Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: eAKg6Z9G1V3mo+ipbEzstK9hYfpDWCFVBeQ6sMdNs40=
Subject key identifier: 2E:C1:FC:5B:BD:04:21:2F:C5:4C:B5:D7:93:5F:66:64:2D:2A:D1:02
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019D9A74F39C90E1C5EAEDEBA0DA8BE5337E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0601
Signing time: Fri 17 Apr 2026 08:00:48 +0000
Manifest this update: Fri 17 Apr 2026 08:00:48 +0000
Manifest next update: Sat 18 Apr 2026 08:00:48 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: 6LwLTf1x+d/RPLes4JKDZgmHEjbudsXTk4CQjyLC7yI=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f3:9c:90:e1:c5:ea:ed:eb:a0:da:8b:e5:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Apr 17 08:00:48 2026 GMT
Not After : Apr 18 08:00:48 2026 GMT
Subject: CN=2ec1fc5bbd04212fc54cb5d7935f66642d2ad102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:b9:df:d7:90:9d:25:7b:19:ba:88:ec:c1:
98:2a:8c:21:bc:2b:13:aa:02:d9:6c:9e:a9:5e:28:
3a:c4:0f:f3:c8:f4:26:5f:f3:04:44:96:45:31:a6:
aa:f9:d6:8a:00:01:89:95:d9:94:d6:25:9e:9f:28:
2d:89:81:11:85:5b:88:63:2d:16:f0:47:40:5f:2d:
aa:ec:ca:b4:1d:e0:90:80:eb:d4:5c:2e:63:3a:0d:
6f:47:8d:76:a5:25:83:c8:2b:3a:73:53:58:58:de:
ec:9d:b9:30:be:80:71:69:a3:e1:75:65:b0:b9:aa:
c6:35:10:6a:eb:3c:1b:f9:06:b9:76:56:01:87:ea:
b1:d5:50:a4:36:76:c3:51:96:d1:58:b2:44:c7:bd:
d5:54:19:e1:ef:c8:2b:6e:18:45:80:b9:81:d7:90:
76:4a:2a:b3:57:7f:29:31:4f:10:fb:ef:da:9f:f5:
c7:72:5d:60:31:99:6c:5f:47:20:3c:31:81:38:1d:
7c:ca:cb:58:3d:bd:14:82:ed:e6:2b:08:48:1b:71:
a6:e7:86:53:ba:2c:de:e7:9c:9e:51:c3:cf:8f:ac:
9f:69:f1:47:06:c5:fc:63:d5:1a:a7:6c:af:40:e7:
6f:11:76:ae:8b:93:2f:33:12:2b:47:87:80:42:9e:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:FC:5B:BD:04:21:2F:C5:4C:B5:D7:93:5F:66:64:2D:2A:D1:02
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:3d:85:54:6a:49:09:03:b8:92:d0:62:54:9b:33:f7:ad:
56:73:10:55:de:fb:92:0a:5f:f6:3e:32:6a:54:0d:49:56:52:
f2:d8:ac:b1:52:b6:a8:5a:a9:c1:ae:e8:cd:a1:ce:fa:4a:d4:
84:58:57:69:5f:a0:e2:3d:82:bc:b5:7d:20:74:71:f9:ec:d8:
38:c1:7f:ee:01:b6:b5:98:bc:42:c5:d4:d4:30:cd:fe:ac:f3:
36:26:b1:d5:23:06:8b:ff:50:51:c5:99:c3:1e:99:a0:84:10:
bb:0e:d7:cb:0d:60:b0:46:86:b1:48:86:d7:4c:e5:48:ce:b4:
3e:af:4a:4c:83:17:0e:87:05:19:22:9c:06:ec:79:d8:20:3a:
9c:d9:c3:61:60:d8:03:0b:0d:03:bb:56:d6:4a:10:46:43:18:
2a:7c:31:59:88:4e:b2:ee:3b:91:14:0b:ff:59:ed:fa:10:6e:
8c:a8:b2:0a:a4:47:40:b7:54:91:77:98:32:20:71:31:c7:d4:
1a:0f:5b:5a:05:d8:61:84:38:d4:63:4a:f5:0b:c0:5e:6d:c8:
73:7c:ba:81:8d:41:67:1c:dc:c4:72:8f:71:38:84:7f:42:c0:
f0:94:aa:63:7a:a1:0d:78:8f:fa:a3:c4:31:65:ca:42:f9:e0:
94:1c:c7:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPOckOHF6u3roNqL5TN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1
MTFmMjgwHhcNMjYwNDE3MDgwMDQ4WhcNMjYwNDE4MDgwMDQ4WjAzMTEwLwYDVQQD
EygyZWMxZmM1YmJkMDQyMTJmYzU0Y2I1ZDc5MzVmNjY2NDJkMmFkMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdC539eQnSV7GbqI7MGYKowhvCsT
qgLZbJ6pXig6xA/zyPQmX/MERJZFMaaq+daKAAGJldmU1iWenygtiYERhVuIYy0W
8EdAXy2q7Mq0HeCQgOvUXC5jOg1vR412pSWDyCs6c1NYWN7snbkwvoBxaaPhdWWw
uarGNRBq6zwb+Qa5dlYBh+qx1VCkNnbDUZbRWLJEx73VVBnh78grbhhFgLmB15B2
SiqzV38pMU8Q++/an/XHcl1gMZlsX0cgPDGBOB18ystYPb0Ugu3mKwhIG3Gm54ZT
uize55yeUcPPj6yfafFHBsX8Y9Uap2yvQOdvEXaui5MvMxIrR4eAQp67/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7B/Fu9BCEvxUy115NfZmQtKtECMB8GA1UdIwQY
MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt
MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw
LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVow9hVRq
SQkDuJLQYlSbM/etVnMQVd77kgpf9j4yalQNSVZS8tissVK2qFqpwa7ozaHO+krU
hFhXaV+g4j2CvLV9IHRx+ezYOMF/7gG2tZi8QsXU1DDN/qzzNiax1SMGi/9QUcWZ
wx6ZoIQQuw7Xyw1gsEaGsUiG10zlSM60Pq9KTIMXDocFGSKcBux52CA6nNnDYWDY
AwsNA7tW1koQRkMYKnwxWYhOsu47kRQL/1nt+hBujKiyCqRHQLdUkXeYMiBxMcfU
Gg9bWgXYYYQ41GNK9QvAXm3Ic3y6gY1BZxzcxHKPcTiEf0LA8JSqY3qhDXiP+qPE
MWXKQvnglBzHhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:03 2026 by rpki-client