Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: OR1M2QOCYUD2A39KhES8K0rsL9hCs/x7IEl4jQ9cOlY=
Subject key identifier: A4:3A:27:F8:99:A8:70:D2:C6:42:42:5D:BB:8C:ED:35:58:42:2D:A7
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019D97E157FCAC0B0FBCA76F1F9AA991D68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:20 +0000
Manifest this update: Thu 16 Apr 2026 20:00:20 +0000
Manifest next update: Fri 17 Apr 2026 20:00:20 +0000
Files and hashes: 1: VuWfYezMuwuKUhdrekzuq4vKzXw.roa (hash: 9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: IW2fQGHnHBUlus6dAqNec8oK4TI91l5pbkG0UOoVX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:57:fc:ac:0b:0f:bc:a7:6f:1f:9a:a9:91:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Apr 16 20:00:20 2026 GMT
Not After : Apr 17 20:00:20 2026 GMT
Subject: CN=a43a27f899a870d2c642425dbb8ced3558422da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:58:9c:0d:95:30:a5:ad:3e:74:bf:4a:ed:
b5:eb:28:ff:f9:7f:d3:6d:e5:0a:32:52:6a:ec:81:
bf:92:c8:c8:4d:73:f4:fd:9f:e4:cb:37:5e:26:d5:
70:f0:0f:99:28:17:ec:b5:38:20:63:f3:1f:90:69:
d1:41:14:fa:76:c6:b7:fe:67:b0:93:0e:58:8e:3e:
8e:f6:d3:7e:e8:e0:ab:55:3d:c5:c7:ed:08:5e:52:
5e:74:db:50:52:2e:63:3b:c8:18:de:1d:28:b4:56:
eb:d3:86:d2:17:e5:81:8d:cb:c3:84:fe:f9:c6:9c:
ef:77:87:d6:b5:6e:75:87:97:99:d3:f6:99:18:67:
29:1d:da:2e:4b:e0:54:e2:54:87:74:7f:46:b9:bf:
72:9f:ca:70:cc:ab:09:9c:8d:5b:27:20:cd:9c:2b:
eb:d5:a4:8e:c9:0a:4d:91:63:95:c7:ce:14:b9:ee:
f9:a7:e0:f9:09:50:6f:d6:5c:96:38:c7:24:1a:42:
93:19:6f:58:e6:aa:ec:37:da:3c:bc:3b:a0:1e:6f:
c3:ec:51:b7:a2:0b:51:98:7a:7a:c9:7a:e8:77:c5:
16:82:d4:6f:7c:b9:10:f1:2d:5e:b1:a1:5b:fc:d8:
fd:ef:f9:38:cb:03:b4:ca:19:de:58:e0:36:7d:b0:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:27:F8:99:A8:70:D2:C6:42:42:5D:BB:8C:ED:35:58:42:2D:A7
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:57:c3:7c:20:04:ea:da:17:72:ac:65:89:34:df:17:64:d0:
8a:ff:6e:50:fd:b1:aa:76:cd:3c:e4:ca:ac:f5:a9:06:23:8f:
7b:8e:33:eb:10:c4:15:d5:d6:83:70:fd:71:59:86:62:47:9e:
5a:c2:a3:60:7e:01:8c:7d:49:85:74:0d:f9:8a:d2:38:e5:9c:
8e:db:41:b4:df:df:5a:a5:7b:24:9c:c1:de:6a:b9:81:6d:d3:
27:fa:7c:9c:be:df:5b:c6:1f:d8:38:06:b4:eb:e4:b9:e0:e2:
cc:b6:02:81:8f:8a:54:8d:4d:4e:23:92:ef:7a:c5:32:82:f7:
fc:53:25:38:1e:53:1a:1f:bb:31:81:8a:e8:d3:c8:4b:a2:15:
aa:37:6f:04:4a:e9:a9:cd:2c:ef:b9:27:3b:66:dc:f8:07:b2:
25:aa:22:8b:cf:bc:82:a8:78:ba:c8:a5:b5:d3:61:3b:03:f1:
16:1d:d2:fb:30:d1:b4:3a:36:31:1f:c1:e6:fc:75:46:59:6b:
67:9e:90:6b:6a:dc:a6:37:44:40:d9:89:f5:2e:b5:c4:32:a5:
96:c4:fc:ea:4e:1d:8c:7c:90:a0:a9:83:1a:da:3f:c3:63:28:
32:a0:e4:91:86:aa:38:3d:c3:9c:4c:9a:8c:ee:28:cd:e9:b7:
8b:76:b7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4Vf8rAsPvKdvH5qpkdaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjYwNDE2MjAwMDIwWhcNMjYwNDE3MjAwMDIwWjAzMTEwLwYDVQQD
EyhhNDNhMjdmODk5YTg3MGQyYzY0MjQyNWRiYjhjZWQzNTU4NDIyZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/FYnA2VMKWtPnS/Su216yj/+X/T
beUKMlJq7IG/ksjITXP0/Z/kyzdeJtVw8A+ZKBfstTggY/MfkGnRQRT6dsa3/mew
kw5Yjj6O9tN+6OCrVT3Fx+0IXlJedNtQUi5jO8gY3h0otFbr04bSF+WBjcvDhP75
xpzvd4fWtW51h5eZ0/aZGGcpHdouS+BU4lSHdH9Gub9yn8pwzKsJnI1bJyDNnCvr
1aSOyQpNkWOVx84Uue75p+D5CVBv1lyWOMckGkKTGW9Y5qrsN9o8vDugHm/D7FG3
ogtRmHp6yXrod8UWgtRvfLkQ8S1esaFb/Nj97/k4ywO0yhneWOA2fbBGgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ6J/iZqHDSxkJCXbuM7TVYQi2nMB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz
LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVfDfCAE
6toXcqxliTTfF2TQiv9uUP2xqnbNPOTKrPWpBiOPe44z6xDEFdXWg3D9cVmGYkee
WsKjYH4BjH1JhXQN+YrSOOWcjttBtN/fWqV7JJzB3mq5gW3TJ/p8nL7fW8Yf2DgG
tOvkueDizLYCgY+KVI1NTiOS73rFMoL3/FMlOB5TGh+7MYGK6NPIS6IVqjdvBErp
qc0s77knO2bc+AeyJaoii8+8gqh4usiltdNhOwPxFh3S+zDRtDo2MR/B5vx1Rllr
Z56Qa2rcpjdEQNmJ9S61xDKllsT86k4djHyQoKmDGto/w2MoMqDkkYaqOD3DnEya
jO4ozem3i3a3Fg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:53 2026 by rpki-client