Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: lU4HnqJ8DjjswmMt/6GbA8gQ7qaDe6S4mmikR6o4E+o=
Subject key identifier: A8:FE:B9:25:D2:51:50:EC:A4:36:39:FA:DF:0A:51:35:4D:E4:A2:F4
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019D99994BA822FA8438FEAE0B2F0196E62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: L6c5Lr0p1aRMGxRILmBZgQtfR4U.roa (hash: zHP0uUQQ1j3lH9UmRrJUovyfnfMO31UL4btwp3/nVG0=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: AY2csPohE4aerxrNASB+q7nOlr2zQayRhDMHR0Kf/HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4b:a8:22:fa:84:38:fe:ae:0b:2f:01:96:e6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=a8feb925d25150eca43639fadf0a51354de4a2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:7a:92:3e:77:30:71:3a:8f:d6:5c:e5:11:
1d:37:28:fd:bf:c9:38:bb:68:51:56:11:07:b2:5f:
1e:c0:5c:f7:2b:fc:91:5a:0a:f5:5e:86:e0:86:83:
53:21:ec:af:c9:eb:6d:e4:2c:dc:73:f3:3a:7f:6b:
f1:48:46:ff:78:2c:5e:22:f9:f2:f9:eb:42:ff:b8:
35:27:33:cc:74:5f:99:76:14:36:31:54:d8:ad:3a:
9b:28:b9:a5:dd:4a:05:b5:69:c4:4d:00:c9:7d:39:
4d:ab:32:9b:3a:2a:88:cb:8e:e4:56:37:6c:dc:e3:
63:36:61:f8:c7:61:2a:55:f2:09:14:e0:55:c0:fe:
13:76:8b:5f:57:0a:41:06:2a:7e:f7:45:af:8a:8e:
4a:93:f7:c3:99:a8:04:97:93:f4:85:c7:7d:57:88:
c1:19:21:64:b3:5c:2e:89:e3:c4:7f:18:5f:73:2e:
b3:05:40:59:65:ba:f7:c2:9e:4c:00:2b:98:ef:3d:
c6:07:f4:23:cd:c3:6e:39:1e:8a:0e:fb:d5:cd:3a:
9b:34:da:b9:94:3d:18:73:0a:40:e8:86:0b:82:cc:
1b:f0:d7:34:74:44:ec:f7:58:60:8b:5c:ca:38:76:
66:ac:5a:66:11:bc:58:ca:5d:83:1c:58:53:a2:bf:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:B9:25:D2:51:50:EC:A4:36:39:FA:DF:0A:51:35:4D:E4:A2:F4
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3f:de:2d:e3:d4:8e:5c:d8:8d:53:5a:fb:87:d0:b9:d8:1b:
75:0b:78:27:5d:fe:ab:15:b1:dc:5b:fe:97:41:d7:f2:8d:4d:
8b:2a:c9:01:83:b6:a7:5b:20:0e:e8:31:c4:09:cd:c9:3a:e5:
df:76:f0:22:e7:05:eb:18:c8:70:fe:4e:7c:b7:cd:09:95:6b:
7c:88:ec:3b:fc:2b:3a:fd:b1:23:93:62:5d:af:6a:ca:d9:21:
f2:1f:6a:98:88:07:9a:6e:20:b7:2c:33:da:08:b9:a2:21:56:
08:3f:fa:57:de:de:1e:9c:ad:27:0d:dc:0d:cd:05:1e:96:22:
14:dc:a8:79:d5:cf:7c:95:dc:db:90:4b:59:9e:ed:4e:e1:e9:
c5:2d:68:6a:22:22:ba:5f:62:e3:65:23:0a:2c:69:64:15:89:
78:4a:95:a6:3d:b9:54:de:78:b5:bd:4a:b3:cf:3c:89:f7:03:
bc:71:6f:63:25:0a:56:c5:fa:6a:9b:07:35:3f:1b:4f:be:0e:
14:37:14:9a:8f:04:d9:8a:52:f1:a1:bd:e6:e0:86:bf:d5:ab:
83:82:cc:0d:cd:c9:ca:2b:ef:cb:41:cf:bc:40:18:9c:17:79:
ff:15:a2:5e:83:13:3b:d3:02:e2:35:2a:7f:8c:63:e9:37:de:
ef:6c:5f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUuoIvqEOP6uCy8BluYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw
NTQ3OTYwHhcNMjYwNDE3MDQwMDUzWhcNMjYwNDE4MDQwMDUzWjAzMTEwLwYDVQQD
EyhhOGZlYjkyNWQyNTE1MGVjYTQzNjM5ZmFkZjBhNTEzNTRkZTRhMmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd96kj53MHE6j9Zc5REdNyj9v8k4
u2hRVhEHsl8ewFz3K/yRWgr1XobghoNTIeyvyett5Czcc/M6f2vxSEb/eCxeIvny
+etC/7g1JzPMdF+ZdhQ2MVTYrTqbKLml3UoFtWnETQDJfTlNqzKbOiqIy47kVjds
3ONjNmH4x2EqVfIJFOBVwP4TdotfVwpBBip+90Wvio5Kk/fDmagEl5P0hcd9V4jB
GSFks1wuiePEfxhfcy6zBUBZZbr3wp5MACuY7z3GB/QjzcNuOR6KDvvVzTqbNNq5
lD0YcwpA6IYLgswb8Nc0dETs91hgi1zKOHZmrFpmEbxYyl2DHFhTor/rTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj+uSXSUVDspDY5+t8KUTVN5KL0MB8GA1UdIwQY
MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt
NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz
LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT/eLePU
jlzYjVNa+4fQudgbdQt4J13+qxWx3Fv+l0HX8o1NiyrJAYO2p1sgDugxxAnNyTrl
33bwIucF6xjIcP5OfLfNCZVrfIjsO/wrOv2xI5NiXa9qytkh8h9qmIgHmm4gtywz
2gi5oiFWCD/6V97eHpytJw3cDc0FHpYiFNyoedXPfJXc25BLWZ7tTuHpxS1oaiIi
ul9i42UjCixpZBWJeEqVpj25VN54tb1Ks888ifcDvHFvYyUKVsX6apsHNT8bT74O
FDcUmo8E2YpS8aG95uCGv9Wrg4LMDc3Jyivvy0HPvEAYnBd5/xWiXoMTO9MC4jUq
f4xj6Tfe72xfBw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:27 2026 by rpki-client