
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: WD8FQ1KP1wMmPy4WGouPz3ZJ8PWhYY12FDQ1qgamrCU=
Subject key identifier: E4:3D:2F:E7:EA:81:4E:CE:00:F3:F9:38:57:5F:B6:9E:C1:9B:97:9A
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019DA3792B392B6E274EDC339A5EAF458515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 136A
Signing time: Sun 19 Apr 2026 02:02:00 +0000
Manifest this update: Sun 19 Apr 2026 02:02:00 +0000
Manifest next update: Mon 20 Apr 2026 02:02:00 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: o41XTjXsDEN89BX036yj2+YH5OUEkqNhKtZxrZYzSJs=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:2b:39:2b:6e:27:4e:dc:33:9a:5e:af:45:85:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Apr 19 02:02:00 2026 GMT
Not After : Apr 20 02:02:00 2026 GMT
Subject: CN=e43d2fe7ea814ece00f3f938575fb69ec19b979a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:e5:eb:b3:88:49:9e:1c:88:09:42:3e:60:
89:44:84:ba:41:a1:33:83:38:ad:92:74:55:e7:e7:
aa:5f:45:5f:4c:0f:41:a3:66:a9:5e:8b:3b:d7:f5:
58:dd:23:41:ae:7d:e1:8a:ad:ed:42:a2:f6:fb:45:
e2:0a:04:3a:cc:36:61:5f:30:e2:da:6b:00:45:dc:
56:a5:05:02:2a:09:cf:d6:9c:e6:2e:64:d5:2d:74:
96:48:a6:ff:28:43:d8:28:cc:81:e3:4b:90:8e:46:
92:be:81:63:08:79:4f:8a:1b:08:a5:b9:58:12:87:
87:74:85:6e:55:4b:62:78:2e:7e:ec:65:86:d6:f2:
8d:78:c4:a4:de:5a:d1:f3:51:4b:08:00:bd:48:ec:
70:06:59:c7:24:ae:32:72:32:64:51:28:34:e2:d2:
82:f4:f6:a5:de:ba:4b:9b:14:ff:38:67:7b:5e:a8:
6b:cc:97:85:37:13:28:11:4d:06:d8:97:1b:9f:c5:
6b:ec:b9:48:15:71:de:c7:24:0f:02:17:48:13:30:
b7:ed:71:8c:70:6e:d0:11:fa:9a:ed:5f:7d:02:32:
4f:ad:3c:60:d0:a6:03:55:99:8b:90:f6:17:91:87:
88:dd:49:bc:c0:ac:3e:da:e8:91:e2:3f:e1:13:ca:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:2F:E7:EA:81:4E:CE:00:F3:F9:38:57:5F:B6:9E:C1:9B:97:9A
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:6d:eb:50:ff:0f:11:50:9a:6c:43:a8:9e:07:51:c5:b5:
34:44:02:e5:01:11:1f:c7:45:99:5f:11:59:6d:e1:dc:e0:0c:
6a:d3:9c:1f:be:db:82:e4:60:25:c0:b4:94:5c:0e:ef:0e:13:
4f:41:3b:72:e5:ab:67:f5:69:57:10:fe:41:0a:16:a8:05:c8:
0f:8c:f1:d4:6d:a3:d3:f2:db:63:ab:e4:4a:0d:9a:17:f4:1e:
38:24:c2:c8:de:b4:a2:3c:9f:ee:a0:42:fd:4f:ac:95:cf:47:
0d:43:04:ed:de:14:34:41:1b:f5:97:46:9f:33:2f:fc:5b:0b:
e7:89:5d:ea:02:37:a6:a4:35:52:56:cb:5f:35:29:9a:37:91:
f7:69:ad:77:20:ab:ea:3b:04:f4:ec:93:03:20:d7:83:87:a8:
ab:9d:c4:e2:cb:2f:ef:c1:59:60:ef:fd:04:ea:a3:81:dd:eb:
5b:b5:45:e6:32:c0:22:51:65:de:f3:96:ab:0c:99:e7:72:8b:
a8:86:27:ba:56:82:fc:1f:d5:e3:05:df:33:cd:3c:c4:83:8f:
44:47:6d:52:12:dc:a1:8b:5d:03:24:1b:d4:50:25:e2:17:52:
91:a8:92:88:b4:2d:2e:fc:18:60:a5:3c:37:f1:29:0e:4c:1d:
28:df:a2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeSs5K24nTtwzml6vRYUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjYwNDE5MDIwMjAwWhcNMjYwNDIwMDIwMjAwWjAzMTEwLwYDVQQD
EyhlNDNkMmZlN2VhODE0ZWNlMDBmM2Y5Mzg1NzVmYjY5ZWMxOWI5NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRbl67OISZ4ciAlCPmCJRIS6QaEz
gzitknRV5+eqX0VfTA9Bo2apXos71/VY3SNBrn3hiq3tQqL2+0XiCgQ6zDZhXzDi
2msARdxWpQUCKgnP1pzmLmTVLXSWSKb/KEPYKMyB40uQjkaSvoFjCHlPihsIpblY
EoeHdIVuVUtieC5+7GWG1vKNeMSk3lrR81FLCAC9SOxwBlnHJK4ycjJkUSg04tKC
9Pal3rpLmxT/OGd7XqhrzJeFNxMoEU0G2Jcbn8Vr7LlIFXHexyQPAhdIEzC37XGM
cG7QEfqa7V99AjJPrTxg0KYDVZmLkPYXkYeI3Um8wKw+2uiR4j/hE8qD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ9L+fqgU7OAPP5OFdftp7Bm5eaMB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXNt61D/
DxFQmmxDqJ4HUcW1NEQC5QERH8dFmV8RWW3h3OAMatOcH77bguRgJcC0lFwO7w4T
T0E7cuWrZ/VpVxD+QQoWqAXID4zx1G2j0/LbY6vkSg2aF/QeOCTCyN60ojyf7qBC
/U+slc9HDUME7d4UNEEb9ZdGnzMv/FsL54ld6gI3pqQ1UlbLXzUpmjeR92mtdyCr
6jsE9OyTAyDXg4eoq53E4ssv78FZYO/9BOqjgd3rW7VF5jLAIlFl3vOWqwyZ53KL
qIYnulaC/B/V4wXfM808xIOPREdtUhLcoYtdAyQb1FAl4hdSkaiSiLQtLvwYYKU8
N/EpDkwdKN+iFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:44 2026 by rpki-client