Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: FJYkjE+1dm6wEb83ZDF2HBk25sGWc4b38uCOOWoHouE=
Subject key identifier: 24:67:1E:E3:27:C7:06:E1:7C:CE:F7:71:59:CE:11:B7:D0:6F:DA:5A
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019D9AE2823898EF39498A815F909D760A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 05AD
Signing time: Fri 17 Apr 2026 10:00:28 +0000
Manifest this update: Fri 17 Apr 2026 10:00:28 +0000
Manifest next update: Sat 18 Apr 2026 10:00:28 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: LfLdRDtUwafS7E6VWyXgK2UQq9g.asa (hash: lI3eaRCZDcPeEC/xgibETDzOKxk64bCjv0zsjJHosh8=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: MmyKxs/uiiDnr4WXJALnxAn1QLYE/3sHbzXmAA9qCVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:82:38:98:ef:39:49:8a:81:5f:90:9d:76:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Apr 17 10:00:28 2026 GMT
Not After : Apr 18 10:00:28 2026 GMT
Subject: CN=24671ee327c706e17ccef77159ce11b7d06fda5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:8e:51:70:23:b5:3c:c1:79:43:0f:65:c0:
cb:1a:22:60:f4:35:4e:cf:6e:65:24:12:4b:e2:3d:
83:f2:74:bf:48:b0:3a:68:f8:fb:bf:c8:a9:b8:2a:
be:dd:b1:fb:fa:80:47:5d:46:9c:76:c2:ff:fb:de:
3d:40:44:89:ef:03:76:5e:d5:aa:bb:32:c6:3b:24:
22:bb:f0:fb:cc:5c:11:05:c7:aa:5f:6f:75:b3:c1:
7f:8e:db:55:8b:47:3c:03:40:d4:04:82:35:f0:d0:
d4:21:a6:36:b3:80:97:7c:5e:f5:66:42:ee:ea:2e:
a3:5d:17:af:91:9f:d1:10:5d:de:d2:bd:7e:8a:2a:
0e:f9:d2:04:42:6c:55:49:ea:5a:e6:6d:c0:00:cd:
6f:35:65:7b:6e:59:30:37:a7:a9:4c:19:8c:b3:1b:
3c:23:9d:ac:7a:fe:5e:2b:9f:f8:3b:df:f5:83:de:
a0:74:ff:93:75:c1:0f:5b:22:e9:b0:45:32:b9:c9:
8e:9c:6e:db:d4:9a:f2:a8:6a:bc:a5:35:e5:af:5d:
a4:b9:6f:7e:77:23:e4:34:a5:0e:3f:44:e7:04:20:
c5:b9:c5:a8:de:04:b7:a1:aa:3b:e4:2c:c2:33:de:
e2:76:ee:5e:d2:2b:da:1e:4c:ce:b0:b5:bc:38:6a:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:1E:E3:27:C7:06:E1:7C:CE:F7:71:59:CE:11:B7:D0:6F:DA:5A
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:d4:bd:b2:4a:27:e6:69:be:0c:ce:7d:92:16:67:bb:05:
21:7d:35:dc:bb:f2:1b:14:4e:63:d3:01:ad:7a:68:c7:07:96:
e2:f8:15:b2:95:09:99:7c:ae:39:93:ad:05:17:87:96:45:e4:
1b:d6:a5:ce:04:38:e7:4e:20:84:9f:d9:fd:78:25:6e:c3:2a:
7c:bb:91:6e:41:66:9f:44:0a:32:ee:6d:27:f9:4c:b3:46:50:
52:17:54:dd:b7:38:89:5c:69:22:5d:54:09:3a:3f:91:8a:ed:
bb:4f:91:c4:49:40:fb:52:e6:4a:88:05:3d:73:29:d3:1a:70:
ac:25:d4:26:92:32:b9:19:5d:e2:d2:96:bc:26:da:08:b0:b5:
96:71:48:8c:ed:42:24:2b:d8:21:3e:a1:71:94:17:0e:94:d8:
9c:b8:f8:56:2b:50:ae:1a:36:6e:7a:e5:fa:98:76:db:47:db:
94:81:4d:a0:66:30:16:89:22:1f:eb:1f:ae:d7:a3:e2:00:5b:
3d:71:29:3e:41:e3:53:96:6f:df:60:45:2d:b1:8e:ae:de:75:
cb:93:9a:89:13:02:a6:f7:e0:2b:ed:04:1e:bd:d6:b2:6b:57:
c3:fa:92:7b:93:30:06:ea:1e:83:42:56:f2:7f:b9:b3:51:1c:
50:1c:fc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4oI4mO85SYqBX5CddgozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1
NDcyZWMwHhcNMjYwNDE3MTAwMDI4WhcNMjYwNDE4MTAwMDI4WjAzMTEwLwYDVQQD
EygyNDY3MWVlMzI3YzcwNmUxN2NjZWY3NzE1OWNlMTFiN2QwNmZkYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QyOUXAjtTzBeUMPZcDLGiJg9DVO
z25lJBJL4j2D8nS/SLA6aPj7v8ipuCq+3bH7+oBHXUacdsL/+949QESJ7wN2XtWq
uzLGOyQiu/D7zFwRBceqX291s8F/jttVi0c8A0DUBII18NDUIaY2s4CXfF71ZkLu
6i6jXRevkZ/REF3e0r1+iioO+dIEQmxVSepa5m3AAM1vNWV7blkwN6epTBmMsxs8
I52sev5eK5/4O9/1g96gdP+TdcEPWyLpsEUyucmOnG7b1JryqGq8pTXlr12kuW9+
dyPkNKUOP0TnBCDFucWo3gS3oao75CzCM97idu5e0ivaHkzOsLW8OGpCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRnHuMnxwbhfM73cVnOEbfQb9paMB8GA1UdIwQY
MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt
N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw
LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8jUvbJK
J+ZpvgzOfZIWZ7sFIX013LvyGxROY9MBrXpoxweW4vgVspUJmXyuOZOtBReHlkXk
G9alzgQ4504ghJ/Z/XglbsMqfLuRbkFmn0QKMu5tJ/lMs0ZQUhdU3bc4iVxpIl1U
CTo/kYrtu0+RxElA+1LmSogFPXMp0xpwrCXUJpIyuRld4tKWvCbaCLC1lnFIjO1C
JCvYIT6hcZQXDpTYnLj4VitQrho2bnrl+ph220fblIFNoGYwFokiH+sfrtej4gBb
PXEpPkHjU5Zv32BFLbGOrt51y5OaiRMCpvfgK+0EHr3WsmtXw/qSe5MwBuoeg0JW
8n+5s1EcUBz8tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:20 2026 by rpki-client