Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: W4wCym4DxEQy2dZ8kca7BBsrN0XXbCNwibJq9I6eCes=
Subject key identifier: 85:A4:EE:14:F7:DF:7A:CD:FD:16:ED:4B:82:16:32:27:40:DD:EA:72
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019D9998DF05C4C6FEE0F2BE6A8838F44040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: 4yQ9L+SdrpWR+vwvehkxcNNodO6KaUEFvOIZSYjAViw=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:df:05:c4:c6:fe:e0:f2:be:6a:88:38:f4:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=85a4ee14f7df7acdfd16ed4b8216322740ddea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:20:3a:d9:b3:5f:a0:a6:4b:54:09:80:4c:
a9:ee:a2:ad:f8:89:e6:91:39:83:7c:41:3b:a8:2c:
b8:90:1a:68:bd:4a:6e:92:30:87:ce:df:cd:d4:e5:
0d:60:cc:40:98:fe:fd:79:2c:fd:6e:0f:f6:2a:5e:
e5:2d:cd:30:55:f6:e2:f6:2f:f0:25:1b:9a:1b:44:
31:e9:b5:5a:6d:bc:4d:71:db:f0:37:26:fb:bb:5c:
3c:da:e1:ae:54:ec:53:02:f7:d6:96:2b:c2:4a:fb:
92:d7:d2:f7:dc:88:3c:40:5d:e4:16:e2:72:f3:53:
fd:7b:1e:c6:0f:c3:11:f0:26:23:3b:26:18:a5:b5:
cb:18:70:11:6d:c3:89:88:57:d1:b4:11:dc:19:5a:
d2:3d:4a:1c:ab:7a:51:51:7d:be:7e:8d:f2:7e:03:
0b:f7:bc:21:f2:ec:99:4a:3f:56:56:7e:8d:13:df:
32:27:8e:25:15:c4:ca:35:78:59:d3:6e:a8:33:f5:
d4:e2:2f:8c:7b:68:a7:41:3f:f1:c8:7b:7c:25:c1:
2e:4c:46:6a:db:88:11:8b:cb:6c:9a:c9:cc:a9:41:
d2:b4:dc:64:a3:66:76:ce:8d:b2:43:ed:43:f9:b9:
c8:0d:dc:85:04:94:14:dc:ed:cd:9c:b7:43:91:7f:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:EE:14:F7:DF:7A:CD:FD:16:ED:4B:82:16:32:27:40:DD:EA:72
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:f0:ec:1f:b2:2d:71:a7:f4:a0:05:48:de:49:d7:05:e8:
07:6b:3f:cc:aa:b7:9e:88:8b:27:a3:b3:d4:5b:99:60:50:84:
76:e6:4a:46:37:33:9a:a2:3e:d5:92:bb:75:29:e5:33:ed:50:
04:50:3d:c0:0b:d1:cd:10:59:ae:2a:f9:f0:40:9f:5a:42:53:
d5:7b:a4:a2:21:38:74:aa:28:e7:31:41:d9:69:68:b0:a8:4c:
77:d6:35:97:c0:46:9e:d1:34:b9:12:ab:c5:92:f5:04:9f:da:
49:e9:07:2b:de:26:dd:7f:4c:6b:a3:ed:c6:7e:a6:58:d4:41:
80:f3:af:e5:ce:f1:c2:b8:ad:6e:61:34:bd:1a:6b:5d:c7:b9:
60:ca:59:59:c9:19:9a:6f:13:49:e2:ce:31:57:e8:b5:f3:32:
24:14:82:44:86:c5:7f:d0:d7:e4:1c:ca:72:e1:b1:2e:0b:06:
69:20:6a:43:b0:c8:d1:8e:d6:59:28:48:fa:77:85:fc:9f:00:
41:c3:98:60:f1:2e:d7:67:10:7c:e4:43:af:d2:59:bc:e9:c7:
81:d1:5f:6a:a9:34:77:51:92:7c:b3:ea:c2:04:80:13:a1:64:
6e:72:f5:66:6e:9f:24:80:a3:04:a3:39:88:39:b0:ed:f9:1a:
22:f3:79:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmN8FxMb+4PK+aog49EBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjYwNDE3MDQwMDI1WhcNMjYwNDE4MDQwMDI1WjAzMTEwLwYDVQQD
Eyg4NWE0ZWUxNGY3ZGY3YWNkZmQxNmVkNGI4MjE2MzIyNzQwZGRlYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu58gOtmzX6CmS1QJgEyp7qKt+Inm
kTmDfEE7qCy4kBpovUpukjCHzt/N1OUNYMxAmP79eSz9bg/2Kl7lLc0wVfbi9i/w
JRuaG0Qx6bVabbxNcdvwNyb7u1w82uGuVOxTAvfWlivCSvuS19L33Ig8QF3kFuJy
81P9ex7GD8MR8CYjOyYYpbXLGHARbcOJiFfRtBHcGVrSPUocq3pRUX2+fo3yfgML
97wh8uyZSj9WVn6NE98yJ44lFcTKNXhZ026oM/XU4i+Me2inQT/xyHt8JcEuTEZq
24gRi8tsmsnMqUHStNxko2Z2zo2yQ+1D+bnIDdyFBJQU3O3NnLdDkX8ApwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWk7hT333rN/RbtS4IWMidA3epyMB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuTw7B+y
LXGn9KAFSN5J1wXoB2s/zKq3noiLJ6Oz1FuZYFCEduZKRjczmqI+1ZK7dSnlM+1Q
BFA9wAvRzRBZrir58ECfWkJT1XukoiE4dKoo5zFB2WlosKhMd9Y1l8BGntE0uRKr
xZL1BJ/aSekHK94m3X9Ma6Ptxn6mWNRBgPOv5c7xwritbmE0vRprXce5YMpZWckZ
mm8TSeLOMVfotfMyJBSCRIbFf9DX5BzKcuGxLgsGaSBqQ7DI0Y7WWShI+neF/J8A
QcOYYPEu12cQfORDr9JZvOnHgdFfaqk0d1GSfLPqwgSAE6FkbnL1Zm6fJICjBKM5
iDmw7fkaIvN5yA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:24 2026 by rpki-client