Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: XjjaTQMKP4O89y625GSBSNmZAmxYCyI77aWzTJUkkuY=
Subject key identifier: 02:F1:AA:BD:FE:F7:C0:C5:F3:1C:33:90:6A:A7:00:5D:A6:BC:13:40
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019D9A3DF8A4AD013FB3369E9B483CE1B948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: 5nQT+kzLRR3cZDhf5UWu8qXToTCCeaf6/gzP/xtf9Mg=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f8:a4:ad:01:3f:b3:36:9e:9b:48:3c:e1:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=02f1aabdfef7c0c5f31c33906aa7005da6bc1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:e3:81:91:31:95:76:49:b3:d8:a9:eb:42:
9c:52:3a:89:5c:ef:5d:43:44:01:c5:c5:3e:8f:62:
66:16:ba:88:6b:ad:f6:ab:c6:ea:41:d7:93:be:fa:
4a:10:1d:56:88:46:15:be:34:e6:82:5c:74:6e:57:
3d:2f:f8:e8:86:8c:bc:e6:b4:d4:e5:42:05:12:ff:
da:09:61:43:b7:e2:d7:ca:b1:f9:29:60:c6:d5:3a:
e6:0a:c8:5d:17:b0:88:a5:1e:56:16:37:6c:00:55:
05:9a:2c:35:fd:cf:2c:a8:f0:0b:2d:bd:72:a1:9e:
83:57:9f:da:26:16:a4:11:3f:ea:a0:dd:f0:ee:4f:
5f:34:cd:1d:19:22:79:f8:29:3e:08:20:fa:24:dc:
4d:00:00:ae:1a:16:9b:45:3b:ef:23:22:ae:80:b6:
e3:db:f4:ea:6a:ae:9a:0d:68:e4:a9:ff:45:4d:9e:
c7:45:3b:b9:fb:92:dd:94:f0:37:f8:71:27:3c:c6:
1e:fe:1a:8a:d8:c2:6d:a2:6b:ed:7f:95:67:4a:53:
44:d5:86:1d:78:4b:1d:f2:38:e3:7a:86:64:c6:89:
5d:c0:5c:f9:3f:14:87:92:d7:b2:07:84:fd:8f:10:
be:b1:30:3d:d8:c6:b7:43:f3:a8:f8:c7:b4:b9:c2:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:AA:BD:FE:F7:C0:C5:F3:1C:33:90:6A:A7:00:5D:A6:BC:13:40
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:22:5e:25:36:a1:ef:cb:59:39:2f:d2:c3:b3:f7:80:e8:ff:
e9:fe:14:f7:75:3b:7f:94:cf:8c:0a:59:8f:fd:ab:69:fd:5d:
2b:93:d8:52:2e:78:ae:ea:7a:76:0b:b6:fc:bc:8a:c9:62:d8:
27:18:ea:73:37:9f:18:4d:f9:71:ec:0d:18:f8:dd:c2:dd:9e:
fd:61:2d:b5:e5:d0:60:3c:c9:5f:8a:40:05:c0:28:5f:30:4b:
6d:8a:56:64:f2:2f:d3:19:31:c0:7c:31:51:a6:1a:ff:1d:81:
ea:08:ba:4c:36:cf:30:a7:27:db:15:b0:2f:5a:8a:20:7c:74:
51:cb:c3:27:bd:1d:6a:51:f6:85:a8:0e:ce:dc:09:c6:8e:48:
4e:dc:42:06:e0:cd:b5:2b:e4:d5:d5:86:26:f9:07:46:a8:85:
27:59:75:a5:c0:f5:54:e3:c5:c8:71:eb:d5:21:40:49:77:11:
cf:c6:c7:05:f5:1b:3f:3a:e6:30:87:4e:de:b7:6b:a4:ad:6c:
5c:d8:00:75:b6:52:ac:c5:ae:83:6e:9c:4e:57:4f:69:ec:d4:
cd:1a:1c:dd:89:70:64:a6:fd:74:a4:13:1e:b5:34:58:99:5a:
4f:06:93:ed:b7:6a:27:8d:27:26:3b:2a:8d:34:18:96:a6:b5:
31:b5:2e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPfikrQE/szaem0g84blIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwNDE3MDcwMDQ1WhcNMjYwNDE4MDcwMDQ1WjAzMTEwLwYDVQQD
EygwMmYxYWFiZGZlZjdjMGM1ZjMxYzMzOTA2YWE3MDA1ZGE2YmMxMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZvjgZExlXZJs9ip60KcUjqJXO9d
Q0QBxcU+j2JmFrqIa632q8bqQdeTvvpKEB1WiEYVvjTmglx0blc9L/johoy85rTU
5UIFEv/aCWFDt+LXyrH5KWDG1TrmCshdF7CIpR5WFjdsAFUFmiw1/c8sqPALLb1y
oZ6DV5/aJhakET/qoN3w7k9fNM0dGSJ5+Ck+CCD6JNxNAACuGhabRTvvIyKugLbj
2/Tqaq6aDWjkqf9FTZ7HRTu5+5LdlPA3+HEnPMYe/hqK2MJtomvtf5VnSlNE1YYd
eEsd8jjjeoZkxoldwFz5PxSHkteyB4T9jxC+sTA92Ma3Q/Oo+Me0ucInlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALxqr3+98DF8xwzkGqnAF2mvBNAMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiJeJTah
78tZOS/Sw7P3gOj/6f4U93U7f5TPjApZj/2raf1dK5PYUi54rup6dgu2/LyKyWLY
JxjqczefGE35cewNGPjdwt2e/WEtteXQYDzJX4pABcAoXzBLbYpWZPIv0xkxwHwx
UaYa/x2B6gi6TDbPMKcn2xWwL1qKIHx0UcvDJ70dalH2hagOztwJxo5ITtxCBuDN
tSvk1dWGJvkHRqiFJ1l1pcD1VOPFyHHr1SFASXcRz8bHBfUbPzrmMIdO3rdrpK1s
XNgAdbZSrMWug26cTldPaezUzRoc3YlwZKb9dKQTHrU0WJlaTwaT7bdqJ40nJjsq
jTQYlqa1MbUuVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:09 2026 by rpki-client