Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: 3NMVsOTHBayX/M2NvCT7/MOP2J1bSinjlytfEa/VxKY=
Subject key identifier: FA:5B:44:4D:3C:44:A8:53:E5:A0:E2:E9:F4:85:11:84:DE:5C:EF:15
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019D9C637BEBD8FE59A36A3F3F23FA55FCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 0803
Signing time: Fri 17 Apr 2026 17:00:58 +0000
Manifest this update: Fri 17 Apr 2026 17:00:58 +0000
Manifest next update: Sat 18 Apr 2026 17:00:58 +0000
Files and hashes: 1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: tkkNRgoy3wpvnLeYxKa64dfCqi45DolWzGVccymiN1M=)
2: kbAAkkwQaP932r1ppsah-TSE9Gg.roa (hash: 3o2XAxyHXa8HTmIjYWrGbQaBUOXrwLxjEU50gmU9jZU=)
3: zywsKwX1fUPv0A3Uj_uhOWCIOtI.roa (hash: eo3pRkobPu7+wCNJD4zOFzMtiQC1eCBplpvP48zS7Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:7b:eb:d8:fe:59:a3:6a:3f:3f:23:fa:55:fc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Apr 17 17:00:58 2026 GMT
Not After : Apr 18 17:00:58 2026 GMT
Subject: CN=fa5b444d3c44a853e5a0e2e9f4851184de5cef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:94:d2:a5:8b:f0:ed:03:b6:5a:fc:54:d8:
88:f6:cb:21:ef:04:22:4d:09:ff:57:08:b5:2b:41:
9d:9f:76:ae:e2:02:c6:74:cd:95:22:85:a0:71:4a:
01:26:70:46:0e:61:68:b6:19:9b:98:5b:17:da:8e:
e9:80:35:7c:1d:52:f0:c3:34:ba:28:5a:70:c3:47:
ff:1d:21:70:b0:a4:99:4e:9a:10:02:7d:62:02:34:
e8:a0:e7:de:67:d5:ac:d2:e2:dd:b5:d0:34:2e:f3:
91:2a:15:93:ea:21:c9:06:6d:16:01:f7:9e:30:3c:
f2:59:34:46:51:e9:20:7c:08:2b:ea:16:63:8c:a4:
7c:17:d4:20:10:b2:25:2d:4b:69:8a:a5:68:8b:4d:
74:b4:33:2c:80:12:d7:70:6b:b7:56:24:df:af:34:
bc:1f:ad:4c:25:8d:95:4c:29:25:f6:b6:96:ad:d7:
dc:00:d2:0a:e7:ee:10:c2:96:6c:b6:8c:64:22:b3:
01:7c:61:f6:e5:ee:1e:d7:d9:5c:0c:3e:df:c3:e0:
7b:12:71:b0:55:72:c6:78:cd:76:a8:20:9a:bc:4f:
ab:6a:f4:9f:be:96:7a:3f:99:99:80:35:36:c0:5c:
97:f1:9a:11:19:d2:d3:6f:6b:f3:43:d0:2d:1e:4a:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:44:4D:3C:44:A8:53:E5:A0:E2:E9:F4:85:11:84:DE:5C:EF:15
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:74:7e:0a:18:90:74:24:30:8c:71:db:22:e1:47:d2:05:28:
d5:32:f9:21:8d:51:30:43:a1:c8:49:f5:d1:20:2a:e4:6f:bf:
b6:0f:46:da:ef:73:b4:32:92:7b:2f:08:85:dc:be:28:2f:ea:
26:d1:d3:d8:7a:60:c0:ab:62:57:e8:02:08:d3:aa:8c:65:ff:
f3:39:75:7a:c3:36:d8:b0:e5:e3:36:1c:ea:ef:a7:64:ea:35:
e9:9e:09:44:f7:20:d5:d9:3b:58:1e:bd:79:34:d6:88:4c:1c:
84:7a:12:85:3d:dc:fd:48:6a:3d:7e:5b:3a:91:3d:2c:4c:88:
44:1b:5a:97:24:b5:83:22:14:56:bd:db:92:cb:58:41:9c:f3:
b4:09:76:88:58:8e:06:1e:18:89:93:a4:0f:b3:26:57:f4:9a:
40:e8:ad:14:cd:46:24:fe:72:a1:ff:27:94:fe:9c:f5:ff:02:
e9:23:16:cd:74:94:d7:bc:d2:5f:bb:a8:07:f0:f0:5c:85:95:
78:86:96:07:11:0d:d5:60:69:74:11:f8:5f:ca:e7:d5:29:12:
01:ee:7b:04:88:7f:73:4b:87:77:65:78:9f:69:05:5b:01:fd:
91:ca:b5:c8:81:01:be:70:f1:c1:9f:9b:4d:cd:a7:5b:0f:70:
5d:7c:09:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY3vr2P5Zo2o/PyP6VfzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzI2OWY5ZTkzYjBmYjhiYzRiMWM5NDdhYmM1YjIxZjIx
ZjIzMDUwHhcNMjYwNDE3MTcwMDU4WhcNMjYwNDE4MTcwMDU4WjAzMTEwLwYDVQQD
EyhmYTViNDQ0ZDNjNDRhODUzZTVhMGUyZTlmNDg1MTE4NGRlNWNlZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztSU0qWL8O0Dtlr8VNiI9ssh7wQi
TQn/Vwi1K0Gdn3au4gLGdM2VIoWgcUoBJnBGDmFothmbmFsX2o7pgDV8HVLwwzS6
KFpww0f/HSFwsKSZTpoQAn1iAjTooOfeZ9Ws0uLdtdA0LvORKhWT6iHJBm0WAfee
MDzyWTRGUekgfAgr6hZjjKR8F9QgELIlLUtpiqVoi010tDMsgBLXcGu3ViTfrzS8
H61MJY2VTCkl9raWrdfcANIK5+4QwpZstoxkIrMBfGH25e4e19lcDD7fw+B7EnGw
VXLGeM12qCCavE+ravSfvpZ6P5mZgDU2wFyX8ZoRGdLTb2vzQ9AtHkpJtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpbRE08RKhT5aDi6fSFEYTeXO8VMB8GA1UdIwQY
MBaAFNbCafnpOw+4vEsclHq8WyHyHyMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEt
Yjc5Y2ZjMjRkM2I3LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jMjUzZTMtNDEzMy00YTE2LTkwNjEtYjc5Y2ZjMjRkM2I3
LzEvMXNKcC1lazdEN2k4U3h5VWVyeGJJZklmSXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXR+ChiQ
dCQwjHHbIuFH0gUo1TL5IY1RMEOhyEn10SAq5G+/tg9G2u9ztDKSey8Ihdy+KC/q
JtHT2HpgwKtiV+gCCNOqjGX/8zl1esM22LDl4zYc6u+nZOo16Z4JRPcg1dk7WB69
eTTWiEwchHoShT3c/UhqPX5bOpE9LEyIRBtalyS1gyIUVr3bkstYQZzztAl2iFiO
Bh4YiZOkD7MmV/SaQOitFM1GJP5yof8nlP6c9f8C6SMWzXSU17zSX7uoB/DwXIWV
eIaWBxEN1WBpdBH4X8rn1SkSAe57BIh/c0uHd2V4n2kFWwH9kcq1yIEBvnDxwZ+b
Tc2nWw9wXXwJpw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:50 2026 by rpki-client