Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: XSpoz44NFWvJ+rZ8cp50a9zyEQ3SaeQuwsPRWOrQqLw=
Subject key identifier: 86:25:7B:40:37:34:01:75:E0:13:DD:A3:25:06:B8:F3:D9:B0:B6:46
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 019D9AABBAD5F851B552BADE6B91E47F27BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: 5+89LYC5RRan0EY41dLUkzfwdmHLxZU0fMai3Dntp6I=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ba:d5:f8:51:b5:52:ba:de:6b:91:e4:7f:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=86257b4037340175e013dda32506b8f3d9b0b646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:8c:6c:db:6f:60:ed:9c:a7:fc:2e:5a:26:
17:64:25:99:de:ac:ab:ac:df:59:84:8f:72:e5:d4:
5a:a2:10:95:66:15:32:2e:a4:8b:0d:43:cf:b5:69:
da:ca:8c:b4:fb:32:0c:3f:6f:e2:02:8b:91:11:0b:
70:69:85:86:c5:81:3a:49:c7:46:b3:1f:ff:ab:c1:
c9:6e:65:6d:1a:e4:42:7c:8d:a5:75:1b:36:ac:bf:
b5:f1:ea:86:ca:61:56:8a:bc:f6:35:cf:e8:25:48:
13:a6:be:5e:01:81:ae:43:66:9f:9d:47:d6:7a:92:
37:d0:ef:cc:e1:f1:69:40:d7:c1:67:8d:67:4e:1e:
27:4d:3e:c9:78:c1:e7:de:4d:07:12:b2:50:61:7f:
6e:f3:8d:b3:7b:d5:0a:f1:fa:20:ae:80:b8:14:50:
92:0e:a7:c3:0c:e3:c9:e6:21:3e:32:96:6c:81:7f:
65:26:94:03:4c:1b:75:27:11:65:c4:33:ac:cc:b2:
59:ca:28:dc:98:05:22:54:8a:47:a5:0c:4a:9d:ac:
50:74:d8:74:4a:7f:39:06:95:27:dc:0f:5a:7b:4a:
d9:c8:b9:a0:ed:30:6a:a0:6f:d0:72:b3:0b:32:3a:
7f:7c:8f:15:27:98:7a:3c:98:d4:46:58:ed:98:18:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:7B:40:37:34:01:75:E0:13:DD:A3:25:06:B8:F3:D9:B0:B6:46
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:98:09:28:a8:e3:53:6b:70:d5:0a:d2:bb:78:32:5e:09:
7a:70:ac:79:b6:6b:44:0e:92:1d:57:bb:d9:51:62:24:64:77:
13:97:57:e7:81:4d:c8:88:23:0d:e4:eb:57:15:e8:21:3d:08:
40:6c:0d:d4:a2:72:95:6d:61:bc:52:76:ea:b3:7d:4f:94:e0:
ed:aa:9a:17:ea:50:e6:e6:af:e8:62:95:7f:84:02:23:4f:c6:
e7:cb:19:c6:97:58:3e:08:a7:16:e8:2b:44:f3:ee:e3:1c:0e:
91:68:21:56:ed:09:65:67:4d:61:a8:2d:cf:0a:94:18:51:77:
84:8f:1f:d5:c0:41:cc:52:89:5d:3b:17:4b:e8:a6:81:0c:78:
63:e4:7d:72:b3:66:21:51:e7:e7:73:93:f9:ee:d4:25:10:04:
aa:2c:b3:84:16:06:dc:d0:19:ab:36:33:58:f1:bd:19:86:4a:
53:56:8d:e6:10:c1:08:70:0d:99:5c:34:d1:4a:02:42:8f:4d:
c2:d5:ed:88:88:19:1f:87:3c:b3:e4:e4:90:85:d6:86:e7:a6:
dd:bf:91:3e:72:9e:8a:0b:1a:42:89:88:17:04:fa:53:7f:0c:
7f:fb:b3:50:a4:01:03:3e:71:7b:e5:3c:34:0e:e2:a0:bb:01:
a2:92:cb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7rV+FG1Urrea5Hkfye7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1
OWU5M2EwHhcNMjYwNDE3MDkwMDM4WhcNMjYwNDE4MDkwMDM4WjAzMTEwLwYDVQQD
Eyg4NjI1N2I0MDM3MzQwMTc1ZTAxM2RkYTMyNTA2YjhmM2Q5YjBiNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zWMbNtvYO2cp/wuWiYXZCWZ3qyr
rN9ZhI9y5dRaohCVZhUyLqSLDUPPtWnayoy0+zIMP2/iAouREQtwaYWGxYE6ScdG
sx//q8HJbmVtGuRCfI2ldRs2rL+18eqGymFWirz2Nc/oJUgTpr5eAYGuQ2afnUfW
epI30O/M4fFpQNfBZ41nTh4nTT7JeMHn3k0HErJQYX9u842ze9UK8fogroC4FFCS
DqfDDOPJ5iE+MpZsgX9lJpQDTBt1JxFlxDOszLJZyijcmAUiVIpHpQxKnaxQdNh0
Sn85BpUn3A9ae0rZyLmg7TBqoG/QcrMLMjp/fI8VJ5h6PJjURljtmBjvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYle0A3NAF14BPdoyUGuPPZsLZGMB8GA1UdIwQY
MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt
ZGUwZWM3NmE0NjcyLzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy
LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv+YCSio
41NrcNUK0rt4Ml4JenCsebZrRA6SHVe72VFiJGR3E5dX54FNyIgjDeTrVxXoIT0I
QGwN1KJylW1hvFJ26rN9T5Tg7aqaF+pQ5uav6GKVf4QCI0/G58sZxpdYPginFugr
RPPu4xwOkWghVu0JZWdNYagtzwqUGFF3hI8f1cBBzFKJXTsXS+imgQx4Y+R9crNm
IVHn53OT+e7UJRAEqiyzhBYG3NAZqzYzWPG9GYZKU1aN5hDBCHANmVw00UoCQo9N
wtXtiIgZH4c8s+TkkIXWhuem3b+RPnKeigsaQomIFwT6U38Mf/uzUKQBAz5xe+U8
NA7ioLsBopLLAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:09 2026 by rpki-client