Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: YRztImOst4UQ/gHogQYVP82AyW+tcdspeg/9hqsK160=
Subject key identifier: 47:1C:F0:77:8B:C8:70:6A:1E:3A:F7:62:EE:85:52:6E:AE:BF:8D:59
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 019D9A75317DA1FAD1ABD9F86E7ED1E378B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: KwctrYLeRKoApU1-lNG2pUzIRFY.roa (hash: 1By8fKUFtlATKn4LhCiJ+z6rFS67TtSuGlxf5SYKGN4=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: 6v6PtMJ94N/rXVPEZSXtXFfusDJtq/WACPGiItygUbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:31:7d:a1:fa:d1:ab:d9:f8:6e:7e:d1:e3:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=471cf0778bc8706a1e3af762ee85526eaebf8d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:39:76:40:d9:70:58:54:98:e0:de:29:74:
b7:ce:81:01:0e:15:cb:8c:ff:4a:9b:2d:36:7c:9e:
3b:82:e9:a3:ff:ec:fc:db:00:9a:f0:0f:33:cd:18:
b4:34:53:18:c5:71:f3:e4:85:d7:b6:fd:63:d1:ef:
0b:a0:e8:26:58:86:24:73:1e:85:e0:b5:56:bc:0f:
95:36:e0:3f:be:e1:a2:6f:06:53:35:2b:2c:50:e5:
39:c1:69:68:bd:98:e6:cf:38:a9:81:1c:9d:65:f0:
c9:b0:57:23:41:e6:a7:ae:25:a9:62:b5:90:82:c4:
59:57:4f:e8:fd:5c:d1:1c:26:92:ea:91:5e:8f:27:
ac:38:fe:f0:b5:98:bd:a8:98:1c:4e:39:0e:07:f2:
db:12:14:25:b3:cd:6e:8e:9e:0e:84:76:ab:c6:e7:
6b:ce:69:6b:6b:1f:45:5a:64:8b:86:62:0f:10:9f:
9b:46:2e:cd:30:2a:04:33:da:c3:eb:70:a8:34:30:
21:c5:83:f2:8b:8f:9e:86:3d:8d:3c:0a:f5:ee:85:
f9:b1:1d:46:67:b9:f7:9c:f8:ed:af:a7:f9:9d:6b:
c4:85:ef:d2:75:5d:19:d7:54:6e:ca:7e:2b:bf:9e:
e6:f4:e8:0b:58:2f:26:b4:ff:0d:8b:59:05:69:09:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:F0:77:8B:C8:70:6A:1E:3A:F7:62:EE:85:52:6E:AE:BF:8D:59
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:81:ae:c8:4d:0c:4d:e6:02:a9:f0:67:1f:62:17:b0:7a:0d:
cb:a5:55:91:cd:3a:12:a2:67:a0:63:3b:5b:f0:39:f2:c1:7e:
e5:9c:f4:9c:3d:41:03:3e:c9:00:43:98:95:72:c6:d1:c3:28:
4b:53:ee:a8:70:69:b5:37:bf:60:d3:65:9d:c8:01:99:41:3c:
4e:c6:3e:02:74:7f:4f:87:2f:1b:91:b2:0b:b2:9f:1d:ef:8f:
99:3e:14:c5:81:09:c2:63:29:59:6a:89:3c:32:a3:3d:79:30:
cb:96:f4:dd:72:fd:00:2b:33:f5:92:24:e0:24:46:17:1a:2f:
0c:2e:1b:12:25:a6:20:7c:1f:1f:36:fa:9f:9b:ed:a1:c8:5e:
1c:fe:ec:38:c1:8e:c5:35:ff:80:a1:c6:ff:70:8a:c3:e1:a2:
1c:a2:c7:e5:5a:94:58:69:fb:45:69:95:fc:21:f1:0e:7d:95:
a4:25:19:a1:7f:07:ab:f0:fe:94:c0:17:8c:39:6e:27:2f:65:
10:3a:1e:17:08:fc:9a:9e:2f:00:11:30:d3:5d:c8:37:7b:f8:
3b:43:2d:ae:4f:93:78:ef:b0:82:87:8e:3a:d3:39:89:5b:70:
79:0b:3b:ad:f8:e4:1d:d8:93:c4:da:a3:53:24:26:c5:b2:74:
2a:40:6a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTF9ofrRq9n4bn7R43iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5
NDNjNWYwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD
Eyg0NzFjZjA3NzhiYzg3MDZhMWUzYWY3NjJlZTg1NTI2ZWFlYmY4ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniI5dkDZcFhUmODeKXS3zoEBDhXL
jP9Kmy02fJ47gumj/+z82wCa8A8zzRi0NFMYxXHz5IXXtv1j0e8LoOgmWIYkcx6F
4LVWvA+VNuA/vuGibwZTNSssUOU5wWlovZjmzzipgRydZfDJsFcjQeanriWpYrWQ
gsRZV0/o/VzRHCaS6pFejyesOP7wtZi9qJgcTjkOB/LbEhQls81ujp4OhHarxudr
zmlrax9FWmSLhmIPEJ+bRi7NMCoEM9rD63CoNDAhxYPyi4+ehj2NPAr17oX5sR1G
Z7n3nPjtr6f5nWvEhe/SdV0Z11Ruyn4rv57m9OgLWC8mtP8Ni1kFaQkTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcc8HeLyHBqHjr3Yu6FUm6uv41ZMB8GA1UdIwQY
MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt
MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4
LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYGuyE0M
TeYCqfBnH2IXsHoNy6VVkc06EqJnoGM7W/A58sF+5Zz0nD1BAz7JAEOYlXLG0cMo
S1PuqHBptTe/YNNlncgBmUE8TsY+AnR/T4cvG5GyC7KfHe+PmT4UxYEJwmMpWWqJ
PDKjPXkwy5b03XL9ACsz9ZIk4CRGFxovDC4bEiWmIHwfHzb6n5vtocheHP7sOMGO
xTX/gKHG/3CKw+GiHKLH5VqUWGn7RWmV/CHxDn2VpCUZoX8Hq/D+lMAXjDluJy9l
EDoeFwj8mp4vABEw013IN3v4O0Mtrk+TeO+wgoeOOtM5iVtweQs7rfjkHdiTxNqj
UyQmxbJ0KkBqVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:34 2026 by rpki-client