Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: sFnhhVuzqwUAgVP8VxpeWByHW+ExqKvBshnSudX/wYs=
Subject key identifier: 22:AE:65:09:40:6D:95:16:C6:D2:2B:C2:53:F7:0D:4B:D3:D2:29:64
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019D984FC26DD55740016E85C67C1099D420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:00:57 +0000
Manifest this update: Thu 16 Apr 2026 22:00:57 +0000
Manifest next update: Fri 17 Apr 2026 22:00:57 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: owB9AqJ1KTcPkxvNqEbHfIjtQ8Cq+IAuDWuM/olmelc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:c2:6d:d5:57:40:01:6e:85:c6:7c:10:99:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Apr 16 22:00:57 2026 GMT
Not After : Apr 17 22:00:57 2026 GMT
Subject: CN=22ae6509406d9516c6d22bc253f70d4bd3d22964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:74:bd:a7:02:22:2a:f9:93:78:de:21:4c:
41:f8:3e:a4:00:fd:de:09:a0:21:81:8f:17:cb:cb:
34:ef:86:72:53:e7:26:18:8b:5e:89:ec:d1:b6:53:
d9:de:d7:1e:a2:a5:60:f2:42:c8:fb:1a:24:0d:85:
15:9c:f9:83:b6:e6:d4:da:bd:fb:2a:46:7a:76:a0:
42:63:4f:89:86:ee:c5:76:a4:71:0b:f0:db:5b:c4:
e2:07:2c:ce:ab:a9:5e:8c:84:ef:8c:23:62:17:07:
86:9b:5d:f7:31:3c:76:50:90:91:eb:2f:a9:d7:57:
8c:d1:26:4a:da:75:12:a1:5c:ad:fa:be:cb:6b:40:
2d:d3:40:ba:50:b0:5d:84:53:cb:22:58:1f:e7:02:
82:4b:ba:44:a7:e3:df:8e:6b:09:5e:af:11:1b:1d:
7b:4f:21:4f:ce:ba:cb:dc:ac:8b:e0:b5:73:f4:04:
fb:bb:a4:7e:9d:6d:71:be:23:79:fc:8f:e2:33:36:
80:e2:a0:8d:3d:0a:59:a0:02:60:5f:ef:4c:32:d5:
23:fe:80:8f:ab:f6:9f:6d:63:6c:f1:2e:29:d6:54:
65:1a:b3:82:9e:ad:e6:a5:b0:8e:50:14:ff:c8:6c:
f5:ad:a3:44:69:4c:f7:d0:1a:c9:a4:16:e3:71:59:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:65:09:40:6D:95:16:C6:D2:2B:C2:53:F7:0D:4B:D3:D2:29:64
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:b1:46:2c:a8:36:b0:b8:4d:c7:c3:86:83:51:e2:30:46:
8c:74:56:73:bb:80:34:86:9e:50:89:ef:3e:df:be:0a:8b:f9:
e5:01:71:87:04:38:76:b7:cc:d3:71:6c:85:6e:f4:62:54:7a:
db:ff:bc:11:ca:5d:88:65:a2:88:22:72:e9:42:a1:ea:e1:5b:
31:38:18:37:ca:0c:e0:25:c2:be:10:75:67:8e:b5:f8:41:a1:
73:5e:77:36:22:b4:55:9d:00:fa:be:75:25:bd:06:9f:58:df:
6a:a4:6b:b7:98:ef:07:45:40:8d:00:92:c4:52:90:cc:e0:89:
b8:7e:43:47:a3:e7:1e:62:e4:1d:02:3b:bb:b1:6b:2b:7e:c4:
50:5c:c7:2c:31:75:32:93:6f:e7:d3:e9:d9:82:93:0a:bc:60:
f9:ea:a7:7f:b9:46:6a:6e:03:55:c1:68:1a:0b:0d:72:ee:59:
10:6e:0a:84:76:f7:ff:60:34:17:70:bc:31:d1:6b:63:e0:1d:
e0:22:1b:63:29:d3:f9:10:22:c5:9d:4b:67:73:a2:57:c5:36:
cd:8e:24:7f:c3:24:c6:47:8f:0d:0a:c9:1e:4d:5d:07:47:14:
c8:a8:ea:5a:26:42:07:22:d4:1a:c1:76:87:eb:6c:17:7f:dd:
25:2c:87:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT8Jt1VdAAW6FxnwQmdQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi
NjEzZGYwHhcNMjYwNDE2MjIwMDU3WhcNMjYwNDE3MjIwMDU3WjAzMTEwLwYDVQQD
EygyMmFlNjUwOTQwNmQ5NTE2YzZkMjJiYzI1M2Y3MGQ0YmQzZDIyOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7t0vacCIir5k3jeIUxB+D6kAP3e
CaAhgY8Xy8s074ZyU+cmGIteiezRtlPZ3tceoqVg8kLI+xokDYUVnPmDtubU2r37
KkZ6dqBCY0+Jhu7FdqRxC/DbW8TiByzOq6lejITvjCNiFweGm133MTx2UJCR6y+p
11eM0SZK2nUSoVyt+r7La0At00C6ULBdhFPLIlgf5wKCS7pEp+PfjmsJXq8RGx17
TyFPzrrL3KyL4LVz9AT7u6R+nW1xviN5/I/iMzaA4qCNPQpZoAJgX+9MMtUj/oCP
q/afbWNs8S4p1lRlGrOCnq3mpbCOUBT/yGz1raNEaUz30BrJpBbjcVlrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKuZQlAbZUWxtIrwlP3DUvT0ilkMB8GA1UdIwQY
MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYCxRiyo
NrC4TcfDhoNR4jBGjHRWc7uANIaeUInvPt++Cov55QFxhwQ4drfM03FshW70YlR6
2/+8EcpdiGWiiCJy6UKh6uFbMTgYN8oM4CXCvhB1Z461+EGhc153NiK0VZ0A+r51
Jb0Gn1jfaqRrt5jvB0VAjQCSxFKQzOCJuH5DR6PnHmLkHQI7u7FrK37EUFzHLDF1
MpNv59Pp2YKTCrxg+eqnf7lGam4DVcFoGgsNcu5ZEG4KhHb3/2A0F3C8MdFrY+Ad
4CIbYynT+RAixZ1LZ3OiV8U2zY4kf8MkxkePDQrJHk1dB0cUyKjqWiZCByLUGsF2
h+tsF3/dJSyHmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:05 2026 by rpki-client