Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier: vIiZHKvhEWzUPsT92eTiTD11hxGHOk3025ks0LI7tf4=
Subject key identifier: B8:81:10:99:A6:DD:F7:05:62:E4:75:55:82:06:D0:A9:12:2C:98:9C
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial: 019D9C2D5918CED609C8ECE1A06464F18B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number: 022F
Signing time: Fri 17 Apr 2026 16:01:50 +0000
Manifest this update: Fri 17 Apr 2026 16:01:50 +0000
Manifest next update: Sat 18 Apr 2026 16:01:50 +0000
Files and hashes: 1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: x1crowshB4ORCN/6tZZ0mfHLd+NHTZ7S22n7AMRrE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:59:18:ce:d6:09:c8:ec:e1:a0:64:64:f1:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
Validity
Not Before: Apr 17 16:01:50 2026 GMT
Not After : Apr 18 16:01:50 2026 GMT
Subject: CN=b8811099a6ddf70562e475558206d0a9122c989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:0d:19:d9:dd:3d:35:6c:dd:0a:fa:ec:d8:
16:41:26:ee:a9:03:79:38:cb:0c:bc:1a:1e:0d:93:
f0:92:93:99:95:8e:65:86:d8:26:49:f3:3a:f5:f4:
a6:33:d1:92:61:69:2a:74:98:e4:13:3c:e1:67:d7:
8c:89:43:76:04:61:c2:9c:50:99:6a:fa:89:86:f9:
47:f2:33:82:eb:74:f7:76:4b:3f:68:88:6f:f8:9e:
71:fc:ab:2a:e1:c8:c3:71:51:e1:28:b2:88:d1:f2:
6f:72:0a:4c:bb:0c:69:44:f1:f4:4b:4a:18:41:e4:
40:96:0d:eb:53:75:e5:ca:35:a4:e0:bb:82:a8:d2:
1a:a7:0f:01:c7:6f:00:14:71:c7:a7:9c:a0:5b:6e:
dd:03:ef:48:64:f7:57:aa:74:ea:e5:4c:b4:2b:70:
20:68:92:83:4d:70:b3:99:91:21:d6:7c:df:ea:f7:
3a:6c:26:d0:c8:1b:70:b0:56:1a:b7:5f:84:49:5a:
af:39:4a:8b:9e:3a:cd:6c:40:6f:9c:3a:dd:a5:15:
5f:ce:8a:34:7c:37:cb:43:e2:16:1a:d9:b5:17:32:
2f:07:fb:fd:e8:ec:25:fc:47:08:b5:21:eb:08:3b:
48:0e:c5:53:ce:e2:52:57:3c:9b:71:7f:a3:30:97:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:10:99:A6:DD:F7:05:62:E4:75:55:82:06:D0:A9:12:2C:98:9C
X509v3 Authority Key Identifier:
keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:07:52:d0:1a:cd:53:f8:54:d7:74:77:21:ac:59:09:d8:67:
f9:cf:09:a2:6d:88:8c:9b:37:10:44:5f:16:f5:c6:9d:3c:b3:
c1:16:2b:8d:26:e8:52:9a:25:cb:63:5e:e0:02:bb:99:75:10:
2d:99:a5:2b:3b:46:10:c9:cd:d4:3e:99:1a:75:f0:34:29:2f:
fc:9a:12:08:be:20:95:02:29:71:07:9e:17:55:28:11:04:86:
5a:cf:0d:23:29:ba:ba:51:35:f9:bd:c6:20:08:3b:f9:4a:39:
07:ae:8f:49:97:79:c7:71:8f:fa:bd:3e:37:ec:ac:13:be:2c:
6c:ca:89:e9:98:b2:4f:13:c1:1f:3a:98:c2:5c:7d:35:c2:61:
d3:a5:0e:08:cd:8b:83:da:52:f9:79:d1:ef:0a:dc:27:6d:9c:
2f:24:14:a4:80:95:65:8c:5f:fb:64:8d:30:ba:11:71:82:36:
d1:3c:15:c7:e6:03:fa:d1:0b:e0:7b:45:8d:32:1e:e9:aa:a3:
2f:f6:b5:f9:6b:93:35:33:11:3e:57:68:7d:de:43:cd:d8:a1:
4a:2d:18:06:99:c5:93:b4:d4:c8:43:83:2b:e6:f4:4b:82:2a:
16:19:09:0b:10:26:6e:76:ae:57:11:f5:09:2c:73:a6:bd:d0:
19:04:e1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLVkYztYJyOzhoGRk8YuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw
NDllMzYwHhcNMjYwNDE3MTYwMTUwWhcNMjYwNDE4MTYwMTUwWjAzMTEwLwYDVQQD
EyhiODgxMTA5OWE2ZGRmNzA1NjJlNDc1NTU4MjA2ZDBhOTEyMmM5ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq8NGdndPTVs3Qr67NgWQSbuqQN5
OMsMvBoeDZPwkpOZlY5lhtgmSfM69fSmM9GSYWkqdJjkEzzhZ9eMiUN2BGHCnFCZ
avqJhvlH8jOC63T3dks/aIhv+J5x/Ksq4cjDcVHhKLKI0fJvcgpMuwxpRPH0S0oY
QeRAlg3rU3XlyjWk4LuCqNIapw8Bx28AFHHHp5ygW27dA+9IZPdXqnTq5Uy0K3Ag
aJKDTXCzmZEh1nzf6vc6bCbQyBtwsFYat1+ESVqvOUqLnjrNbEBvnDrdpRVfzoo0
fDfLQ+IWGtm1FzIvB/v96Owl/EcItSHrCDtIDsVTzuJSVzybcX+jMJeazwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiBEJmm3fcFYuR1VYIG0KkSLJicMB8GA1UdIwQY
MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt
NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi
LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQdS0BrN
U/hU13R3IaxZCdhn+c8Jom2IjJs3EERfFvXGnTyzwRYrjSboUpoly2Ne4AK7mXUQ
LZmlKztGEMnN1D6ZGnXwNCkv/JoSCL4glQIpcQeeF1UoEQSGWs8NIym6ulE1+b3G
IAg7+Uo5B66PSZd5x3GP+r0+N+ysE74sbMqJ6ZiyTxPBHzqYwlx9NcJh06UOCM2L
g9pS+XnR7wrcJ22cLyQUpICVZYxf+2SNMLoRcYI20TwVx+YD+tEL4HtFjTIe6aqj
L/a1+WuTNTMRPldofd5DzdihSi0YBpnFk7TUyEODK+b0S4IqFhkJCxAmbnauVxH1
CSxzpr3QGQThVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:07 2026 by rpki-client