Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: OnLyiIJQgHAIl/cBFPrcU1/PpwrFsMN7UQilsuIzNLU=
Subject key identifier: 1C:E7:4F:DD:99:F3:59:B8:C8:79:BD:E1:8C:BB:C4:32:8B:77:3C:89
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019DA3412709D783C8B141568120B293A969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1613
Signing time: Sun 19 Apr 2026 01:00:48 +0000
Manifest this update: Sun 19 Apr 2026 01:00:48 +0000
Manifest next update: Mon 20 Apr 2026 01:00:48 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: kDQpENteEiueNlaQC5UP/0B3WeZPeOYPIWrxujO2Prw=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:27:09:d7:83:c8:b1:41:56:81:20:b2:93:a9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Apr 19 01:00:48 2026 GMT
Not After : Apr 20 01:00:48 2026 GMT
Subject: CN=1ce74fdd99f359b8c879bde18cbbc4328b773c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:d6:b6:22:b2:01:a1:5c:ca:6e:a5:67:cb:
9f:59:45:f2:07:b0:ec:2b:d4:57:7c:76:45:41:fd:
b9:f8:cb:1c:eb:db:44:56:61:fe:94:17:0d:02:81:
e8:d4:0d:80:23:9b:3f:6d:15:1d:2b:c4:2c:42:31:
34:c5:ba:8c:a7:23:8e:22:4c:69:47:0b:87:6f:a7:
65:fe:27:c8:c4:c1:47:a4:ed:c3:f6:55:e8:9f:f8:
53:ae:dd:32:f8:76:cb:b4:e0:ff:4c:7e:6f:0e:7b:
38:74:3b:63:b8:9e:7e:58:34:6c:86:31:e0:1d:67:
b5:ef:d6:7e:0b:fd:db:ae:b2:4a:f3:52:77:a0:45:
27:ad:1c:91:4d:95:54:18:39:22:e7:b0:b4:47:0f:
7b:13:64:4f:e1:df:be:5b:c1:ce:ef:3b:06:16:aa:
f0:3b:87:bb:ca:e2:91:b7:51:0a:28:0f:42:fd:c7:
52:c5:f8:bd:76:1f:24:91:c3:09:3d:8d:e1:00:0e:
3a:f8:01:cb:9f:e9:73:25:26:88:52:4f:35:5b:89:
57:18:91:09:a8:d7:17:cc:49:02:46:a5:ea:6f:c0:
48:a2:20:b6:59:9d:9d:10:da:ea:c7:d0:07:ea:80:
9d:34:ca:99:52:74:d2:0e:b4:e4:2d:51:6b:ab:d1:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:4F:DD:99:F3:59:B8:C8:79:BD:E1:8C:BB:C4:32:8B:77:3C:89
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f7:49:2e:51:b2:d4:71:a3:81:f5:2a:e9:57:f1:87:c2:74:
7f:37:c9:71:fa:26:c1:7a:7b:43:5f:da:59:ed:8d:c4:0b:0b:
a3:1e:f6:2b:77:ec:33:cb:14:ec:a8:ce:aa:ee:bd:61:0b:3f:
82:a1:18:3e:49:25:c1:eb:08:4c:f4:72:3b:f3:3d:69:2a:06:
f3:2b:da:fe:a0:f7:1f:6a:49:3f:dc:82:bb:2e:25:15:8e:02:
3a:72:08:22:cb:23:03:74:47:62:84:f7:18:61:80:65:d4:ea:
f3:a4:c2:99:d4:24:f2:96:6b:19:86:3e:84:ef:15:61:49:e4:
a9:07:e9:71:bc:3e:b1:cc:a4:d7:6e:e6:24:06:f3:83:0a:2e:
28:45:bc:6a:d6:e5:21:37:48:b5:bc:1f:89:4f:fe:76:5c:bf:
86:02:d9:94:50:fd:59:89:30:86:e7:1b:80:ec:ff:4c:13:df:
9b:2c:da:be:e2:7a:8f:93:f0:4b:90:b0:4a:b8:48:9c:ea:f0:
aa:7e:05:d7:07:4e:31:87:46:a2:df:87:12:60:ba:d1:a8:bc:
a7:40:d9:50:08:77:16:45:42:d6:53:1b:44:f2:91:cb:0e:8f:
ee:5d:d4:71:70:de:09:01:01:e1:7c:df:9f:0e:cf:59:25:09:
5c:e3:9d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQScJ14PIsUFWgSCyk6lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx
Y2IzNzgwHhcNMjYwNDE5MDEwMDQ4WhcNMjYwNDIwMDEwMDQ4WjAzMTEwLwYDVQQD
EygxY2U3NGZkZDk5ZjM1OWI4Yzg3OWJkZTE4Y2JiYzQzMjhiNzczYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aHWtiKyAaFcym6lZ8ufWUXyB7Ds
K9RXfHZFQf25+Msc69tEVmH+lBcNAoHo1A2AI5s/bRUdK8QsQjE0xbqMpyOOIkxp
RwuHb6dl/ifIxMFHpO3D9lXon/hTrt0y+HbLtOD/TH5vDns4dDtjuJ5+WDRshjHg
HWe179Z+C/3brrJK81J3oEUnrRyRTZVUGDki57C0Rw97E2RP4d++W8HO7zsGFqrw
O4e7yuKRt1EKKA9C/cdSxfi9dh8kkcMJPY3hAA46+AHLn+lzJSaIUk81W4lXGJEJ
qNcXzEkCRqXqb8BIoiC2WZ2dENrqx9AH6oCdNMqZUnTSDrTkLVFrq9GM9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBznT92Z81m4yHm94Yy7xDKLdzyJMB8GA1UdIwQY
MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt
ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0
LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvdJLlGy
1HGjgfUq6Vfxh8J0fzfJcfomwXp7Q1/aWe2NxAsLox72K3fsM8sU7KjOqu69YQs/
gqEYPkklwesITPRyO/M9aSoG8yva/qD3H2pJP9yCuy4lFY4COnIIIssjA3RHYoT3
GGGAZdTq86TCmdQk8pZrGYY+hO8VYUnkqQfpcbw+scyk127mJAbzgwouKEW8atbl
ITdItbwfiU/+dly/hgLZlFD9WYkwhucbgOz/TBPfmyzavuJ6j5PwS5CwSrhInOrw
qn4F1wdOMYdGot+HEmC60ai8p0DZUAh3FkVC1lMbRPKRyw6P7l3UcXDeCQEB4Xzf
nw7PWSUJXOOdGg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:01 2026 by rpki-client