Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: LmWDfMRkRK3qnx9q/q7JIdpjyig9DvfJszWCLKy5+sU=
Subject key identifier: A4:38:D4:B1:D3:3C:C5:9D:E6:3E:B4:55:2B:F4:63:F3:7E:A9:32:AB
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 019D98F4B8E178DA4952C01B53CC22A20CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: JP+PyxOnn/ObGvQ+gGL/Tg4PsQd7YHCRyQxgBtE2Tes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b8:e1:78:da:49:52:c0:1b:53:cc:22:a2:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=a438d4b1d33cc59de63eb4552bf463f37ea932ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:22:4a:4f:06:9d:d4:73:0d:80:0a:8d:c8:
09:c0:3d:e9:c5:fd:4e:55:eb:78:1a:04:d4:21:79:
4f:11:af:b8:b4:8c:59:14:d0:e1:43:48:67:60:bf:
9d:7e:25:2c:4c:38:4d:7e:77:4e:fe:83:f4:1e:17:
33:3a:40:92:e8:49:03:ca:f3:22:5a:da:40:22:bf:
70:5e:ec:5c:20:62:4b:af:80:5b:1e:8b:65:b8:ec:
36:62:33:24:3a:56:d0:bc:96:6e:89:44:9b:88:ec:
02:8f:77:fc:50:3a:6d:ce:35:5a:45:a9:0a:18:e3:
c5:f1:c3:01:57:e6:0f:0b:44:fa:97:a0:99:94:40:
2c:a4:52:01:61:14:6d:23:61:2e:f3:42:b4:a5:8b:
84:f8:6e:0a:c5:db:33:d6:2f:f4:f7:25:ac:b7:b7:
cc:1c:4a:18:dc:f5:fa:4f:64:1a:cf:a4:07:5e:d0:
ae:cc:da:58:86:45:c2:4b:71:d7:a4:d3:18:d1:5b:
94:79:6c:58:0d:7d:10:55:6d:e9:50:58:d2:90:c1:
b3:f7:be:0b:ff:ea:67:ef:14:4f:57:e5:61:36:a9:
8b:c6:27:d6:fe:8b:44:89:1f:45:13:b7:fc:ea:b5:
0c:e2:c3:0c:7e:3b:75:53:ab:0b:f6:ca:b1:24:40:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:D4:B1:D3:3C:C5:9D:E6:3E:B4:55:2B:F4:63:F3:7E:A9:32:AB
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:36:a3:d8:77:71:f8:8e:c1:4e:a1:a1:4a:f9:38:44:86:2e:
c9:02:4b:e9:90:da:21:62:87:7d:c7:09:d7:6a:13:5c:67:27:
ca:ea:a4:7a:5c:ae:63:50:98:e6:e8:94:c2:b8:2b:b1:88:de:
74:01:36:1f:fa:38:1f:85:76:33:e6:93:f7:ad:b2:60:db:ec:
5a:d3:10:a2:75:49:84:fd:40:e3:88:9a:6b:a7:e4:c6:d9:1b:
d9:27:a0:db:4b:87:b3:5f:80:84:3f:47:af:3a:78:d5:70:84:
ee:30:e4:78:13:06:9f:b6:db:fe:9d:f0:4c:ff:e0:41:3a:c3:
21:a6:a4:fd:57:05:69:16:00:dd:80:6a:2d:fb:7b:28:dd:9d:
35:47:6f:8d:86:e1:85:e9:d0:25:06:85:5a:7c:2f:a9:21:55:
7d:56:59:4a:1b:ff:35:0e:10:24:c9:a2:ef:ac:9f:9a:dc:ec:
05:e2:b3:bb:20:e4:58:b6:d4:2a:d5:66:15:f0:d3:9b:2b:d0:
6f:b0:a2:4d:fb:c7:aa:da:e0:a0:f1:c3:d4:e2:d2:8a:e9:a4:
3c:87:86:71:e6:e3:f8:a3:16:ed:47:99:9a:bd:6b:90:5c:24:
0c:ae:bb:9e:79:46:a9:8e:66:e0:7e:f9:99:20:61:45:81:c1:
a2:ee:18:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9LjheNpJUsAbU8wiogzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjYwNDE3MDEwMTA4WhcNMjYwNDE4MDEwMTA4WjAzMTEwLwYDVQQD
EyhhNDM4ZDRiMWQzM2NjNTlkZTYzZWI0NTUyYmY0NjNmMzdlYTkzMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocAiSk8GndRzDYAKjcgJwD3pxf1O
Vet4GgTUIXlPEa+4tIxZFNDhQ0hnYL+dfiUsTDhNfndO/oP0HhczOkCS6EkDyvMi
WtpAIr9wXuxcIGJLr4BbHotluOw2YjMkOlbQvJZuiUSbiOwCj3f8UDptzjVaRakK
GOPF8cMBV+YPC0T6l6CZlEAspFIBYRRtI2Eu80K0pYuE+G4Kxdsz1i/09yWst7fM
HEoY3PX6T2Qaz6QHXtCuzNpYhkXCS3HXpNMY0VuUeWxYDX0QVW3pUFjSkMGz974L
/+pn7xRPV+VhNqmLxifW/otEiR9FE7f86rUM4sMMfjt1U6sL9sqxJEAy/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ41LHTPMWd5j60VSv0Y/N+qTKrMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTaj2Hdx
+I7BTqGhSvk4RIYuyQJL6ZDaIWKHfccJ12oTXGcnyuqkelyuY1CY5uiUwrgrsYje
dAE2H/o4H4V2M+aT962yYNvsWtMQonVJhP1A44iaa6fkxtkb2Seg20uHs1+AhD9H
rzp41XCE7jDkeBMGn7bb/p3wTP/gQTrDIaak/VcFaRYA3YBqLft7KN2dNUdvjYbh
henQJQaFWnwvqSFVfVZZShv/NQ4QJMmi76yfmtzsBeKzuyDkWLbUKtVmFfDTmyvQ
b7CiTfvHqtrgoPHD1OLSiumkPIeGcebj+KMW7UeZmr1rkFwkDK67nnlGqY5m4H75
mSBhRYHBou4Y6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:15 2026 by rpki-client