Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: pW9BsMVCWn+9y4++0aJ9TfGNxb8f+geV7WoJ8pU3h5s=
Subject key identifier: ED:D2:60:EA:BF:19:FA:DE:1F:9F:A7:04:66:21:32:61:B8:3B:9E:36
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019D9B5055A7A53CA07103CBCCF380FC1043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:00:26 +0000
Manifest this update: Fri 17 Apr 2026 12:00:26 +0000
Manifest next update: Sat 18 Apr 2026 12:00:26 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: noz2SEjn+CR7rUeEt+Eu+PkMPjeyDFDUddzVF/merDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:55:a7:a5:3c:a0:71:03:cb:cc:f3:80:fc:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Apr 17 12:00:26 2026 GMT
Not After : Apr 18 12:00:26 2026 GMT
Subject: CN=edd260eabf19fade1f9fa70466213261b83b9e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:2d:8b:98:59:e8:bc:31:45:6b:39:4c:44:
35:fa:37:3a:c3:19:62:a2:81:97:e2:d2:83:52:22:
83:29:d4:bd:f0:31:54:80:3d:d8:ce:22:da:fb:e0:
78:01:c8:a4:95:08:0e:d6:13:6e:64:2d:49:15:37:
20:0d:54:fe:60:01:d9:71:09:ca:76:95:75:60:cb:
08:11:f6:0b:a6:fc:92:41:b8:a5:a4:07:35:c8:d4:
d0:95:94:8d:ca:01:41:d7:72:2b:63:4e:5c:4f:c9:
de:62:e6:6e:d5:d1:d4:bd:3c:be:d0:94:f6:fa:a1:
78:d3:4d:4d:e9:cb:76:d4:7b:a4:fa:92:ba:6c:b4:
d1:9f:4f:92:f8:7a:b7:91:49:eb:2d:a4:a1:ff:c6:
c7:32:68:f7:bf:75:c1:bb:e6:34:57:ca:45:8f:70:
b7:12:b3:40:45:63:0d:ab:4d:89:1e:72:26:ec:95:
5b:9e:f8:6f:76:51:1a:e9:30:cf:a8:12:91:c2:2c:
5d:fb:40:d0:e3:93:98:66:cc:d5:5f:4e:d4:ad:a3:
1a:b1:50:c4:af:f5:98:7e:27:d5:fa:12:8e:32:19:
ad:bf:d6:a2:b8:8a:55:72:21:01:2a:b4:ce:a8:fa:
69:02:ea:cb:5c:af:66:57:62:52:91:bc:eb:ca:70:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:60:EA:BF:19:FA:DE:1F:9F:A7:04:66:21:32:61:B8:3B:9E:36
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:99:17:2f:1b:2e:3d:1a:60:24:70:72:1f:1d:ed:0a:af:
5b:50:31:06:ae:ac:01:a7:fa:e0:17:5f:3c:75:a8:c5:9a:bc:
10:53:88:cd:0d:04:a6:76:24:f3:77:27:20:5b:73:32:98:3b:
45:93:82:ce:15:5d:36:82:08:99:de:52:ff:d2:1f:05:68:69:
e0:ec:46:27:96:f8:3b:5f:7c:63:78:86:b8:48:03:7d:f7:e6:
f7:ab:3e:fa:0e:e6:43:d6:4f:a2:91:91:f6:21:6b:d8:8c:2c:
d1:f1:8e:25:23:9f:1e:cb:91:4f:b7:b5:c9:39:24:0e:5a:6b:
e5:c2:5b:bd:55:76:7f:4e:e6:ed:eb:9d:06:2a:7a:61:94:47:
66:a5:13:a1:b8:bb:8f:0e:ae:bf:a7:63:dd:1e:5d:c7:5f:6d:
5a:f4:1c:a5:cc:12:2b:12:d2:44:f3:af:8f:94:c8:c4:67:aa:
32:74:64:e6:c0:b8:c0:91:98:9b:00:ca:f6:02:69:da:ac:81:
a8:68:c6:eb:82:ef:7b:65:54:c5:06:6e:3a:a8:8c:c2:58:3a:
9e:ae:6f:6b:de:a5:d4:9d:49:4a:05:ba:19:17:c7:4b:f1:fe:
8e:ba:22:98:e6:22:22:b4:5a:cb:76:50:66:a5:8d:ea:28:97:
31:98:99:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUFWnpTygcQPLzPOA/BBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjYwNDE3MTIwMDI2WhcNMjYwNDE4MTIwMDI2WjAzMTEwLwYDVQQD
EyhlZGQyNjBlYWJmMTlmYWRlMWY5ZmE3MDQ2NjIxMzI2MWI4M2I5ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tIti5hZ6LwxRWs5TEQ1+jc6wxli
ooGX4tKDUiKDKdS98DFUgD3YziLa++B4AciklQgO1hNuZC1JFTcgDVT+YAHZcQnK
dpV1YMsIEfYLpvySQbilpAc1yNTQlZSNygFB13IrY05cT8neYuZu1dHUvTy+0JT2
+qF4001N6ct21Huk+pK6bLTRn0+S+Hq3kUnrLaSh/8bHMmj3v3XBu+Y0V8pFj3C3
ErNARWMNq02JHnIm7JVbnvhvdlEa6TDPqBKRwixd+0DQ45OYZszVX07UraMasVDE
r/WYfifV+hKOMhmtv9aiuIpVciEBKrTOqPppAurLXK9mV2JSkbzrynDQBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3SYOq/GfreH5+nBGYhMmG4O542MB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEmZFy8b
Lj0aYCRwch8d7QqvW1AxBq6sAaf64BdfPHWoxZq8EFOIzQ0EpnYk83cnIFtzMpg7
RZOCzhVdNoIImd5S/9IfBWhp4OxGJ5b4O198Y3iGuEgDfffm96s++g7mQ9ZPopGR
9iFr2Iws0fGOJSOfHsuRT7e1yTkkDlpr5cJbvVV2f07m7eudBip6YZRHZqUTobi7
jw6uv6dj3R5dx19tWvQcpcwSKxLSRPOvj5TIxGeqMnRk5sC4wJGYmwDK9gJp2qyB
qGjG64Lve2VUxQZuOqiMwlg6nq5va96l1J1JSgW6GRfHS/H+jroimOYiIrRay3ZQ
ZqWN6iiXMZiZ3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:55 2026 by rpki-client