Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: 2z9dY3F8LySU3ah8XH9aSSduZjqPZYnjgiM4d14r/f0=
Subject key identifier: F8:C0:55:87:8D:40:61:CC:86:84:0F:0F:45:6E:D0:E6:4D:38:00:43
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019D9D759283ECBAFE15B0F2DA57F3366A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 041C
Signing time: Fri 17 Apr 2026 22:00:21 +0000
Manifest this update: Fri 17 Apr 2026 22:00:21 +0000
Manifest next update: Sat 18 Apr 2026 22:00:21 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: Itsk8c2KchvyHnA8C0mHFd4JsnXbhYmERTf0UL1unPI=)
2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:92:83:ec:ba:fe:15:b0:f2:da:57:f3:36:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Apr 17 22:00:21 2026 GMT
Not After : Apr 18 22:00:21 2026 GMT
Subject: CN=f8c055878d4061cc86840f0f456ed0e64d380043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:f5:70:29:e5:c6:12:74:04:56:b6:88:85:
09:8a:4a:5c:6e:d4:2d:77:77:b4:af:d4:e5:8f:f3:
07:6e:b0:c4:80:79:9e:2d:5b:f6:02:8e:2f:f3:a0:
1b:12:9b:41:ef:b7:0a:8c:40:a1:68:ff:9c:07:21:
3c:4b:28:f2:cf:48:89:f8:c1:0d:70:ff:4c:36:a2:
e1:c7:eb:ed:cc:19:c0:b4:c6:70:3c:17:a6:81:17:
35:01:66:93:00:e0:52:77:84:ff:70:53:8a:51:ed:
3f:9f:6c:85:81:a0:b1:db:37:f1:93:96:cf:f0:0f:
19:a7:13:0d:c5:76:c7:dd:94:22:b2:b5:4a:b2:01:
7c:c9:f6:21:f1:a5:a5:0c:f2:2e:25:ba:11:90:de:
5d:6b:a4:38:83:4c:15:1b:57:30:4c:ab:c7:3f:b8:
24:1c:32:51:21:a7:19:33:3e:d2:2c:02:58:12:3f:
2e:54:98:c5:83:8b:60:b7:31:49:26:45:18:c2:7f:
d3:f9:38:d9:f5:6d:3e:fa:f5:49:15:42:d3:95:35:
64:64:84:cf:ca:f4:35:1e:e2:69:dd:3f:e2:78:a6:
c6:96:9f:a0:3d:72:c5:fe:7c:f8:27:fb:6f:f2:fb:
dc:95:e1:cf:b6:ef:bc:ed:ce:b8:f8:15:c3:bd:6e:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:55:87:8D:40:61:CC:86:84:0F:0F:45:6E:D0:E6:4D:38:00:43
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:05:d9:56:f0:04:32:86:ce:8b:9d:45:d8:df:f9:d6:e8:
0f:f9:3d:30:77:82:13:38:3e:72:28:f6:14:91:16:70:17:fb:
27:9b:b4:c2:ff:c7:02:ab:6f:a8:3d:99:97:b3:ee:3d:cc:42:
93:0b:78:d8:9a:8b:f8:b6:88:11:e3:80:fd:16:3b:ac:06:d2:
9f:71:4f:d6:08:0f:89:01:7d:11:50:01:fd:e3:b1:89:e4:ce:
d5:3e:d3:32:79:19:f8:f7:61:c1:54:74:02:4c:6e:f5:4c:06:
be:4a:11:01:1c:e2:04:9b:28:d6:af:a0:83:30:92:af:0b:a4:
74:d3:30:9f:f4:b2:e7:e3:e3:8b:fb:f6:13:70:01:a0:77:bd:
f1:ae:07:cf:85:22:ad:c0:59:e2:35:45:33:95:f4:c7:45:59:
b9:eb:35:87:f6:ca:02:a6:84:4e:10:1d:ff:c1:37:3b:8a:d8:
dc:c4:e3:66:32:54:a4:6d:4d:26:0b:e3:78:14:43:99:f5:cd:
cf:b6:08:39:32:37:dc:e8:c5:8a:85:63:ef:cc:d7:82:ac:ae:
f9:59:a5:0a:5c:57:6a:63:e9:be:09:6b:41:6b:d1:52:73:7b:
29:a1:33:59:7b:14:32:c7:4e:1b:1c:fe:0b:a7:7d:51:1e:d1:
87:8f:29:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddZKD7Lr+FbDy2lfzNmpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl
ZDkxYzgwHhcNMjYwNDE3MjIwMDIxWhcNMjYwNDE4MjIwMDIxWjAzMTEwLwYDVQQD
EyhmOGMwNTU4NzhkNDA2MWNjODY4NDBmMGY0NTZlZDBlNjRkMzgwMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nv1cCnlxhJ0BFa2iIUJikpcbtQt
d3e0r9Tlj/MHbrDEgHmeLVv2Ao4v86AbEptB77cKjEChaP+cByE8Syjyz0iJ+MEN
cP9MNqLhx+vtzBnAtMZwPBemgRc1AWaTAOBSd4T/cFOKUe0/n2yFgaCx2zfxk5bP
8A8ZpxMNxXbH3ZQisrVKsgF8yfYh8aWlDPIuJboRkN5da6Q4g0wVG1cwTKvHP7gk
HDJRIacZMz7SLAJYEj8uVJjFg4tgtzFJJkUYwn/T+TjZ9W0++vVJFULTlTVkZITP
yvQ1HuJp3T/ieKbGlp+gPXLF/nz4J/tv8vvcleHPtu+87c64+BXDvW4LUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjAVYeNQGHMhoQPD0Vu0OZNOABDMB8GA1UdIwQY
MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt
N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm
LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuUF2Vbw
BDKGzoudRdjf+dboD/k9MHeCEzg+cij2FJEWcBf7J5u0wv/HAqtvqD2Zl7PuPcxC
kwt42JqL+LaIEeOA/RY7rAbSn3FP1ggPiQF9EVAB/eOxieTO1T7TMnkZ+PdhwVR0
Akxu9UwGvkoRARziBJso1q+ggzCSrwukdNMwn/Sy5+Pji/v2E3ABoHe98a4Hz4Ui
rcBZ4jVFM5X0x0VZues1h/bKAqaEThAd/8E3O4rY3MTjZjJUpG1NJgvjeBRDmfXN
z7YIOTI33OjFioVj78zXgqyu+VmlClxXamPpvglrQWvRUnN7KaEzWXsUMsdOGxz+
C6d9UR7Rh48pFg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:04:48 2026 by rpki-client