Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: 9Z+iJEV0IiisAjezLUbpSZDY1rTcC1wkloUlIc+ANgU=
Subject key identifier: 70:16:5B:36:EF:4D:74:84:20:F1:49:2F:81:01:D4:AE:09:FC:1A:61
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 019D9AAC3E0A2CB0D92573A5639CF58115D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0D73
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (hash: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: G+KU3a2SpTzVgHmhqfwUGVkLrOqb2gQs98H9lLUIBA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3e:0a:2c:b0:d9:25:73:a5:63:9c:f5:81:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=70165b36ef4d748420f1492f8101d4ae09fc1a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:62:fa:81:a4:dd:51:4c:47:76:32:ed:90:
9d:d6:cf:8d:21:f9:d2:93:df:a6:03:58:b3:11:e4:
b9:9f:9b:33:65:93:d0:33:fa:66:d8:c7:5f:cc:21:
1a:2f:49:6f:d0:7e:9a:aa:42:cf:8e:78:3f:08:28:
c4:89:9e:43:63:aa:50:17:0a:f4:17:80:dc:91:dc:
4f:4d:9a:09:e9:ac:f8:52:5e:f0:9e:85:8d:ff:2c:
9b:94:47:65:02:28:25:7e:99:8b:68:cb:cb:2c:20:
c2:e1:7b:10:00:ab:c0:4b:8d:e3:8f:d1:47:1c:28:
b1:ad:24:93:8c:9f:45:c4:e8:f3:51:03:de:bf:29:
6d:d5:84:80:72:3e:87:19:a5:8e:07:bf:51:20:1d:
9c:1f:00:37:14:57:a1:e2:36:d0:52:9b:d2:da:5f:
84:42:48:de:81:45:c4:73:75:84:11:72:b3:67:9e:
25:04:b2:a9:94:ea:f0:5c:20:d9:36:6e:69:e7:46:
ad:c1:f0:06:c3:f5:3d:c4:3d:b3:78:9c:7a:89:49:
2c:d1:66:7e:7e:fd:b2:6c:91:fe:5d:bd:3a:60:09:
dc:98:cd:2e:a9:1f:0a:61:a9:56:79:e3:88:ee:c8:
30:82:29:a3:ae:2d:0e:e6:eb:de:bf:2f:c7:c9:a2:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:5B:36:EF:4D:74:84:20:F1:49:2F:81:01:D4:AE:09:FC:1A:61
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:6b:65:c3:c7:63:e1:d6:37:3b:f1:bb:98:c7:81:1e:f5:
f7:b6:1e:3f:98:67:13:d8:2d:56:fe:6c:c2:a1:b4:0f:72:67:
87:f4:58:e9:00:2f:97:39:37:53:70:78:76:ab:0e:53:97:f2:
70:a5:aa:7d:0e:c6:8e:b0:fe:34:65:99:a0:da:2b:15:08:dc:
b9:6b:32:12:4a:79:45:29:c5:ab:c1:f1:af:da:27:bf:34:aa:
73:37:f8:20:61:fb:78:a3:cf:ee:f6:2c:3b:f6:ec:64:48:93:
65:69:69:55:c6:35:94:06:bd:51:1c:bd:47:62:46:b8:40:6d:
ca:8c:18:c9:4e:4e:c5:25:c1:e4:76:37:b5:0a:f0:0b:91:70:
06:8c:6c:f8:90:7a:c0:90:a5:f2:51:16:b3:1f:d8:c6:b6:ed:
41:d2:f0:57:64:5d:cb:25:44:57:af:69:b6:98:81:ba:19:47:
77:74:b6:a2:b2:f0:23:21:e2:10:e9:52:aa:04:d1:42:17:bc:
e0:5d:11:cf:f6:d6:15:50:f1:3d:cd:63:88:92:ee:d0:96:a8:
05:9a:68:c0:11:bd:0e:b0:d3:64:b1:c3:55:5e:f7:f8:52:2b:
45:0b:92:da:c9:c9:d6:4b:59:28:39:f8:25:0e:77:2c:ba:0c:
14:be:7a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arD4KLLDZJXOlY5z1gRXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj
OWVlNWMwHhcNMjYwNDE3MDkwMTEyWhcNMjYwNDE4MDkwMTEyWjAzMTEwLwYDVQQD
Eyg3MDE2NWIzNmVmNGQ3NDg0MjBmMTQ5MmY4MTAxZDRhZTA5ZmMxYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J1i+oGk3VFMR3Yy7ZCd1s+NIfnS
k9+mA1izEeS5n5szZZPQM/pm2MdfzCEaL0lv0H6aqkLPjng/CCjEiZ5DY6pQFwr0
F4DckdxPTZoJ6az4Ul7wnoWN/yyblEdlAiglfpmLaMvLLCDC4XsQAKvAS43jj9FH
HCixrSSTjJ9FxOjzUQPevylt1YSAcj6HGaWOB79RIB2cHwA3FFeh4jbQUpvS2l+E
QkjegUXEc3WEEXKzZ54lBLKplOrwXCDZNm5p50atwfAGw/U9xD2zeJx6iUks0WZ+
fv2ybJH+Xb06YAncmM0uqR8KYalWeeOI7sgwgimjri0O5uvevy/HyaJtSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAWWzbvTXSEIPFJL4EB1K4J/BphMB8GA1UdIwQY
MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt
MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi
LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFVrZcPH
Y+HWNzvxu5jHgR7197YeP5hnE9gtVv5swqG0D3Jnh/RY6QAvlzk3U3B4dqsOU5fy
cKWqfQ7GjrD+NGWZoNorFQjcuWsyEkp5RSnFq8Hxr9onvzSqczf4IGH7eKPP7vYs
O/bsZEiTZWlpVcY1lAa9URy9R2JGuEBtyowYyU5OxSXB5HY3tQrwC5FwBoxs+JB6
wJCl8lEWsx/YxrbtQdLwV2RdyyVEV69ptpiBuhlHd3S2orLwIyHiEOlSqgTRQhe8
4F0Rz/bWFVDxPc1jiJLu0JaoBZpowBG9DrDTZLHDVV73+FIrRQuS2snJ1ktZKDn4
JQ53LLoMFL568w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:10 2026 by rpki-client