Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: +MN5k2Mt7i+kUoB7YruNyQ0zU7WB80BPLUkUPzo5ilA=
Subject key identifier: 3B:49:71:8A:7E:98:64:73:36:0B:72:6F:82:13:32:4E:46:83:32:AB
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019D99D0AC7B134E3D59C1A3CD5D9FE4581C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 159C
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: 890zkilngtvF1RIQDggs5bWjI9LmvoH0giw8baGyv6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ac:7b:13:4e:3d:59:c1:a3:cd:5d:9f:e4:58:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=3b49718a7e986473360b726f8213324e468332ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:a5:ff:52:7e:41:a9:54:c7:5b:72:0b:20:
93:a0:ad:02:c6:7e:30:14:15:83:8b:66:e4:1b:39:
82:b9:9b:e6:e6:df:ab:a8:6a:7e:69:b7:11:df:51:
a6:5a:2d:f6:4f:4d:6d:57:cb:c6:57:8e:a7:ef:81:
f9:ed:51:f6:83:14:13:5b:ab:1d:17:39:96:7c:92:
f2:9d:7f:03:5b:ce:b3:45:a6:9e:da:b7:8e:94:bd:
ca:8f:fc:08:60:3f:60:08:ac:e4:c9:b4:f4:89:39:
5e:f8:4d:82:a1:f3:71:76:1b:6e:f7:5a:e7:b4:f4:
1d:8c:d4:33:da:92:e8:ce:00:8b:fe:89:14:18:32:
60:2c:88:fa:49:63:36:d0:b3:68:76:ce:02:1e:30:
fc:f2:3c:11:13:1d:e4:68:d9:c5:10:b9:d2:ff:84:
33:c2:27:a4:8f:db:5d:9e:a6:61:41:d7:1b:5e:19:
13:38:f8:e6:92:4f:d2:c3:58:42:f9:74:ca:0b:b1:
e7:e7:44:c0:6d:83:ec:24:64:c4:1e:75:e7:76:f7:
a8:16:48:9a:75:21:85:46:d2:17:f1:80:16:db:e9:
bd:9c:ce:01:bd:a5:54:ef:31:cf:4d:f5:e4:83:dc:
1c:2a:fd:d9:1a:09:b3:40:db:ba:22:36:9f:09:2b:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:71:8A:7E:98:64:73:36:0B:72:6F:82:13:32:4E:46:83:32:AB
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:06:48:33:76:28:22:81:99:bd:8b:71:46:c2:b3:50:6b:
3d:cd:c3:0e:74:01:83:c3:a9:6e:25:22:72:0d:3a:c8:db:d2:
9b:75:c5:b0:60:2b:30:24:ef:3c:0c:d9:97:31:24:ea:e6:e9:
7e:0a:3f:f2:39:e6:b3:d6:2e:36:f1:ab:9a:93:05:61:b2:a9:
1d:39:a1:bf:8c:9a:92:22:79:05:46:f9:0d:ac:7c:b2:53:2b:
4b:26:44:82:16:5d:c7:44:4c:28:79:b7:82:8d:a1:45:b1:cb:
82:98:c0:28:b0:d6:e3:43:c2:84:b6:8d:c8:9d:1c:89:dc:8b:
6d:e6:98:31:43:e0:9f:00:49:8b:e3:9d:20:03:a8:ca:7f:37:
c7:d6:6d:45:24:19:66:34:4a:47:30:7c:54:ce:ea:35:3e:a7:
bd:c0:74:74:4f:54:7e:c6:eb:d0:77:1d:cf:07:20:79:97:48:
a1:96:da:c5:6a:d5:1e:44:24:1f:82:ca:d1:44:ab:03:50:95:
67:a5:f9:7f:c9:5c:b4:c7:6c:0c:9f:29:db:ec:b9:62:3b:05:
e0:7e:3f:5d:e3:25:07:35:99:b1:28:d2:22:43:35:90:27:27:
b3:2f:72:ad:35:a0:54:7c:3d:79:5a:b8:bc:e7:e8:89:5e:e0:
d9:73:c2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Kx7E049WcGjzV2f5FgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNGYwYjlhNWZlMDM4OWZhZGNiYmZiMWZhMWM0MGM0YTRi
YTBkMmIwHhcNMjYwNDE3MDUwMTIyWhcNMjYwNDE4MDUwMTIyWjAzMTEwLwYDVQQD
EygzYjQ5NzE4YTdlOTg2NDczMzYwYjcyNmY4MjEzMzI0ZTQ2ODMzMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBml/1J+QalUx1tyCyCToK0Cxn4w
FBWDi2bkGzmCuZvm5t+rqGp+abcR31GmWi32T01tV8vGV46n74H57VH2gxQTW6sd
FzmWfJLynX8DW86zRaae2reOlL3Kj/wIYD9gCKzkybT0iTle+E2CofNxdhtu91rn
tPQdjNQz2pLozgCL/okUGDJgLIj6SWM20LNods4CHjD88jwREx3kaNnFELnS/4Qz
wiekj9tdnqZhQdcbXhkTOPjmkk/Sw1hC+XTKC7Hn50TAbYPsJGTEHnXndveoFkia
dSGFRtIX8YAW2+m9nM4BvaVU7zHPTfXkg9wcKv3ZGgmzQNu6IjafCSvbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtJcYp+mGRzNgtyb4ITMk5GgzKrMB8GA1UdIwQY
MBaAFAxPC5pf4Difrcu/sfocQMSkug0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMt
ZjYwNmFjZTRhY2MyLzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS85MGJhMTctMDlkYy00YjdkLWE0NTMtZjYwNmFjZTRhY2My
LzEvREU4TG1sX2dPSi10eTcteC1oeEF4S1M2RFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLoGSDN2
KCKBmb2LcUbCs1BrPc3DDnQBg8OpbiUicg06yNvSm3XFsGArMCTvPAzZlzEk6ubp
fgo/8jnms9YuNvGrmpMFYbKpHTmhv4yakiJ5BUb5Dax8slMrSyZEghZdx0RMKHm3
go2hRbHLgpjAKLDW40PChLaNyJ0cidyLbeaYMUPgnwBJi+OdIAOoyn83x9ZtRSQZ
ZjRKRzB8VM7qNT6nvcB0dE9Ufsbr0HcdzwcgeZdIoZbaxWrVHkQkH4LK0USrA1CV
Z6X5f8lctMdsDJ8p2+y5YjsF4H4/XeMlBzWZsSjSIkM1kCcnsy9yrTWgVHw9eVq4
vOfoiV7g2XPC1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:41 2026 by rpki-client