkbK7XBUxsleIuAAb2e1sQwwWRglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRJU9gWo5Dp1TrN8vd0O3TrW/qKMB8GA1UdIwQY
MBaAFPWtqQHUCL9/W5Q1kh5IAKj4Lb2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2Yt
YTMzNjQ5ZTNlMmM1LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2YtYTMzNjQ5ZTNlMmM1
LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjB7Wl+Z
4ZVxW84GdICx0+KXsnFvmCym1Ny58S9U9p+xJgb0CObXKa1jcPfh9ldStCgVZYee
wexXyFF3Pr5E4i7eaGO2i+fWKTnDlVjvOG6Ahtx1FCwj3USVCrcCZkwxR5En6UHr
IgShHFkawQFpSX9CYpA0lVkYPztz5rVWbu44MkwDmXBIHucMI1rARy8E/HYt5DH1
seLe05wL4NUSdaqM6tONhpCrUpNJnw+agp9E2nJucHXcLRbTRu8L4GtdKvBP8CWN
at6hEkDYgfk8MwgZU8+iOZbr0tHlctBC54EwSqirvL+bQgYp60m9peEEsx3H/44k
Yk46AiumljiJzw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:41 2026 by rpki-client