Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File: M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier: uVPzUISu631ylsrl2gHRtlDrJ0Hs0RDL+gSYhK25YLA=
Subject key identifier: 3D:AA:81:8C:24:89:66:1A:15:0E:1A:1E:98:FD:B8:AF:BA:6A:65:57
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019D981848C9F337CC08CFFA72A4BC5DBDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number: AD
Signing time: Thu 16 Apr 2026 21:00:21 +0000
Manifest this update: Thu 16 Apr 2026 21:00:21 +0000
Manifest next update: Fri 17 Apr 2026 21:00:21 +0000
Files and hashes: 1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: ACfaS9Ck93dz+WCmfAFctbSrYUFUQWpeglK3QQ0ZOV8=)
3: YeVLRWZskfx_IZGiLmT84waZsq0.roa (hash: hRBrTkDkDF9xPGZibtinblYHrG8tk7wxZI+ehCaks0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:48:c9:f3:37:cc:08:cf:fa:72:a4:bc:5d:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Apr 16 21:00:21 2026 GMT
Not After : Apr 17 21:00:21 2026 GMT
Subject: CN=3daa818c2489661a150e1a1e98fdb8afba6a6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:9a:33:de:45:7a:ef:f5:f0:23:88:87:e9:
1d:84:53:8a:54:a4:7b:86:19:3f:33:ed:2b:06:30:
26:be:45:a6:f3:2f:b8:d5:97:93:d9:36:4d:cc:c9:
c6:01:33:52:fd:e3:3d:00:2b:3a:cd:40:ae:55:c9:
ec:8f:21:7b:4b:61:0e:d7:b6:b0:4f:80:19:81:79:
8f:b8:b6:7b:57:21:68:7e:f8:bd:15:f5:58:08:a4:
cb:07:b3:4a:62:9a:eb:85:87:f4:91:85:85:44:19:
d5:42:d2:b5:4f:b0:52:95:9e:13:41:b8:2d:df:47:
31:47:2a:b6:01:e3:41:1f:14:a9:ae:26:75:2c:30:
f9:79:00:f9:79:a0:82:36:e1:86:a6:ce:47:51:7b:
54:fe:f5:c3:73:35:54:15:f6:6c:5b:b2:85:be:95:
8a:09:e8:cf:f5:ba:c4:75:84:ab:70:1b:1e:ce:90:
b7:6a:5c:5d:f5:ae:d2:ed:e6:c5:dc:2e:e6:dd:5c:
8c:01:65:74:f4:65:05:b8:fa:43:f4:d1:c8:a6:4e:
61:12:23:78:04:7b:de:9a:b5:fb:95:21:0b:5b:08:
df:1b:d9:d0:c7:cc:aa:00:70:5a:12:ca:11:20:23:
3a:1e:f9:de:3a:1a:1e:e4:86:6a:8a:d8:aa:e4:3d:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:81:8C:24:89:66:1A:15:0E:1A:1E:98:FD:B8:AF:BA:6A:65:57
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:f8:ad:0e:f8:9f:2f:0c:eb:83:80:a7:be:11:0a:92:50:
d8:a3:0c:f1:01:da:11:02:8f:91:30:14:c0:51:4d:fb:d8:01:
8c:18:5d:ed:ca:85:f7:12:8d:33:0c:1a:e2:b3:86:c2:50:c6:
61:30:72:b5:5d:81:9d:07:08:c3:09:41:9c:be:dc:5d:cf:2e:
39:f2:52:e6:bc:3d:9a:2e:12:3e:e4:c8:19:f3:68:ed:91:f4:
44:f3:cf:ba:f7:68:50:ea:16:bb:26:0a:49:d8:55:40:99:16:
40:eb:93:8f:7e:ac:d1:f6:45:19:e8:97:b6:7e:f0:e8:3d:f2:
a2:23:7c:49:43:0c:6d:1b:b2:6e:ce:1f:96:ab:df:da:66:48:
30:f0:4c:07:b8:e9:7b:76:9d:b9:57:56:c6:d4:27:9a:f8:8b:
01:2d:da:e2:71:24:0c:2c:94:5c:44:6b:fe:ea:2d:68:5c:90:
30:47:44:a0:03:62:bf:4b:dd:14:f9:70:b3:19:d6:5a:09:b2:
52:57:0d:0d:48:f9:7a:ee:bb:f6:9d:0e:ce:6f:38:7b:0f:f7:
3e:59:e5:ed:89:17:4a:ea:98:49:1d:64:5c:18:f7:31:8b:5c:
62:58:ed:e5:1e:60:93:ad:c7:18:e0:c9:8b:66:8d:17:a0:d1:
de:1e:13:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGEjJ8zfMCM/6cqS8Xb34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTM0NzI0OTQ1ZGE3NjkzMGZlNzkxZjYwODk2Yzk2ZGZm
Y2VjODQwHhcNMjYwNDE2MjEwMDIxWhcNMjYwNDE3MjEwMDIxWjAzMTEwLwYDVQQD
EygzZGFhODE4YzI0ODk2NjFhMTUwZTFhMWU5OGZkYjhhZmJhNmE2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCaM95Feu/18COIh+kdhFOKVKR7
hhk/M+0rBjAmvkWm8y+41ZeT2TZNzMnGATNS/eM9ACs6zUCuVcnsjyF7S2EO17aw
T4AZgXmPuLZ7VyFofvi9FfVYCKTLB7NKYprrhYf0kYWFRBnVQtK1T7BSlZ4TQbgt
30cxRyq2AeNBHxSpriZ1LDD5eQD5eaCCNuGGps5HUXtU/vXDczVUFfZsW7KFvpWK
CejP9brEdYSrcBsezpC3alxd9a7S7ebF3C7m3VyMAWV09GUFuPpD9NHIpk5hEiN4
BHvemrX7lSELWwjfG9nQx8yqAHBaEsoRICM6HvneOhoe5IZqitiq5D1UNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2qgYwkiWYaFQ4aHpj9uK+6amVXMB8GA1UdIwQY
MBaAFDOjRySUXadpMP55H2CJbJbf/OyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZOSEpKUmRwMmt3X25rZllJbHNsdF84N0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NWNjYTYtMjdkMC00NTFjLWJmNzUt
NjJiZTM0YmFjNjMyLzEvTTZOSEpKUmRwMmt3X25rZllJbHNsdF84N0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NWNjYTYtMjdkMC00NTFjLWJmNzUtNjJiZTM0YmFjNjMy
LzEvTTZOSEpKUmRwMmt3X25rZllJbHNsdF84N0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxT4rQ74
ny8M64OAp74RCpJQ2KMM8QHaEQKPkTAUwFFN+9gBjBhd7cqF9xKNMwwa4rOGwlDG
YTBytV2BnQcIwwlBnL7cXc8uOfJS5rw9mi4SPuTIGfNo7ZH0RPPPuvdoUOoWuyYK
SdhVQJkWQOuTj36s0fZFGeiXtn7w6D3yoiN8SUMMbRuybs4flqvf2mZIMPBMB7jp
e3aduVdWxtQnmviLAS3a4nEkDCyUXERr/uotaFyQMEdEoANiv0vdFPlwsxnWWgmy
UlcNDUj5eu679p0Ozm84ew/3Plnl7YkXSuqYSR1kXBj3MYtcYljt5R5gk63HGODJ
i2aNF6DR3h4T1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:04 2026 by rpki-client