Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
File: c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft (raw, json)
Hash identifier: iys7dIVIIwSWdn+2XqX/QzC51Yd4htWwQoIO0o5JAqU=
Subject key identifier: D3:F4:13:84:68:73:85:54:35:0F:0D:4E:A0:36:D5:B2:3F:1D:FA:6E
Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Certificate serial: 019D9A06C65E8B574C57F3B4AF1DCCB2BC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
Manifest number: 0668
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: 1-H2i97DY6VzCiu9H7OgVzQ-Jd9s.roa (hash: lP4WKQ/Dq546EBUx3DAqZW0kzkRHyk7qyZMudeX4Mck=)
2: b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa (hash: mDKFLIH7FuHNI+kvtJPVf/r21pBRJq19BldP6s0xeXo=)
3: c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl (hash: bT9iQwanBAKD/HMMUMBPSHIqFGkp5HgzJUrwTXPQNrU=)
4: qZNOJzEV4DPh9ZPtyWo9Pd8MNJs.roa (hash: ojGpvLZ6COCZOIK883u42sTI+UZchWDbhIVZui0CDRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c6:5e:8b:57:4c:57:f3:b4:af:1d:cc:b2:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=d3f4138468738554350f0d4ea036d5b23f1dfa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:08:4c:72:bf:25:91:e2:73:4e:b8:5e:e4:
e5:72:be:6d:9e:35:95:74:72:8a:77:22:48:f7:b2:
d3:d9:3f:23:ca:fd:16:a3:8e:92:d4:35:1e:92:86:
25:12:28:f9:cb:92:1b:2a:33:f2:b9:76:d3:30:78:
12:f7:33:11:74:e7:b6:c1:a6:3a:5c:14:51:bb:ee:
e1:2c:12:93:4b:fa:71:5f:64:5a:89:5a:c9:4c:b0:
74:11:04:53:93:1d:2a:c3:be:0d:33:7d:df:9e:46:
9f:7d:be:72:25:2e:28:89:40:0b:e3:3a:48:93:3f:
b8:bb:3d:0d:9f:57:34:ae:e0:49:ff:bd:40:b3:1e:
8f:eb:49:46:7c:95:22:16:44:41:9c:1c:33:7e:c3:
38:4f:1f:dd:f3:4f:10:ab:0a:a2:2f:8b:b4:8f:69:
cd:f1:b7:5f:2c:e6:2e:7b:1a:71:59:af:b2:ac:f7:
c3:7b:56:e3:b0:56:e0:1a:b1:35:72:7c:14:ac:f1:
a6:78:40:b0:58:a3:11:2b:da:d3:b4:8c:43:f7:2e:
77:b0:f0:75:f1:ca:5e:03:cf:2b:fc:0a:ab:0d:79:
18:53:be:70:19:3e:e3:d1:f9:58:c6:6c:01:2a:fc:
ac:9d:aa:c7:14:2b:5e:c8:11:bc:e0:57:dd:4c:bb:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:13:84:68:73:85:54:35:0F:0D:4E:A0:36:D5:B2:3F:1D:FA:6E
X509v3 Authority Key Identifier:
keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6d:4a:b6:5e:9a:ee:6e:40:17:7e:64:25:50:8d:88:55:1b:
74:10:e1:04:35:50:b8:5c:14:fb:13:f1:a2:3a:3c:88:c3:14:
8e:73:da:5f:5b:e3:18:c9:88:fa:92:a0:60:a2:0d:16:27:e0:
32:18:ca:a4:95:72:24:cc:9d:45:c3:38:7f:6e:8f:ee:5e:b9:
39:36:b8:3f:9b:cb:88:ff:9d:dc:9e:b5:53:fb:3c:d5:c4:e2:
80:bb:bb:42:67:63:39:0c:34:d6:31:62:60:63:7b:2f:e7:ef:
c4:08:ca:31:ca:a3:21:da:cd:18:ae:57:ad:b2:c1:fe:42:6c:
81:2e:d0:7b:4e:49:40:c1:a8:f0:1b:09:bc:9b:da:f0:9b:d5:
f5:f7:69:12:23:c7:3b:d5:21:da:cd:d0:61:ef:1d:d7:58:d4:
d3:09:fa:bc:73:eb:b5:c5:d1:38:e4:6a:a0:87:45:ec:75:ab:
c1:a8:a3:f1:1f:62:5e:11:db:70:77:69:5d:52:9b:4b:d5:29:
13:07:5b:e4:e9:30:22:68:a7:80:d3:54:b0:c5:47:19:22:6d:
f4:e6:ad:8b:06:4e:c5:1d:e1:e4:5f:af:d2:f8:b8:bc:20:e4:
9c:c8:e5:da:cb:f1:2f:22:5f:cf:95:0c:0f:1d:89:42:9b:79:
55:23:42:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBsZei1dMV/O0rx3MsrxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjVlYzEyMDE0ZjkxMWY3MjA1ZWVjYmMyZmM4MThiOWIz
NTcyM2MwHhcNMjYwNDE3MDYwMDI4WhcNMjYwNDE4MDYwMDI4WjAzMTEwLwYDVQQD
EyhkM2Y0MTM4NDY4NzM4NTU0MzUwZjBkNGVhMDM2ZDViMjNmMWRmYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I4ITHK/JZHic064XuTlcr5tnjWV
dHKKdyJI97LT2T8jyv0Wo46S1DUekoYlEij5y5IbKjPyuXbTMHgS9zMRdOe2waY6
XBRRu+7hLBKTS/pxX2RaiVrJTLB0EQRTkx0qw74NM33fnkaffb5yJS4oiUAL4zpI
kz+4uz0Nn1c0ruBJ/71Asx6P60lGfJUiFkRBnBwzfsM4Tx/d808QqwqiL4u0j2nN
8bdfLOYuexpxWa+yrPfDe1bjsFbgGrE1cnwUrPGmeECwWKMRK9rTtIxD9y53sPB1
8cpeA88r/AqrDXkYU75wGT7j0flYxmwBKvysnarHFCteyBG84FfdTLtdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP0E4Roc4VUNQ8NTqA21bI/HfpuMB8GA1UdIwQY
MBaAFHNl7BIBT5EfcgXuy8L8gYubNXI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYt
NWExOWFmZGIwNmE3LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYtNWExOWFmZGIwNmE3
LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC21Ktl6a
7m5AF35kJVCNiFUbdBDhBDVQuFwU+xPxojo8iMMUjnPaX1vjGMmI+pKgYKINFifg
MhjKpJVyJMydRcM4f26P7l65OTa4P5vLiP+d3J61U/s81cTigLu7QmdjOQw01jFi
YGN7L+fvxAjKMcqjIdrNGK5XrbLB/kJsgS7Qe05JQMGo8BsJvJva8JvV9fdpEiPH
O9Uh2s3QYe8d11jU0wn6vHPrtcXROORqoIdF7HWrwaij8R9iXhHbcHdpXVKbS9Up
Ewdb5OkwImingNNUsMVHGSJt9OatiwZOxR3h5F+v0vi4vCDknMjl2svxLyJfz5UM
Dx2JQpt5VSNCcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:16 2026 by rpki-client