Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: JOKewOylJqcPckA8OF0oIy4sNLEOUJiZ5Z9zvZW7owI=
Subject key identifier: 3C:A0:61:8C:D8:EF:75:84:61:8A:08:BA:85:2F:55:24:B8:8F:24:3F
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019D99CFD4345E6B099ECCD72580F3F75215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0F29
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: ajbPQ/FnZwUm76R7OCOG9bEYsAC5wQnnR9AVsnQ4hFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d4:34:5e:6b:09:9e:cc:d7:25:80:f3:f7:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=3ca0618cd8ef7584618a08ba852f5524b88f243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:b7:fb:ac:b1:aa:54:48:f4:c1:d4:1f:28:
8b:9c:5f:2d:e1:6e:ca:40:02:7d:31:c9:0e:9a:c3:
97:3c:ce:34:cd:41:bc:e8:09:af:eb:9f:54:b6:4d:
97:a6:87:ac:f9:cc:5b:7e:78:a9:df:7f:fe:65:2f:
47:82:fe:ff:ed:32:90:1c:96:fb:10:52:89:18:34:
4f:45:50:6e:ed:0a:3d:ec:72:6b:6f:50:63:4a:11:
b1:dc:36:73:a0:29:ff:ca:09:93:f6:4f:6d:fc:bd:
53:f4:73:35:0d:cc:b2:de:6c:b1:9d:4e:b5:65:c4:
78:4b:0f:d0:fa:19:32:11:02:6b:e8:d9:a1:5e:02:
02:53:47:fb:f3:4f:f9:ca:ad:b4:b9:e7:a9:02:38:
06:80:30:91:81:5f:2d:28:17:4e:3d:32:f6:83:71:
1f:b7:a0:9e:57:e3:ae:57:bf:eb:74:f4:24:d4:73:
7c:ff:8c:d0:76:e7:0e:62:a7:fc:81:dd:c9:9b:0a:
2f:b6:9f:ec:3a:d8:ab:f2:4d:65:c7:85:1b:01:4e:
31:9b:d4:b1:07:46:ac:ea:0c:60:ce:86:1e:26:55:
fe:59:91:ce:e5:e8:0b:af:fb:77:cc:9b:3f:c6:c4:
1b:28:e0:d8:16:07:3e:6f:33:61:e6:4d:24:5a:40:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:61:8C:D8:EF:75:84:61:8A:08:BA:85:2F:55:24:B8:8F:24:3F
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:6c:d3:6d:20:79:b1:3c:b4:c3:ca:ff:8e:02:60:d1:88:
55:c9:02:d2:a2:d8:13:96:ec:f6:52:f7:15:d9:8b:52:e2:c8:
60:a0:6d:f6:fb:bf:9a:91:e7:ab:54:8f:56:6b:35:77:5e:c5:
18:d9:a9:33:af:94:05:2b:07:b5:98:f8:4a:a5:e9:77:08:c6:
9c:12:89:8d:03:14:a5:b3:46:ba:59:50:44:5f:3c:83:82:c3:
5e:35:0e:7a:d6:7f:6c:4d:cb:33:dc:6b:f0:48:46:d9:a7:5d:
26:dc:c0:98:0c:bd:f7:64:54:dd:4c:2f:b4:67:7a:8b:52:c0:
e7:84:df:4d:50:3b:77:62:ea:e9:59:78:9f:5f:6d:fd:3b:71:
18:71:88:c6:7e:13:28:b0:b5:a7:d1:a8:05:06:e2:6d:dc:92:
10:ed:07:73:e0:17:03:7e:c1:a1:6e:aa:4a:ee:67:9d:da:6e:
ed:9c:2d:07:d2:80:df:c1:92:60:0b:4d:f5:07:78:0a:7a:7c:
72:7e:f7:66:c2:7d:5e:d3:1a:1d:89:a2:5d:a2:9f:84:8e:2f:
ab:ac:04:6c:9a:51:83:09:13:ff:ca:e0:65:8a:bc:b6:c3:18:
07:ed:a2:48:a6:36:24:35:31:ca:0a:36:ea:af:2b:a0:51:86:
8e:44:02:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9Q0XmsJnszXJYDz91IVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3
NDI5MTgwHhcNMjYwNDE3MDUwMDI3WhcNMjYwNDE4MDUwMDI3WjAzMTEwLwYDVQQD
EygzY2EwNjE4Y2Q4ZWY3NTg0NjE4YTA4YmE4NTJmNTUyNGI4OGYyNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiy3+6yxqlRI9MHUHyiLnF8t4W7K
QAJ9MckOmsOXPM40zUG86Amv659Utk2Xpoes+cxbfnip33/+ZS9Hgv7/7TKQHJb7
EFKJGDRPRVBu7Qo97HJrb1BjShGx3DZzoCn/ygmT9k9t/L1T9HM1Dcyy3myxnU61
ZcR4Sw/Q+hkyEQJr6NmhXgICU0f780/5yq20ueepAjgGgDCRgV8tKBdOPTL2g3Ef
t6CeV+OuV7/rdPQk1HN8/4zQducOYqf8gd3Jmwovtp/sOtir8k1lx4UbAU4xm9Sx
B0as6gxgzoYeJlX+WZHO5egLr/t3zJs/xsQbKODYFgc+bzNh5k0kWkAZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDygYYzY73WEYYoIuoUvVSS4jyQ/MB8GA1UdIwQY
MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt
Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1
LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgFs020g
ebE8tMPK/44CYNGIVckC0qLYE5bs9lL3FdmLUuLIYKBt9vu/mpHnq1SPVms1d17F
GNmpM6+UBSsHtZj4SqXpdwjGnBKJjQMUpbNGullQRF88g4LDXjUOetZ/bE3LM9xr
8EhG2addJtzAmAy992RU3UwvtGd6i1LA54TfTVA7d2Lq6Vl4n19t/TtxGHGIxn4T
KLC1p9GoBQbibdySEO0Hc+AXA37BoW6qSu5nndpu7ZwtB9KA38GSYAtN9Qd4Cnp8
cn73ZsJ9XtMaHYmiXaKfhI4vq6wEbJpRgwkT/8rgZYq8tsMYB+2iSKY2JDUxygo2
6q8roFGGjkQC4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:56 2026 by rpki-client