Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: Hc+W9vnKTz4tWp1CPSg2s9znjJdrEUAiDRuvJ7Kc6WU=
Subject key identifier: EA:F7:04:6E:3A:42:81:DE:52:96:4E:8C:90:4D:82:CF:B1:A2:6F:62
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019D9AE26EBF449A98B82302349348AA82CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 10:00:23 +0000
Manifest this update: Fri 17 Apr 2026 10:00:23 +0000
Manifest next update: Sat 18 Apr 2026 10:00:23 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: NfcciGjwEMgrsYNphFahJftnRGUtyZTitFgYC+u68uE=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:6e:bf:44:9a:98:b8:23:02:34:93:48:aa:82:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Apr 17 10:00:23 2026 GMT
Not After : Apr 18 10:00:23 2026 GMT
Subject: CN=eaf7046e3a4281de52964e8c904d82cfb1a26f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:fb:ef:8e:1a:63:66:72:d7:9b:d1:64:29:
02:64:bb:3f:46:07:1a:71:e0:a3:de:38:fc:b4:9f:
5b:33:db:a0:85:13:5e:07:d4:90:61:45:8a:60:1f:
82:58:a7:3a:eb:b7:15:7f:65:a9:1d:08:7f:00:c1:
af:5a:5b:a0:d0:ca:2d:5a:d5:9a:82:1c:1f:9f:8e:
e4:82:1a:73:a5:36:d9:70:e1:f6:f7:0b:a8:a8:d5:
3c:5e:f1:40:7a:08:83:7a:48:b0:7b:48:f9:00:77:
a6:5c:66:dc:80:24:58:11:32:b9:e8:8c:42:92:cf:
cd:92:8b:e5:ab:d1:f1:8c:08:c3:06:08:f0:62:bc:
e9:07:be:dd:8b:38:12:e9:d7:2f:1e:4d:48:e2:91:
98:fa:fd:25:8b:fb:0e:ed:47:f9:01:2f:56:3c:6d:
e3:ee:52:82:7a:50:e7:75:d4:8f:ab:ce:87:ff:95:
7a:1e:e6:9f:d9:40:1d:04:19:eb:6e:5f:06:c6:57:
d2:7f:ad:eb:7b:df:13:27:20:13:15:d6:8a:bc:7a:
3d:47:c7:1d:e1:56:24:7f:88:ef:46:40:73:37:6f:
ea:3e:d3:14:7f:ab:d4:9c:88:a7:93:bb:fc:d9:ec:
90:91:c2:2d:8f:86:95:c2:45:0d:e5:a3:9c:c5:b5:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:04:6E:3A:42:81:DE:52:96:4E:8C:90:4D:82:CF:B1:A2:6F:62
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:f8:4f:8d:cd:eb:5b:d5:7f:75:9f:8e:3a:f9:eb:5e:26:
9f:2c:35:ca:03:c4:16:83:99:7c:fd:9a:a1:10:8b:ed:89:41:
96:be:bc:eb:f7:75:56:a7:8c:e7:f6:e0:51:6e:87:dc:b1:19:
81:05:44:48:89:78:67:17:1d:3f:94:ba:d6:32:f8:d5:23:f1:
2b:04:c2:fe:75:77:c0:23:a4:f3:6a:bd:9b:f7:0a:48:d6:4f:
b8:46:75:69:a5:fe:c7:fc:8b:fc:2f:6a:3b:bd:9a:cf:5e:b4:
55:f2:de:5c:01:70:eb:dc:b3:41:6d:3c:a7:62:9d:d6:eb:e9:
86:fd:ab:6e:82:d7:ef:05:43:e8:ff:56:cf:90:9d:34:11:06:
03:c7:17:17:2e:07:27:04:64:8d:55:0f:e4:17:c5:00:1c:e8:
d1:27:c1:d9:13:a8:61:f2:6d:51:52:bb:30:84:71:4e:d4:03:
82:8c:80:0a:ef:7d:8e:c7:18:97:09:0a:19:c1:85:db:46:84:
cc:46:49:82:56:e7:03:50:f8:0d:58:0b:50:1e:ef:ba:e9:16:
52:65:29:cd:1c:19:49:d0:de:c0:79:48:e3:07:50:14:a1:fa:
a0:f7:88:7d:3e:4c:b7:fd:ef:ad:1e:8c:53:5c:72:37:66:92:
5f:91:b2:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4m6/RJqYuCMCNJNIqoLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj
YzcxODcwHhcNMjYwNDE3MTAwMDIzWhcNMjYwNDE4MTAwMDIzWjAzMTEwLwYDVQQD
EyhlYWY3MDQ2ZTNhNDI4MWRlNTI5NjRlOGM5MDRkODJjZmIxYTI2ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXz7744aY2Zy15vRZCkCZLs/Rgca
ceCj3jj8tJ9bM9ughRNeB9SQYUWKYB+CWKc667cVf2WpHQh/AMGvWlug0MotWtWa
ghwfn47kghpzpTbZcOH29wuoqNU8XvFAegiDekiwe0j5AHemXGbcgCRYETK56IxC
ks/Nkovlq9HxjAjDBgjwYrzpB77dizgS6dcvHk1I4pGY+v0li/sO7Uf5AS9WPG3j
7lKCelDnddSPq86H/5V6Huaf2UAdBBnrbl8GxlfSf63re98TJyATFdaKvHo9R8cd
4VYkf4jvRkBzN2/qPtMUf6vUnIink7v82eyQkcItj4aVwkUN5aOcxbVDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr3BG46QoHeUpZOjJBNgs+xom9iMB8GA1UdIwQY
MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt
YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz
LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDj4T43N
61vVf3Wfjjr5614mnyw1ygPEFoOZfP2aoRCL7YlBlr686/d1VqeM5/bgUW6H3LEZ
gQVESIl4ZxcdP5S61jL41SPxKwTC/nV3wCOk82q9m/cKSNZPuEZ1aaX+x/yL/C9q
O72az160VfLeXAFw69yzQW08p2Kd1uvphv2rboLX7wVD6P9Wz5CdNBEGA8cXFy4H
JwRkjVUP5BfFABzo0SfB2ROoYfJtUVK7MIRxTtQDgoyACu99jscYlwkKGcGF20aE
zEZJglbnA1D4DVgLUB7vuukWUmUpzRwZSdDewHlI4wdQFKH6oPeIfT5Mt/3vrR6M
U1xyN2aSX5GyYw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:14 2026 by rpki-client