Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: B+3Qgi4VJXDvMS4vM7N8Zr9nV32AL8JIyGewYvHsOsw=
Subject key identifier: E6:D8:EB:84:24:C0:C7:D4:0C:65:12:D6:85:02:C0:CE:6C:85:75:B3
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019D9A74F5AAB525DBD43D10E530F11CA614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: WycQmb07Qn3moBBMnhG3KgszCIXGWu+ILFaQmhnUBgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f5:aa:b5:25:db:d4:3d:10:e5:30:f1:1c:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=e6d8eb8424c0c7d40c6512d68502c0ce6c8575b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:e8:9e:02:18:84:c2:6e:00:4e:85:e7:11:
e2:af:d0:d6:7e:17:62:c9:f2:12:52:58:a8:75:17:
29:b6:a0:03:79:da:d1:40:53:48:05:2c:c5:0b:3f:
46:bd:17:f5:a4:8b:95:3b:5e:2c:30:3a:b6:20:71:
40:7c:71:c1:f4:c2:12:74:0c:49:aa:1b:0a:a7:d7:
14:cb:77:38:55:1e:a9:8a:b5:81:dd:c0:68:7e:47:
64:29:5d:db:5d:a9:61:14:ff:62:c9:1a:b8:e2:9b:
94:a0:9e:30:ad:a3:0b:01:3e:9f:7e:ca:2f:1a:53:
f3:f9:95:2f:f3:4a:c3:d1:1a:9e:b0:12:dd:dc:9c:
2f:61:7b:a3:22:15:a4:b5:bc:0a:22:6b:19:00:32:
5d:61:7e:87:d7:af:5f:5b:c2:54:c8:49:e1:0b:7e:
d4:06:d2:4d:f7:6d:53:2c:65:bb:0d:e3:47:7d:88:
0d:8a:bd:9b:a7:31:d4:f4:d7:82:10:c3:0d:92:ce:
fb:48:92:d4:8f:e1:95:6d:2f:f9:20:eb:85:96:3c:
ea:95:9b:f3:46:8a:8d:4a:c7:60:2a:54:9b:37:a4:
b7:46:4b:93:4b:38:35:2d:06:e7:e2:f3:d8:56:38:
d6:ec:e8:80:72:99:d7:bd:c6:bf:5b:5e:54:ef:c0:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D8:EB:84:24:C0:C7:D4:0C:65:12:D6:85:02:C0:CE:6C:85:75:B3
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fc:8f:11:b9:32:a7:60:92:ee:ab:23:1f:af:b3:8c:90:9c:
e2:5b:13:04:05:33:3c:4b:2d:e3:c1:12:7d:dd:48:47:bb:85:
de:36:e8:86:4f:70:27:66:2d:b2:ba:c8:09:4d:c2:93:de:06:
c7:18:eb:20:b9:ec:13:3c:e3:86:cb:e4:a2:e4:86:69:51:e4:
6b:a0:34:71:94:40:e2:06:92:86:a2:da:3e:bc:24:68:01:61:
f8:c8:fc:18:63:50:41:52:4d:ff:b8:91:88:4a:fb:9b:50:48:
5f:fd:f8:8b:e3:d8:ba:11:fa:fe:37:e2:f7:2b:e1:94:77:50:
84:94:46:d7:a8:b0:58:36:16:05:1b:1f:33:13:9b:d7:00:09:
8b:37:74:78:5f:0f:a5:d7:f7:af:94:09:19:4e:79:da:24:b2:
94:02:42:4d:cc:9a:67:9b:16:53:8e:6c:8d:59:a7:97:40:da:
61:3f:fe:3b:fa:4c:a6:d8:4b:2b:93:88:15:a3:38:0c:3a:60:
b9:91:94:79:32:af:eb:48:20:1d:f4:78:2c:60:70:10:5f:c5:
ec:60:e7:c7:ec:2c:2f:0d:15:14:0f:2a:70:b4:88:17:98:77:
5d:47:e4:5c:c5:d7:b9:94:83:46:82:cf:f7:df:a4:0a:bf:2a:
32:40:bc:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPWqtSXb1D0Q5TDxHKYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl
MGNmOGEwHhcNMjYwNDE3MDgwMDQ5WhcNMjYwNDE4MDgwMDQ5WjAzMTEwLwYDVQQD
EyhlNmQ4ZWI4NDI0YzBjN2Q0MGM2NTEyZDY4NTAyYzBjZTZjODU3NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxLongIYhMJuAE6F5xHir9DWfhdi
yfISUliodRcptqADedrRQFNIBSzFCz9GvRf1pIuVO14sMDq2IHFAfHHB9MISdAxJ
qhsKp9cUy3c4VR6pirWB3cBofkdkKV3bXalhFP9iyRq44puUoJ4wraMLAT6ffsov
GlPz+ZUv80rD0RqesBLd3JwvYXujIhWktbwKImsZADJdYX6H169fW8JUyEnhC37U
BtJN921TLGW7DeNHfYgNir2bpzHU9NeCEMMNks77SJLUj+GVbS/5IOuFljzqlZvz
RoqNSsdgKlSbN6S3RkuTSzg1LQbn4vPYVjjW7OiAcpnXvca/W15U78C8JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObY64QkwMfUDGUS1oUCwM5shXWzMB8GA1UdIwQY
MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt
ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5
LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvyPEbky
p2CS7qsjH6+zjJCc4lsTBAUzPEst48ESfd1IR7uF3jbohk9wJ2YtsrrICU3Ck94G
xxjrILnsEzzjhsvkouSGaVHka6A0cZRA4gaShqLaPrwkaAFh+Mj8GGNQQVJN/7iR
iEr7m1BIX/34i+PYuhH6/jfi9yvhlHdQhJRG16iwWDYWBRsfMxOb1wAJizd0eF8P
pdf3r5QJGU552iSylAJCTcyaZ5sWU45sjVmnl0DaYT/+O/pMpthLK5OIFaM4DDpg
uZGUeTKv60ggHfR4LGBwEF/F7GDnx+wsLw0VFA8qcLSIF5h3XUfkXMXXuZSDRoLP
99+kCr8qMkC88g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:40 2026 by rpki-client