Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: U6shIQDDz5Tzz3ACVW5N5uyjqcDMi0+JOhvQAr4U8PM=
Subject key identifier: 8C:7F:71:5B:68:F4:63:8A:88:A9:44:01:9B:19:C7:DA:AF:6D:EB:0C
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019D9B50B1E844ED36AC54E3BCC004746B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 179C
Signing time: Fri 17 Apr 2026 12:00:50 +0000
Manifest this update: Fri 17 Apr 2026 12:00:50 +0000
Manifest next update: Sat 18 Apr 2026 12:00:50 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: DevXIW4mdzp3TmI7z3s8EiFO7m7rplghpZBAs8H4lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b1:e8:44:ed:36:ac:54:e3:bc:c0:04:74:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Apr 17 12:00:50 2026 GMT
Not After : Apr 18 12:00:50 2026 GMT
Subject: CN=8c7f715b68f4638a88a944019b19c7daaf6deb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:98:49:ae:f3:48:81:2d:5b:0a:2a:dd:67:
22:7a:e2:cd:e4:f7:4d:41:92:8b:cd:75:f1:da:b7:
a0:ce:14:69:cd:dc:65:0a:dc:e5:56:c6:7b:dc:ec:
ee:95:bf:dd:e2:e7:ac:9c:5f:e7:20:4b:03:61:d4:
57:d2:b2:bd:14:c3:e9:43:68:7c:20:71:0f:ce:ac:
42:df:58:e0:8e:22:7b:83:29:87:70:95:5f:6e:ab:
c8:ee:0b:3e:e5:f2:a3:15:65:85:70:66:1a:a4:2f:
2f:ff:93:68:9f:31:84:fe:15:c6:0a:03:bb:dd:6e:
7b:b7:45:f6:cb:65:df:14:da:f7:f5:a7:72:95:d0:
45:43:2f:9b:45:b2:25:77:c0:f3:fa:9c:ed:03:b7:
7e:3a:53:63:25:a0:c8:1f:e3:8c:f7:ac:d0:1d:7f:
1e:21:f0:9b:5b:df:c7:65:b9:33:0a:e6:b6:48:d9:
29:b2:f5:ef:24:2d:0b:3e:eb:97:50:91:eb:8f:41:
66:45:ba:8a:83:4a:b1:f4:30:25:d2:e7:de:e8:92:
1e:b2:0a:99:16:f4:06:fc:2f:8a:75:a4:65:3c:4f:
6f:01:f2:50:d9:db:e2:58:03:cc:06:82:26:a7:0d:
48:d7:53:bf:1e:17:40:a6:b9:20:c0:45:8e:0f:03:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:71:5B:68:F4:63:8A:88:A9:44:01:9B:19:C7:DA:AF:6D:EB:0C
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:bb:87:9d:65:30:de:5f:95:76:35:c6:06:81:d0:36:ce:
be:0c:99:14:d0:17:b7:a5:4c:17:97:75:b0:90:11:c3:9a:a5:
2a:bb:54:fb:35:ea:ce:9f:48:6f:c1:90:36:47:e3:ce:88:d1:
f4:4b:64:57:2c:ac:2b:c4:81:f4:4e:dc:0d:83:57:01:84:08:
ac:f2:e9:d2:ee:6b:ef:d7:25:67:b9:2e:30:1a:0d:30:c6:23:
a7:45:b0:9e:0c:7b:65:21:4b:3f:8c:ac:3b:ad:35:18:74:26:
7b:6f:b9:63:43:e7:60:fb:3d:1a:ef:15:e4:d4:ad:e0:f3:da:
63:67:cf:85:a9:ce:d9:95:de:61:51:0e:bd:02:b4:07:99:06:
8c:d8:92:40:c3:8d:b9:78:2f:a8:c3:cf:73:dc:1d:21:95:6e:
28:65:4c:c6:f4:54:6f:67:6b:0a:29:99:03:58:e8:2f:33:28:
35:bf:df:8c:84:8e:f0:0d:c0:4c:ef:90:58:c8:00:1c:79:db:
e4:88:67:24:12:71:51:9f:2a:58:79:d4:b3:5c:d9:fa:f1:c6:
9c:c2:12:de:b0:a8:ef:50:56:1a:b0:41:0d:cc:67:e4:bd:6e:
2b:40:cc:4a:25:c4:b9:b5:2b:97:bb:23:a7:9a:a4:47:a7:4f:
4f:c5:10:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bULHoRO02rFTjvMAEdGsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjYwNDE3MTIwMDUwWhcNMjYwNDE4MTIwMDUwWjAzMTEwLwYDVQQD
Eyg4YzdmNzE1YjY4ZjQ2MzhhODhhOTQ0MDE5YjE5YzdkYWFmNmRlYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoKYSa7zSIEtWwoq3WcieuLN5PdN
QZKLzXXx2regzhRpzdxlCtzlVsZ73Ozulb/d4uesnF/nIEsDYdRX0rK9FMPpQ2h8
IHEPzqxC31jgjiJ7gymHcJVfbqvI7gs+5fKjFWWFcGYapC8v/5NonzGE/hXGCgO7
3W57t0X2y2XfFNr39adyldBFQy+bRbIld8Dz+pztA7d+OlNjJaDIH+OM96zQHX8e
IfCbW9/HZbkzCua2SNkpsvXvJC0LPuuXUJHrj0FmRbqKg0qx9DAl0ufe6JIesgqZ
FvQG/C+KdaRlPE9vAfJQ2dviWAPMBoImpw1I11O/HhdAprkgwEWODwOXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx/cVto9GOKiKlEAZsZx9qvbesMMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdq7h51l
MN5flXY1xgaB0DbOvgyZFNAXt6VMF5d1sJARw5qlKrtU+zXqzp9Ib8GQNkfjzojR
9EtkVyysK8SB9E7cDYNXAYQIrPLp0u5r79clZ7kuMBoNMMYjp0Wwngx7ZSFLP4ys
O601GHQme2+5Y0PnYPs9Gu8V5NSt4PPaY2fPhanO2ZXeYVEOvQK0B5kGjNiSQMON
uXgvqMPPc9wdIZVuKGVMxvRUb2drCimZA1joLzMoNb/fjISO8A3ATO+QWMgAHHnb
5IhnJBJxUZ8qWHnUs1zZ+vHGnMIS3rCo71BWGrBBDcxn5L1uK0DMSiXEubUrl7sj
p5qkR6dPT8UQ3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:34 2026 by rpki-client