Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: PDgTmXiBnH2cNaGXUaNXKKJlg+mVotj6AKmV4WjEQyI=
Subject key identifier: 4E:77:CE:17:4D:2B:CD:1F:88:AC:16:0D:5B:A1:4D:F1:45:5F:2C:41
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 019D9C2C6AF49ECFCACC45345261D9D52773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (hash: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw=)
2: 7ufFK9wMYQIlfPF5mBmnlqE81ZE.roa (hash: byv9bKYSFyW281U6XJiGXV1al8HvRRvhSL2jHGqxWtU=)
3: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (hash: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8=)
4: hckySekDjcPjJjmCb8xV-0niibA.roa (hash: rABvuPwZ4k/dR/LQvlCJNpnmkfZ6RaaAKF1LFAoY6XM=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: FnPPLb0zCOHv6r6UJJL0Whl8qNBkERWF1gF4KLKbvCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:6a:f4:9e:cf:ca:cc:45:34:52:61:d9:d5:27:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=4e77ce174d2bcd1f88ac160d5ba14df1455f2c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:47:73:66:78:f9:db:4a:ae:43:9f:c2:f9:
f7:2c:a3:5b:62:dc:cc:a4:8d:34:c7:2d:f4:d5:90:
f4:30:3d:b6:cf:32:a2:38:2f:c2:73:45:69:4f:73:
e3:1e:21:d7:23:fd:2b:ba:79:ff:97:be:e8:b5:0c:
e1:fa:7f:94:9f:e0:37:3c:ed:c8:af:85:ce:9f:33:
32:85:ec:c7:ca:e7:1c:68:9a:41:a1:c8:f3:80:e5:
44:c1:0e:60:41:3f:35:4d:71:cb:85:df:bc:bc:8f:
aa:84:ba:35:73:f1:ea:81:7e:29:20:f1:d6:2b:97:
3f:a1:13:46:45:3c:62:e6:2d:30:69:2b:fd:8f:44:
c5:ae:c6:9c:06:77:2b:f6:90:b6:3e:48:c1:32:f8:
0f:0a:13:8c:a5:b0:a3:bc:df:e4:a8:f0:21:c2:d3:
94:75:3c:ac:b9:0b:92:10:88:f1:80:b8:60:a3:73:
7a:ea:5a:af:48:f6:40:54:d2:55:08:ee:2d:18:cf:
2c:13:77:2d:e8:49:2a:18:db:5e:25:5e:74:83:93:
db:c7:7e:00:70:52:95:fe:2b:c0:72:87:b0:0f:be:
42:1d:f5:e7:10:db:af:94:08:bd:25:36:47:58:2e:
63:d8:63:41:7a:23:2c:f5:da:e7:24:29:f3:5a:34:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:CE:17:4D:2B:CD:1F:88:AC:16:0D:5B:A1:4D:F1:45:5F:2C:41
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:af:3e:6e:bb:15:a8:c1:5a:8a:a6:af:6e:4d:6d:f1:15:
e3:9e:98:1c:a2:04:31:01:d9:3e:1a:aa:6f:29:e6:75:59:e4:
a9:56:b6:36:0a:e6:0d:17:e6:bd:a6:09:19:11:5b:7e:2f:7c:
13:58:16:6e:3f:e8:18:6f:28:07:c8:2d:bb:ad:c9:58:ad:b6:
2b:8b:0a:14:5a:95:6c:17:77:f7:98:94:c8:8a:20:7c:c3:58:
7c:82:9f:5a:f7:e1:82:5c:f3:35:1c:40:89:7c:47:df:06:f6:
c5:9b:4f:8e:2f:9c:47:2d:b2:b3:bd:9e:a2:c7:4b:63:de:2f:
a6:03:64:6c:60:28:ab:cd:a3:28:ea:ea:9a:e5:48:aa:5a:8e:
31:4b:75:b6:b4:3f:08:a1:77:60:e9:b4:8e:c0:d8:65:7d:f2:
0a:b1:35:ea:99:a9:74:58:09:58:0d:d5:91:46:7e:e4:2e:69:
fc:e8:c4:85:e0:77:ca:97:41:a2:71:e4:8f:a9:cb:96:1f:88:
7c:5e:cf:07:5f:26:38:46:7f:04:a8:b9:77:28:db:a3:b9:45:
d9:ca:2c:a5:15:7e:d9:1e:ef:ff:c8:4a:55:52:b8:c1:9b:91:
43:ae:93:cd:eb:d0:8a:fb:7b:e7:99:ee:c9:ae:ee:f5:06:b9:
41:91:66:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLGr0ns/KzEU0UmHZ1SdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjYwNDE3MTYwMDQ5WhcNMjYwNDE4MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZTc3Y2UxNzRkMmJjZDFmODhhYzE2MGQ1YmExNGRmMTQ1NWYyYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fNHc2Z4+dtKrkOfwvn3LKNbYtzM
pI00xy301ZD0MD22zzKiOC/Cc0VpT3PjHiHXI/0runn/l77otQzh+n+Un+A3PO3I
r4XOnzMyhezHyuccaJpBocjzgOVEwQ5gQT81TXHLhd+8vI+qhLo1c/HqgX4pIPHW
K5c/oRNGRTxi5i0waSv9j0TFrsacBncr9pC2PkjBMvgPChOMpbCjvN/kqPAhwtOU
dTysuQuSEIjxgLhgo3N66lqvSPZAVNJVCO4tGM8sE3ct6EkqGNteJV50g5Pbx34A
cFKV/ivAcoewD75CHfXnENuvlAi9JTZHWC5j2GNBeiMs9drnJCnzWjTUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE53zhdNK80fiKwWDVuhTfFFXyxBMB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9mvPm67
FajBWoqmr25NbfEV456YHKIEMQHZPhqqbynmdVnkqVa2NgrmDRfmvaYJGRFbfi98
E1gWbj/oGG8oB8gtu63JWK22K4sKFFqVbBd395iUyIogfMNYfIKfWvfhglzzNRxA
iXxH3wb2xZtPji+cRy2ys72eosdLY94vpgNkbGAoq82jKOrqmuVIqlqOMUt1trQ/
CKF3YOm0jsDYZX3yCrE16pmpdFgJWA3VkUZ+5C5p/OjEheB3ypdBonHkj6nLlh+I
fF7PB18mOEZ/BKi5dyjbo7lF2cospRV+2R7v/8hKVVK4wZuRQ66TzevQivt755nu
ya7u9Qa5QZFmXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:07 2026 by rpki-client