Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier: 32JGPEXp4z4zqXB41n6WdjUeCQse6t0+ffzd7hoR4Vk=
Subject key identifier: 47:F6:61:1B:0A:0C:35:9E:B4:7D:BE:30:55:7D:07:64:C2:74:AB:D1
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 019D98189A6460F15572F24D65BE0F8FA380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number: 0821
Signing time: Thu 16 Apr 2026 21:00:42 +0000
Manifest this update: Thu 16 Apr 2026 21:00:42 +0000
Manifest next update: Fri 17 Apr 2026 21:00:42 +0000
Files and hashes: 1: 4yAos7CZgWKf3gn3IrsDl-srEto.roa (hash: APm7pBB8tOvmNKA+K6EEmrpwAa/2uNe5vUUzyTIaj0k=)
2: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
3: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: PeyEsjQmzwHFyXHlhAUSdPqw5yJi6/Rc1XmGeP/IS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9a:64:60:f1:55:72:f2:4d:65:be:0f:8f:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Apr 16 21:00:42 2026 GMT
Not After : Apr 17 21:00:42 2026 GMT
Subject: CN=47f6611b0a0c359eb47dbe30557d0764c274abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:64:e2:a0:0c:c5:e1:4d:28:33:be:34:b2:
7a:e3:a1:fb:33:64:d3:5a:21:f2:eb:71:1e:f6:d5:
ec:c7:41:17:21:4b:05:1e:ba:01:33:ef:35:87:1c:
f6:5e:04:b5:2b:dd:9d:d0:15:3f:5e:cf:b5:f3:56:
53:4d:c8:6b:da:f4:6d:8e:58:a8:6d:36:df:64:5b:
70:ea:16:37:cf:b6:00:db:b0:6b:e8:1d:8c:c7:4d:
ae:81:db:c8:49:8a:5c:07:95:8c:2c:65:23:13:cb:
32:19:1d:55:58:a8:5a:1a:36:7f:45:88:63:d4:9d:
88:14:85:fb:04:d2:bd:b8:de:66:49:80:f9:55:f9:
e7:e3:39:25:90:aa:9d:04:a1:1f:f5:16:00:76:06:
be:6c:b0:27:6e:a8:49:ab:e1:ce:4f:f6:a7:ce:ed:
57:70:80:34:34:61:4f:3b:32:17:86:67:97:f1:ac:
b1:85:f4:84:31:24:56:59:67:e6:eb:bc:e7:3c:4c:
b2:a7:a0:7c:65:79:5e:60:81:15:32:c2:3c:90:69:
2b:fa:b6:10:c1:b4:03:a6:3f:d0:d7:ef:36:06:b1:
28:79:b7:7e:e2:5f:99:e2:df:4d:2a:b6:88:4a:e5:
cc:c3:35:9a:af:75:b4:3b:9e:80:66:c6:35:63:4f:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:61:1B:0A:0C:35:9E:B4:7D:BE:30:55:7D:07:64:C2:74:AB:D1
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:93:43:96:de:b0:a3:d9:01:3e:48:88:d7:9f:df:fd:8e:
35:35:a3:f3:f2:5b:d1:44:e2:34:de:dd:e5:e8:db:01:d8:68:
a8:35:fd:79:7b:e2:15:5e:86:3f:80:c2:d1:0d:e9:9e:26:cd:
fb:77:0e:98:be:05:b0:e2:31:dd:cd:8b:ab:08:43:5a:5e:a8:
d7:cb:aa:3f:cb:a4:5a:d2:a9:b9:0d:9e:9e:81:7a:45:a9:22:
e7:f1:88:3f:51:6b:bc:cc:7b:c5:12:ef:a5:06:bf:d4:71:bd:
31:01:02:f5:92:6d:dd:f3:80:da:cd:9a:e8:b4:14:4e:53:02:
bd:16:b5:cb:71:95:36:cf:5c:cf:19:7b:21:b2:af:bd:d1:97:
59:cc:06:ad:25:13:26:17:95:49:bd:62:76:43:c9:b9:29:63:
51:5c:51:ca:ff:1d:18:0c:ec:39:33:d2:f8:9f:c0:87:b5:0f:
27:8a:4e:e3:fb:5c:1d:70:63:e1:3b:97:bf:63:bd:d1:d6:04:
68:a1:cc:ff:7d:9b:77:50:90:6f:8d:53:ad:8c:91:67:35:b7:
75:5d:48:0b:e8:5c:41:c3:50:92:d3:25:79:67:80:b4:19:2f:
0f:97:ca:51:cc:76:d5:6c:f0:cd:04:99:a2:dc:65:bf:49:a5:
49:fc:3f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGJpkYPFVcvJNZb4Pj6OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjYwNDE2MjEwMDQyWhcNMjYwNDE3MjEwMDQyWjAzMTEwLwYDVQQD
Eyg0N2Y2NjExYjBhMGMzNTllYjQ3ZGJlMzA1NTdkMDc2NGMyNzRhYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNBk4qAMxeFNKDO+NLJ646H7M2TT
WiHy63Ee9tXsx0EXIUsFHroBM+81hxz2XgS1K92d0BU/Xs+181ZTTchr2vRtjlio
bTbfZFtw6hY3z7YA27Br6B2Mx02ugdvISYpcB5WMLGUjE8syGR1VWKhaGjZ/RYhj
1J2IFIX7BNK9uN5mSYD5Vfnn4zklkKqdBKEf9RYAdga+bLAnbqhJq+HOT/anzu1X
cIA0NGFPOzIXhmeX8ayxhfSEMSRWWWfm67znPEyyp6B8ZXleYIEVMsI8kGkr+rYQ
wbQDpj/Q1+82BrEoebd+4l+Z4t9NKraISuXMwzWar3W0O56AZsY1Y0/XDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf2YRsKDDWetH2+MFV9B2TCdKvRMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3uTQ5be
sKPZAT5IiNef3/2ONTWj8/Jb0UTiNN7d5ejbAdhoqDX9eXviFV6GP4DC0Q3pnibN
+3cOmL4FsOIx3c2LqwhDWl6o18uqP8ukWtKpuQ2enoF6Raki5/GIP1FrvMx7xRLv
pQa/1HG9MQEC9ZJt3fOA2s2a6LQUTlMCvRa1y3GVNs9czxl7IbKvvdGXWcwGrSUT
JheVSb1idkPJuSljUVxRyv8dGAzsOTPS+J/Ah7UPJ4pO4/tcHXBj4TuXv2O90dYE
aKHM/32bd1CQb41TrYyRZzW3dV1IC+hcQcNQktMleWeAtBkvD5fKUcx21WzwzQSZ
otxlv0mlSfw/tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:16 2026 by rpki-client