Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: QjoxAXIbqwsSlKgCH8AHokeAnuc9ZMFPz0Rqxq9i4f8=
Subject key identifier: CC:F7:88:A9:33:94:FA:B2:DE:BD:4D:E5:D2:9F:31:BC:CA:B6:7F:53
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019D996266CFAF65D70B74A9396DDED2789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: pGMa9cNBvZZ0LO6IFxZ2uUGRalYYADhOU/Yzx3xHcOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:66:cf:af:65:d7:0b:74:a9:39:6d:de:d2:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=ccf788a93394fab2debd4de5d29f31bccab67f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:09:f0:0c:c9:b0:b2:d6:33:59:aa:f7:af:
d9:7f:d5:19:0a:b5:e3:bc:0f:ec:bb:cf:8a:eb:44:
f5:3d:15:12:d3:0d:e3:90:60:a2:73:dc:58:a0:4a:
8f:0f:87:f0:8d:cb:00:6d:dc:59:36:f7:46:7a:e0:
54:94:f2:7c:38:28:de:6d:c7:83:c6:f7:50:d6:e4:
ad:35:de:75:a4:61:04:ba:63:8f:99:65:9c:df:a8:
b7:bd:41:ff:39:52:0a:bf:fb:df:02:d7:af:50:90:
ec:80:8c:b9:ab:b8:0c:9f:3f:f1:6a:b1:a9:65:fe:
14:ff:3e:bc:34:4c:08:79:76:13:9a:9b:99:0e:33:
15:9e:1f:ae:b3:55:25:a2:4b:a4:ba:22:a4:48:f6:
20:28:f3:e1:7a:0a:1a:3f:db:fb:24:aa:8a:29:2d:
7d:52:fc:23:a8:e2:80:8a:43:ad:ff:15:b2:36:30:
35:68:f3:18:59:31:67:ae:5b:47:60:61:a7:22:b3:
a2:1b:58:49:4f:f2:38:55:3c:53:df:a1:f5:1a:ff:
4e:84:18:82:fe:6a:0a:48:69:c2:45:f1:d5:43:1f:
46:10:34:57:08:ed:3b:f9:50:b6:f8:fd:49:2d:05:
fd:a9:b2:3b:b2:96:d0:3a:3b:b3:f9:74:43:96:f6:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:88:A9:33:94:FA:B2:DE:BD:4D:E5:D2:9F:31:BC:CA:B6:7F:53
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:d3:5e:3d:be:1f:1d:4c:e1:ab:5e:80:b9:8b:fb:dc:ed:
35:a7:62:8d:67:77:9f:fc:bd:c5:28:10:26:a1:e5:5e:d2:ce:
53:66:f2:b5:e0:9c:f5:d7:2c:f5:78:eb:e1:8e:ed:1b:8f:e1:
e3:16:0f:8a:42:ff:81:12:e5:29:37:b9:a0:b2:23:af:54:c1:
34:dc:5a:f3:ec:73:23:9c:1f:db:0f:9b:3d:ad:d5:d3:ab:98:
28:7e:82:a3:77:66:f0:0c:2e:a1:55:a9:27:cc:68:f4:d5:85:
40:4f:31:ea:a4:36:fe:e9:8c:69:90:30:fd:01:e3:15:f7:4f:
b2:d6:a5:50:01:9b:78:44:1e:67:dc:67:0d:f0:36:dd:e0:89:
89:58:be:b8:73:25:e5:d8:d9:db:6a:b0:da:a6:8e:78:2d:37:
4f:e5:33:f7:5e:8a:62:7d:74:c4:43:15:1f:d3:95:f9:77:b3:
f5:2f:13:f5:c2:d5:55:d2:b7:8f:3c:b5:e3:9e:0e:00:c6:2a:
3a:89:88:97:93:b4:80:c7:66:3f:5a:3e:bb:98:87:71:0c:e8:
3a:31:55:43:a6:f0:78:33:b2:3d:eb:c3:30:d2:c1:1e:73:b0:
50:bf:a5:b4:aa:1d:67:28:93:31:b1:ed:b7:8b:d1:3c:23:8a:
b9:0e:24:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYmbPr2XXC3SpOW3e0nifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0
NTNmNzEwHhcNMjYwNDE3MDMwMDU1WhcNMjYwNDE4MDMwMDU1WjAzMTEwLwYDVQQD
EyhjY2Y3ODhhOTMzOTRmYWIyZGViZDRkZTVkMjlmMzFiY2NhYjY3ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZAJ8AzJsLLWM1mq96/Zf9UZCrXj
vA/su8+K60T1PRUS0w3jkGCic9xYoEqPD4fwjcsAbdxZNvdGeuBUlPJ8OCjebceD
xvdQ1uStNd51pGEEumOPmWWc36i3vUH/OVIKv/vfAtevUJDsgIy5q7gMnz/xarGp
Zf4U/z68NEwIeXYTmpuZDjMVnh+us1UlokukuiKkSPYgKPPhegoaP9v7JKqKKS19
UvwjqOKAikOt/xWyNjA1aPMYWTFnrltHYGGnIrOiG1hJT/I4VTxT36H1Gv9OhBiC
/moKSGnCRfHVQx9GEDRXCO07+VC2+P1JLQX9qbI7spbQOjuz+XRDlvZP7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz3iKkzlPqy3r1N5dKfMbzKtn9TMB8GA1UdIwQY
MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct
NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl
LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIvTXj2+
Hx1M4ategLmL+9ztNadijWd3n/y9xSgQJqHlXtLOU2byteCc9dcs9Xjr4Y7tG4/h
4xYPikL/gRLlKTe5oLIjr1TBNNxa8+xzI5wf2w+bPa3V06uYKH6Co3dm8AwuoVWp
J8xo9NWFQE8x6qQ2/umMaZAw/QHjFfdPstalUAGbeEQeZ9xnDfA23eCJiVi+uHMl
5djZ22qw2qaOeC03T+Uz916KYn10xEMVH9OV+Xez9S8T9cLVVdK3jzy1454OAMYq
OomIl5O0gMdmP1o+u5iHcQzoOjFVQ6bweDOyPevDMNLBHnOwUL+ltKodZyiTMbHt
t4vRPCOKuQ4kJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:16 2026 by rpki-client