
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: Ib/S13/zH52CYuU0QEIM2D+6NRTdJvswK7bIzfRafm0=
Subject key identifier: E7:56:3C:5E:02:B2:91:11:0E:10:2F:77:31:25:8B:FE:4E:BD:86:FA
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 019D9A3EBD75CB67B8E292A5A0C82A58BAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: QKjP2N8r4nDoEM9cPJ71JOp2ddU.roa (hash: W/BKNtYHRWaJtO1Nu7XJOX8Q45kPzU4r+lT7o1huThQ=)
2: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: K/4PqfetZQBcz36msMBqCwM6F6vHNbCcbwYf244JVg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bd:75:cb:67:b8:e2:92:a5:a0:c8:2a:58:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=e7563c5e02b291110e102f7731258bfe4ebd86fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:68:5d:6f:f4:cc:bc:24:d1:ea:f9:5d:b0:
dd:e4:37:19:b4:64:2a:a1:e2:46:8b:1d:62:0e:e0:
7d:8d:1f:c4:52:97:fc:25:f1:dd:a8:ce:21:b3:6e:
9e:32:25:ab:51:72:19:a2:fa:cd:6d:1c:2a:dc:a0:
c1:9a:b0:6b:91:e1:20:9b:1b:49:14:99:3d:eb:de:
b7:1e:95:26:f5:ce:e1:06:1e:7f:85:67:88:a9:77:
82:0c:3d:91:b1:f3:2d:25:8c:d6:d3:5f:fb:7e:45:
11:e2:c5:c7:bc:59:c5:0d:8a:a7:7d:92:25:7e:ea:
09:ba:72:a9:ff:d8:b9:36:a2:e5:db:12:d8:d1:42:
fd:af:ae:55:fb:bb:b6:b8:7a:b5:cd:e6:f0:45:ed:
92:21:ea:69:47:dd:f0:bb:a5:7d:ab:fb:0b:59:f3:
ca:61:75:0c:af:ad:b9:1e:88:69:b5:a0:32:45:63:
dd:ea:83:e5:4f:6c:a8:c4:a4:c6:3a:fb:d5:a4:2d:
47:2f:71:04:27:ad:69:04:13:7f:61:5b:00:ba:48:
27:f9:cf:56:75:b8:b1:0d:84:9d:af:73:44:fa:f9:
08:31:bc:af:57:bd:9d:cd:a4:6b:67:b4:a1:10:00:
11:75:34:03:6f:b3:8b:ca:85:bd:c6:d3:e8:cd:6d:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:3C:5E:02:B2:91:11:0E:10:2F:77:31:25:8B:FE:4E:BD:86:FA
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:46:43:7c:47:f1:ed:65:2f:51:a4:f0:61:86:d5:89:fb:7c:
98:4d:c6:4e:21:b0:3a:e4:6d:03:0b:28:16:46:62:f8:0f:d5:
f7:b7:0d:63:cc:8f:1e:cb:92:7f:82:af:ff:c4:67:61:54:f7:
d3:ad:bf:b7:77:a7:4b:c6:10:99:61:dc:b7:3b:8e:1a:e0:a6:
ce:aa:dd:3d:ad:e9:9e:75:44:d3:22:a7:fe:80:44:9d:6f:66:
3d:c5:e5:2c:94:cf:8b:ae:79:5f:87:dd:98:b9:ca:55:04:43:
fc:1c:7c:00:95:02:b9:e9:63:c6:7a:34:93:ea:84:f7:09:de:
bd:ae:71:08:11:0d:29:f7:77:be:51:1d:cf:51:12:7c:3e:d2:
8f:ad:a9:19:43:31:41:2b:37:38:75:c9:bf:1d:a3:86:a1:fd:
a4:8e:09:f4:3b:6b:8f:d4:fd:20:79:9a:4c:8e:85:0f:4c:a3:
d5:ca:36:78:50:c4:9b:a8:22:da:9e:4e:08:a8:09:91:81:d1:
ef:d4:fa:d0:05:78:d8:ff:39:2d:59:ca:97:6e:ef:2f:0f:e1:
05:01:e9:bc:c6:0a:0f:e5:df:43:73:8f:53:83:9b:1c:56:ea:
b0:23:2f:c1:9c:58:ac:31:4e:6e:45:0a:43:5f:ad:c0:a9:97:
22:66:72:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPr11y2e44pKloMgqWLqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWVmNDBmYWY0ODM0MzNiM2UzMzY5OGU0ZDFlZTk1ZjNj
OTRiZWMwHhcNMjYwNDE3MDcwMTM2WhcNMjYwNDE4MDcwMTM2WjAzMTEwLwYDVQQD
EyhlNzU2M2M1ZTAyYjI5MTExMGUxMDJmNzczMTI1OGJmZTRlYmQ4NmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvZoXW/0zLwk0er5XbDd5DcZtGQq
oeJGix1iDuB9jR/EUpf8JfHdqM4hs26eMiWrUXIZovrNbRwq3KDBmrBrkeEgmxtJ
FJk96963HpUm9c7hBh5/hWeIqXeCDD2RsfMtJYzW01/7fkUR4sXHvFnFDYqnfZIl
fuoJunKp/9i5NqLl2xLY0UL9r65V+7u2uHq1zebwRe2SIeppR93wu6V9q/sLWfPK
YXUMr625HohptaAyRWPd6oPlT2yoxKTGOvvVpC1HL3EEJ61pBBN/YVsAukgn+c9W
dbixDYSdr3NE+vkIMbyvV72dzaRrZ7ShEAARdTQDb7OLyoW9xtPozW0KwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdWPF4CspERDhAvdzEli/5OvYb6MB8GA1UdIwQY
MBaAFFNe9A+vSDQzs+M2mOTR7pXzyUvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2Yt
N2MzNzg5NDA1YmQ2LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2YtN2MzNzg5NDA1YmQ2
LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEZDfEfx
7WUvUaTwYYbVift8mE3GTiGwOuRtAwsoFkZi+A/V97cNY8yPHsuSf4Kv/8RnYVT3
062/t3enS8YQmWHctzuOGuCmzqrdPa3pnnVE0yKn/oBEnW9mPcXlLJTPi655X4fd
mLnKVQRD/Bx8AJUCueljxno0k+qE9wneva5xCBENKfd3vlEdz1ESfD7Sj62pGUMx
QSs3OHXJvx2jhqH9pI4J9Dtrj9T9IHmaTI6FD0yj1co2eFDEm6gi2p5OCKgJkYHR
79T60AV42P85LVnKl27vLw/hBQHpvMYKD+XfQ3OPU4ObHFbqsCMvwZxYrDFObkUK
Q1+twKmXImZysw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:45 2026 by rpki-client