Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: cF4MmhLLU546J2wejgj5Nbda3L30iNwovXtc0hEtZzs=
Subject key identifier: AD:C6:51:2D:CF:37:35:14:7E:0B:ED:7A:E0:7E:91:BA:A1:2B:8D:5C
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019D9A74A0DD1E2DFBF2D214D7898D9BB185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 08:00:27 +0000
Manifest this update: Fri 17 Apr 2026 08:00:27 +0000
Manifest next update: Sat 18 Apr 2026 08:00:27 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: dhBteBoNf8GbVGeMsr4IHZsck42gqCwqdMgXNdVEijA=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a0:dd:1e:2d:fb:f2:d2:14:d7:89:8d:9b:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Apr 17 08:00:27 2026 GMT
Not After : Apr 18 08:00:27 2026 GMT
Subject: CN=adc6512dcf3735147e0bed7ae07e91baa12b8d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:eb:74:0c:77:73:40:8a:64:21:5d:0c:90:
d3:e1:9a:21:ed:f7:68:7f:d0:17:80:07:4e:98:7e:
8f:5e:01:a3:70:90:16:26:d3:00:54:96:d0:9e:ef:
b3:b3:a0:14:7c:6c:ac:c0:14:96:94:c5:d2:76:4d:
77:7f:28:b1:72:e9:e0:83:0f:4a:20:e0:55:cc:06:
de:26:54:b6:e7:9c:7d:a2:32:8a:cb:70:ef:18:80:
03:15:47:d3:9d:7b:90:32:ae:75:f7:f6:e6:8f:24:
61:2c:4a:6d:69:9d:09:79:36:02:12:28:49:b3:9d:
72:41:58:5d:1d:da:b9:73:52:31:6c:5d:99:e4:b9:
58:56:4e:73:3f:bd:6b:53:67:d9:bd:42:60:28:03:
7e:19:5c:ad:91:fb:5d:5b:95:2a:64:8d:03:93:d3:
57:cd:dc:98:8c:5e:ec:6f:9c:52:ce:f2:dc:83:6d:
72:61:f4:04:71:3b:c3:d6:20:fb:c6:76:db:55:dd:
40:84:13:6d:90:81:ab:21:12:60:cb:3c:a7:6e:36:
bd:a4:70:4d:1b:59:ff:25:cd:c5:0a:4b:b2:23:45:
e0:07:d4:f8:f5:74:d1:4b:5b:5b:b6:96:2f:e0:6d:
e7:90:11:89:78:0e:c2:ab:53:aa:f6:60:27:c8:70:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:51:2D:CF:37:35:14:7E:0B:ED:7A:E0:7E:91:BA:A1:2B:8D:5C
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:87:15:3b:0d:5c:03:d6:75:55:6f:75:23:7e:e1:6b:69:
ef:11:63:e4:29:1a:fa:ae:1f:4e:72:86:cc:97:10:81:9c:a0:
83:9a:89:a5:f4:52:be:8e:16:7c:63:f3:c8:d1:73:2c:bb:22:
7a:58:2e:c2:b1:84:51:f4:6b:6f:73:9c:9f:00:b7:a4:51:42:
e3:0f:36:9c:26:18:2a:c7:25:3b:4e:19:a6:bd:d4:4c:22:86:
98:13:01:50:c1:d1:93:27:b8:f5:e9:a2:00:33:36:a5:f8:97:
3a:6a:c6:36:d2:12:44:59:20:95:36:cd:6f:9c:df:09:d1:ea:
a8:3f:49:70:2b:7c:e3:33:76:1f:57:7e:e4:25:14:e5:23:0e:
47:4d:d9:0a:07:7f:b5:75:33:e0:ca:ad:91:0f:d5:dd:05:f8:
bb:12:e8:b6:b1:b1:6a:80:8b:9e:4a:ed:1b:7a:60:b6:3d:73:
58:77:94:d4:13:1d:e0:c1:d5:87:d7:99:1d:94:90:28:b6:bb:
47:9b:dd:92:b1:86:63:fa:24:a5:47:78:67:5a:a7:ac:c4:f4:
04:a6:cc:a3:6b:fe:ba:13:b1:c0:9b:ad:12:e9:56:0a:56:2c:
ab:26:2e:7f:e9:63:65:e8:85:37:00:71:f7:3a:17:f5:21:df:
8c:bb:e3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKDdHi378tIU14mNm7GFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjYwNDE3MDgwMDI3WhcNMjYwNDE4MDgwMDI3WjAzMTEwLwYDVQQD
EyhhZGM2NTEyZGNmMzczNTE0N2UwYmVkN2FlMDdlOTFiYWExMmI4ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPHrdAx3c0CKZCFdDJDT4Zoh7fdo
f9AXgAdOmH6PXgGjcJAWJtMAVJbQnu+zs6AUfGyswBSWlMXSdk13fyixcunggw9K
IOBVzAbeJlS255x9ojKKy3DvGIADFUfTnXuQMq519/bmjyRhLEptaZ0JeTYCEihJ
s51yQVhdHdq5c1IxbF2Z5LlYVk5zP71rU2fZvUJgKAN+GVytkftdW5UqZI0Dk9NX
zdyYjF7sb5xSzvLcg21yYfQEcTvD1iD7xnbbVd1AhBNtkIGrIRJgyzynbja9pHBN
G1n/Jc3FCkuyI0XgB9T49XTRS1tbtpYv4G3nkBGJeA7Cq1Oq9mAnyHDenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3GUS3PNzUUfgvteuB+kbqhK41cMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsyHFTsN
XAPWdVVvdSN+4Wtp7xFj5Cka+q4fTnKGzJcQgZygg5qJpfRSvo4WfGPzyNFzLLsi
elguwrGEUfRrb3OcnwC3pFFC4w82nCYYKsclO04Zpr3UTCKGmBMBUMHRkye49emi
ADM2pfiXOmrGNtISRFkglTbNb5zfCdHqqD9JcCt84zN2H1d+5CUU5SMOR03ZCgd/
tXUz4MqtkQ/V3QX4uxLotrGxaoCLnkrtG3pgtj1zWHeU1BMd4MHVh9eZHZSQKLa7
R5vdkrGGY/okpUd4Z1qnrMT0BKbMo2v+uhOxwJutEulWClYsqyYuf+ljZeiFNwBx
9zoX9SHfjLvjhQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:39 2026 by rpki-client