Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
File: 1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json)
Hash identifier: +KtrC4GsU7Cw0wFTBfqqc8st20zGvMx0XcyfNiBFb+Y=
Subject key identifier: 97:CB:45:FB:7B:6C:DB:5D:CD:08:66:CD:BF:7D:69:5E:08:89:42:18
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial: 019D9C2C7C884DC97620E568A2D9E3E15F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
Manifest number: 0128
Signing time: Fri 17 Apr 2026 16:00:54 +0000
Manifest this update: Fri 17 Apr 2026 16:00:54 +0000
Manifest next update: Sat 18 Apr 2026 16:00:54 +0000
Files and hashes: 1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: fQr3NgnoCJ9gMR4RdYFRUnY1EuP+M6mS55qDn4v7y1Y=)
2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=)
3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:7c:88:4d:c9:76:20:e5:68:a2:d9:e3:e1:5f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Validity
Not Before: Apr 17 16:00:54 2026 GMT
Not After : Apr 18 16:00:54 2026 GMT
Subject: CN=97cb45fb7b6cdb5dcd0866cdbf7d695e08894218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:af:8e:3c:2a:5e:b7:0c:e1:9f:1a:0a:c4:
32:f9:3b:3b:13:f5:b8:be:9a:0f:9e:d8:27:54:12:
b8:82:a5:c7:df:e8:ad:4d:b8:28:9f:e3:da:c1:54:
0e:3f:b9:0a:21:0e:10:59:72:06:32:ce:d0:ec:74:
bf:2b:5a:22:f0:c4:79:30:2f:76:51:75:47:89:77:
f8:a4:f5:0b:15:bc:ff:c0:d6:b4:e5:97:3e:a4:29:
ef:6a:f0:3d:78:84:95:3c:5d:81:74:01:c7:2f:37:
4b:7b:a3:a9:5a:50:65:ad:8a:b5:5a:11:fe:2a:95:
36:ec:78:39:4c:ac:e6:ea:d7:64:66:50:a3:80:33:
68:38:8b:ec:c0:9e:13:fe:ef:2a:46:f3:f8:71:be:
e8:39:81:c9:de:d2:4d:e8:c6:ac:e6:b2:27:64:8c:
13:b5:54:43:1c:30:f9:4c:ad:f3:e5:c5:f3:f5:1b:
23:5d:66:12:87:0c:fc:cd:80:12:9b:33:eb:87:90:
32:e3:d4:8d:99:93:9c:01:40:fc:ea:fe:f8:59:44:
18:da:19:49:20:68:e9:65:c5:03:19:30:63:50:4d:
65:61:b4:ad:1c:ad:99:72:2e:78:47:19:25:a2:08:
21:be:f7:bb:6b:fb:a1:1d:84:cd:4a:ce:3e:93:8b:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:45:FB:7B:6C:DB:5D:CD:08:66:CD:BF:7D:69:5E:08:89:42:18
X509v3 Authority Key Identifier:
keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:12:db:ae:63:9a:38:5b:a5:a7:75:28:bb:f5:eb:9e:a9:7a:
99:7d:40:69:64:dc:60:dc:3a:c2:b1:0d:2d:9a:37:27:a2:4b:
c4:75:cf:fb:b7:3d:6b:c3:2a:09:a7:ab:3b:fd:3b:ba:24:be:
20:c6:45:a7:e3:90:2e:c6:91:47:ed:80:af:68:02:37:55:c3:
a3:30:86:75:7e:39:32:16:ce:87:5b:7c:c6:53:47:7b:a3:7a:
33:07:2d:87:bd:83:2d:a1:58:0f:25:b4:72:09:ba:ed:ef:70:
d1:c1:f5:56:5b:db:ee:5a:dc:48:05:86:9c:50:cf:c7:b4:5a:
13:74:f8:4a:76:58:3f:fa:f4:4a:35:09:1b:58:53:c4:d2:51:
6e:78:21:9d:cb:91:a7:5f:c7:25:c6:e1:6b:2f:72:ba:a1:20:
31:2e:61:b5:5b:cf:ae:38:c6:75:9c:36:00:18:8e:96:b4:6e:
5c:74:c0:2b:5e:7f:26:f5:ae:94:38:de:72:47:24:28:5b:d6:
d8:a1:63:db:29:db:c5:5a:6c:c4:82:75:b6:d4:c7:b6:a0:cc:
cf:8f:f4:7a:6d:d4:bc:de:88:65:57:3d:cb:10:54:bc:b8:f6:
de:b8:ac:da:fa:d5:6f:0d:59:08:3c:f0:17:d9:8a:a5:c0:3f:
cd:a3:8f:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2cLHyITcl2IOVootnj4V8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDAyNTIwOGM4NTY4Y2U4ZTU4ZGUxYWU3ZDgzZWY4ZDJi
Mjc0MjQwHhcNMjYwNDE3MTYwMDU0WhcNMjYwNDE4MTYwMDU0WjAzMTEwLwYDVQQD
Eyg5N2NiNDVmYjdiNmNkYjVkY2QwODY2Y2RiZjdkNjk1ZTA4ODk0MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7SvjjwqXrcM4Z8aCsQy+Ts7E/W4
vpoPntgnVBK4gqXH3+itTbgon+PawVQOP7kKIQ4QWXIGMs7Q7HS/K1oi8MR5MC92
UXVHiXf4pPULFbz/wNa05Zc+pCnvavA9eISVPF2BdAHHLzdLe6OpWlBlrYq1WhH+
KpU27Hg5TKzm6tdkZlCjgDNoOIvswJ4T/u8qRvP4cb7oOYHJ3tJN6Mas5rInZIwT
tVRDHDD5TK3z5cXz9RsjXWYShwz8zYASmzPrh5Ay49SNmZOcAUD86v74WUQY2hlJ
IGjpZcUDGTBjUE1lYbStHK2Zci54Rxklogghvve7a/uhHYTNSs4+k4tj3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJfLRft7bNtdzQhmzb99aV4IiUIYMB8GA1UdIwQY
MBaAFPhAJSCMhWjOjljeGufYPvjSsnQkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FQWxJSXlGYU02T1dONGE1OWctLU5LeWRDUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5
LWVmZWE2NWRjMzAyMC8xLzEtRUFsSUl5RmFNNk9XTjRhNTlnLS1OS3lkQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ2L2NhZGQ2ZS02NWM2LTQ0ZGEtOWVlOS1lZmVhNjVkYzMw
MjAvMS8xLUVBbElJeUZhTTZPV040YTU5Zy0tTkt5ZENRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBLb
rmOaOFulp3Uou/Xrnql6mX1AaWTcYNw6wrENLZo3J6JLxHXP+7c9a8MqCaerO/07
uiS+IMZFp+OQLsaRR+2Ar2gCN1XDozCGdX45MhbOh1t8xlNHe6N6Mwcth72DLaFY
DyW0cgm67e9w0cH1Vlvb7lrcSAWGnFDPx7RaE3T4SnZYP/r0SjUJG1hTxNJRbngh
ncuRp1/HJcbhay9yuqEgMS5htVvPrjjGdZw2ABiOlrRuXHTAK15/JvWulDjeckck
KFvW2KFj2ynbxVpsxIJ1ttTHtqDMz4/0em3UvN6IZVc9yxBUvLj23ris2vrVbw1Z
CDzwF9mKpcA/zaOPlg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:50 2026 by rpki-client