Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: giEBfydR2cc0PlCe6J8AxCdkPYTXJuKpGW7UxoD3d0Q=
Subject key identifier: 8B:CC:1A:31:E9:14:3D:D1:EA:22:8C:F9:49:A8:E2:7A:15:33:55:58
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019D9AAC4E5304D6257BE52A3D7CD1F74B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:01:16 +0000
Manifest this update: Fri 17 Apr 2026 09:01:16 +0000
Manifest next update: Sat 18 Apr 2026 09:01:16 +0000
Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: /0ixLp5uGzwCc3s/z+kid5oMH9snFKFQCjxj6leTe1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:4e:53:04:d6:25:7b:e5:2a:3d:7c:d1:f7:4b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Apr 17 09:01:16 2026 GMT
Not After : Apr 18 09:01:16 2026 GMT
Subject: CN=8bcc1a31e9143dd1ea228cf949a8e27a15335558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:1d:4e:f1:5c:fc:78:48:d1:dc:53:0f:b2:
98:22:ad:2a:cc:0f:84:97:c6:73:0e:3e:58:54:be:
44:e4:a9:8d:db:85:14:93:59:b4:b0:b1:d0:6b:60:
71:91:84:91:b5:b1:e7:d4:86:e0:fb:b5:18:86:cb:
6d:ea:7d:f7:e7:04:c2:a6:9f:a1:9c:c6:09:40:d7:
f7:72:88:4a:c6:ec:03:f5:22:51:f8:c4:55:cf:4e:
a9:6b:74:37:70:4c:86:98:87:72:25:dc:3e:a7:07:
77:c6:92:8d:1b:2a:b6:fe:1a:d0:65:f6:e2:32:11:
6c:01:e3:1c:2e:e3:0e:03:97:9f:2f:b6:06:ab:2c:
4a:44:b4:56:f2:70:c7:41:4c:a4:70:b3:2a:99:38:
6c:8d:79:9b:6e:dd:b5:c9:82:fb:62:ba:c9:31:da:
c4:3e:d3:c6:1e:68:d9:6a:56:50:4c:14:55:4f:3f:
55:32:45:8a:c9:91:ac:72:d6:eb:fb:2f:1b:15:44:
88:8d:ed:93:a1:0d:7f:0a:02:5f:5c:51:dc:fe:5c:
bd:fa:45:a2:7a:be:62:ac:a1:11:c8:c8:cc:25:16:
12:b5:b3:9c:94:3e:18:26:9c:74:85:cc:c1:2a:04:
31:f4:ba:ab:74:62:d6:76:4b:b0:49:d4:e0:c5:e8:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CC:1A:31:E9:14:3D:D1:EA:22:8C:F9:49:A8:E2:7A:15:33:55:58
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:78:c7:b0:5e:82:3b:51:85:91:ab:62:98:f6:96:64:3e:2f:
91:9f:21:2e:a7:5c:09:32:4c:71:f4:4e:54:af:1d:5d:f4:7e:
6f:1c:11:b8:9e:e9:d1:bc:03:0d:fd:18:98:b4:ec:08:bc:80:
f6:82:6b:80:34:ea:dc:05:25:3f:31:36:82:6f:9f:ce:58:13:
1e:34:4e:ce:a7:33:ea:de:67:04:79:d8:25:46:5e:5e:80:b9:
a3:a7:1e:b6:3f:2a:63:d4:af:8a:14:9b:ba:eb:bf:1f:91:ab:
43:13:fb:59:de:56:a8:f7:4a:3b:c6:fd:79:45:a3:b7:60:66:
ac:7b:5e:b2:f8:1c:38:81:fa:fb:13:92:6b:f5:aa:85:2d:f9:
6b:88:98:92:5a:c1:e9:4a:d9:e5:b4:9b:ff:da:6e:29:f2:99:
a2:06:2d:ce:b3:6a:ad:56:07:b0:5c:63:f7:45:8a:a4:37:c8:
42:f8:94:e2:c7:86:26:ae:3c:b9:9d:5f:bb:c6:a4:41:86:df:
1d:5a:63:93:9e:52:b9:b6:3a:ac:de:ed:99:f1:03:9f:42:9b:
45:18:a2:91:78:14:61:bf:da:b2:b3:b4:05:ea:75:ee:87:a0:
a1:9d:e9:3d:33:f5:2d:10:58:71:85:70:8f:2e:ac:8f:fe:d4:
9c:40:cd:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arE5TBNYle+UqPXzR90tFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx
NTQyOTMwHhcNMjYwNDE3MDkwMTE2WhcNMjYwNDE4MDkwMTE2WjAzMTEwLwYDVQQD
Eyg4YmNjMWEzMWU5MTQzZGQxZWEyMjhjZjk0OWE4ZTI3YTE1MzM1NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkAdTvFc/HhI0dxTD7KYIq0qzA+E
l8ZzDj5YVL5E5KmN24UUk1m0sLHQa2BxkYSRtbHn1Ibg+7UYhstt6n335wTCpp+h
nMYJQNf3cohKxuwD9SJR+MRVz06pa3Q3cEyGmIdyJdw+pwd3xpKNGyq2/hrQZfbi
MhFsAeMcLuMOA5efL7YGqyxKRLRW8nDHQUykcLMqmThsjXmbbt21yYL7YrrJMdrE
PtPGHmjZalZQTBRVTz9VMkWKyZGsctbr+y8bFUSIje2ToQ1/CgJfXFHc/ly9+kWi
er5irKERyMjMJRYStbOclD4YJpx0hczBKgQx9LqrdGLWdkuwSdTgxeiNsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvMGjHpFD3R6iKM+Umo4noVM1VYMB8GA1UdIwQY
MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt
NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk
LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnjHsF6C
O1GFkatimPaWZD4vkZ8hLqdcCTJMcfROVK8dXfR+bxwRuJ7p0bwDDf0YmLTsCLyA
9oJrgDTq3AUlPzE2gm+fzlgTHjROzqcz6t5nBHnYJUZeXoC5o6cetj8qY9SvihSb
uuu/H5GrQxP7Wd5WqPdKO8b9eUWjt2BmrHtesvgcOIH6+xOSa/WqhS35a4iYklrB
6UrZ5bSb/9puKfKZogYtzrNqrVYHsFxj90WKpDfIQviU4seGJq48uZ1fu8akQYbf
HVpjk55SubY6rN7tmfEDn0KbRRiikXgUYb/asrO0Bep17oegoZ3pPTP1LRBYcYVw
jy6sj/7UnEDNlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:18 2026 by rpki-client