Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: SmcyNFf/Tu1mF4HVno3tFsjIvWhp9htrHHRXggCVU6U=
Subject key identifier: 39:96:4A:76:A1:97:6E:7C:6A:FE:64:84:A7:92:BF:10:08:E7:8F:82
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019D984FCF7069A77064F48A191E8607ECE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 1187
Signing time: Thu 16 Apr 2026 22:01:00 +0000
Manifest this update: Thu 16 Apr 2026 22:01:00 +0000
Manifest next update: Fri 17 Apr 2026 22:01:00 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: fYNIPv6xUn/bvJmRPO2SzmEX26rSOUwSaPFLHNadxbA=)
2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:cf:70:69:a7:70:64:f4:8a:19:1e:86:07:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Apr 16 22:01:00 2026 GMT
Not After : Apr 17 22:01:00 2026 GMT
Subject: CN=39964a76a1976e7c6afe6484a792bf1008e78f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:aa:31:95:de:f0:a7:86:85:d5:0e:b4:1e:
62:1a:30:d2:1d:fa:92:7a:91:91:fa:de:c9:e6:75:
74:26:b5:07:5d:d9:21:18:f7:6b:68:8d:b9:1a:6b:
7e:ca:56:14:dd:74:f2:02:21:81:73:59:11:5e:20:
2c:08:64:63:6e:3a:e9:c4:d5:27:7c:29:42:9e:86:
ab:1f:60:2d:1a:ad:67:25:a7:1a:1e:3e:34:9a:c7:
eb:8c:fb:2d:16:1b:d6:0c:7d:e0:cb:38:85:19:16:
b6:4a:59:ad:69:33:e6:1f:95:f6:53:ba:26:47:c9:
b6:c8:a0:81:5a:d5:42:99:cb:e6:36:53:e8:c2:6f:
ec:26:45:80:f2:c2:48:f3:7a:03:9b:2d:f5:d8:af:
72:b3:a8:3f:3f:3b:3a:6a:21:f2:5c:b9:3a:0c:38:
12:8b:5d:9c:05:d5:ef:fc:56:68:92:df:69:ea:4e:
e7:33:5a:19:53:4b:f5:68:d7:cb:10:8b:65:29:cc:
9e:8e:47:c8:77:8c:65:15:5d:f5:2a:22:91:be:1b:
25:d8:7c:7d:18:f9:d4:2e:5c:4b:0b:bb:61:a7:b7:
fe:67:ed:d1:be:39:89:90:fb:7d:f5:45:7c:7a:5e:
38:36:32:45:a7:bc:8b:ce:e0:3b:0e:c9:38:af:80:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:4A:76:A1:97:6E:7C:6A:FE:64:84:A7:92:BF:10:08:E7:8F:82
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:5a:c2:d6:74:a4:96:0d:78:10:1d:32:15:b0:a0:27:47:
c8:53:89:84:cb:c9:da:2f:aa:f1:79:7c:42:a2:a7:62:8c:85:
db:df:45:9c:d7:b6:3a:49:76:d6:5e:ff:d7:9f:16:56:a1:38:
85:2f:e2:bb:47:13:cd:33:a7:f7:73:fc:19:f2:21:0f:47:09:
ab:ad:2f:db:cd:34:5a:3f:e6:0a:17:07:dc:29:cf:74:f5:97:
b9:a1:88:09:70:93:db:ca:37:0d:b4:b3:5b:db:f9:7f:9a:74:
20:30:2e:e8:d4:d7:f8:f6:08:ec:91:94:d4:94:c0:1e:43:e8:
b5:ff:99:80:9b:80:cd:73:ed:72:0c:6b:4c:93:f9:ef:a8:2e:
a2:ce:7c:7c:e9:77:52:38:59:15:20:d3:ba:52:4f:ff:df:34:
13:05:26:72:d8:01:8c:63:06:98:2a:b8:56:74:98:16:9c:1f:
08:4a:f6:70:0d:b8:00:ad:8c:f6:0e:40:ad:49:b5:a9:68:e9:
56:6c:b5:61:82:05:f4:2c:a1:f9:8d:94:7f:83:31:83:53:27:
90:84:35:46:fe:0a:d4:f1:fc:2e:3a:73:42:9e:24:c1:27:e8:
a8:3e:c7:94:e4:11:fb:a3:16:37:9c:06:12:4d:5c:74:03:d5:
62:f5:c9:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2YT89waadwZPSKGR6GB+zpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWUyMjlmODYwYjA1OGQyM2ZkMjhhMjkyNjE2MWI4Nzg2
MzMwYzYwHhcNMjYwNDE2MjIwMTAwWhcNMjYwNDE3MjIwMTAwWjAzMTEwLwYDVQQD
EygzOTk2NGE3NmExOTc2ZTdjNmFmZTY0ODRhNzkyYmYxMDA4ZTc4ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cmqMZXe8KeGhdUOtB5iGjDSHfqS
epGR+t7J5nV0JrUHXdkhGPdraI25Gmt+ylYU3XTyAiGBc1kRXiAsCGRjbjrpxNUn
fClCnoarH2AtGq1nJacaHj40msfrjPstFhvWDH3gyziFGRa2SlmtaTPmH5X2U7om
R8m2yKCBWtVCmcvmNlPowm/sJkWA8sJI83oDmy312K9ys6g/Pzs6aiHyXLk6DDgS
i12cBdXv/FZokt9p6k7nM1oZU0v1aNfLEItlKcyejkfId4xlFV31KiKRvhsl2Hx9
GPnULlxLC7thp7f+Z+3RvjmJkPt99UV8el44NjJFp7yLzuA7Dsk4r4AR6QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDmWSnahl258av5khKeSvxAI54+CMB8GA1UdIwQY
MBaAFPieIp+GCwWNI/0oopJhYbh4YzDGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KNGluNFlMQlkwal9TaWlrbUZodUhoak1NWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvOGNjYTMzLWMyYjEtNDU0MS05ZWYy
LWFhMGViNTNlOTBiOS8xLzEtSjRpbjRZTEJZMGpfU2lpa21GaHVIaGpNTVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E0LzhjY2EzMy1jMmIxLTQ1NDEtOWVmMi1hYTBlYjUzZTkw
YjkvMS8xLUo0aW40WUxCWTBqX1NpaWttRmh1SGhqTU1ZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDxa
wtZ0pJYNeBAdMhWwoCdHyFOJhMvJ2i+q8Xl8QqKnYoyF299FnNe2Okl21l7/158W
VqE4hS/iu0cTzTOn93P8GfIhD0cJq60v2800Wj/mChcH3CnPdPWXuaGICXCT28o3
DbSzW9v5f5p0IDAu6NTX+PYI7JGU1JTAHkPotf+ZgJuAzXPtcgxrTJP576guos58
fOl3UjhZFSDTulJP/980EwUmctgBjGMGmCq4VnSYFpwfCEr2cA24AK2M9g5ArUm1
qWjpVmy1YYIF9Cyh+Y2Uf4Mxg1MnkIQ1Rv4K1PH8LjpzQp4kwSfoqD7HlOQR+6MW
N5wGEk1cdAPVYvXJ8g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:17 2026 by rpki-client