Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: lpwtZ8NlZu7eG0yiDRcgF3GlZEGbitDDHearvrWK3k8=
Subject key identifier: E1:61:4C:C3:BE:9F:E4:F6:78:18:00:A9:A5:44:0C:B3:96:CE:18:20
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019D99D012D7784214E7DD7B0D6F883F6AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: B8DoC5brIbdcKCleVmQPvjtWXBY.roa (hash: fwuSLYiomHoCM+ValZyW+pJ6ZXG5StCk1C5NhErYdTA=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: 9nzK048q0qnZT5iFohAsTTPuVd7LAvbmTz/UNH/npnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:12:d7:78:42:14:e7:dd:7b:0d:6f:88:3f:6a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=e1614cc3be9fe4f6781800a9a5440cb396ce1820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:ba:f3:5b:82:f1:16:2a:22:d8:cf:11:de:
1d:6c:ac:60:88:66:2f:06:e1:23:0e:d9:23:81:46:
7a:fc:e7:be:b9:1a:4d:d0:ca:fc:a7:d6:25:84:d7:
39:cd:e8:4a:f8:47:2e:9e:38:bb:3d:c2:a0:be:80:
e8:75:d3:9a:9b:ad:52:bb:0d:d4:81:10:4c:53:8b:
56:24:1b:9d:1a:36:26:fc:49:47:a8:a7:ad:56:a6:
06:d3:7e:d6:86:15:e5:65:12:4e:76:dc:6d:8e:43:
a1:c1:5d:6f:80:bc:85:3a:3d:36:4b:de:66:33:18:
08:f1:50:da:ea:a2:28:00:02:bd:15:ca:60:08:23:
3d:89:87:e8:7d:0c:30:1a:d5:4f:71:8e:17:d2:e6:
cd:0b:02:28:33:71:43:b0:10:0f:4d:80:04:65:a4:
1b:23:d8:d5:6d:07:d3:4d:de:7b:1b:87:4c:6b:a4:
c5:39:4b:78:11:7c:fa:bd:0f:bd:33:e5:3f:0a:37:
14:50:82:26:86:85:21:47:9c:cd:cf:90:fb:a0:76:
23:e0:a4:3c:37:6d:23:83:65:27:72:3e:d3:e1:2a:
c8:68:f6:06:b5:41:4d:19:e2:d3:71:02:db:79:72:
26:f4:36:7b:7d:7a:c9:7a:97:05:84:c4:e8:67:46:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:4C:C3:BE:9F:E4:F6:78:18:00:A9:A5:44:0C:B3:96:CE:18:20
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:13:bb:68:3c:69:99:39:bc:00:f9:e0:f8:32:ab:01:57:
1f:99:4c:73:26:d2:89:bc:df:b2:eb:3b:95:b6:75:96:52:ed:
07:7f:10:08:2d:62:c2:9c:7c:97:7e:88:7e:16:ba:d6:2d:a2:
b1:95:ff:61:d8:09:ad:e1:e1:ee:38:5b:2e:46:8d:fc:05:f8:
8b:3d:ba:bf:b3:8a:17:ad:1a:bc:92:43:8b:62:f9:77:65:a9:
8e:a3:a9:1d:a7:18:18:a8:2d:a9:56:5a:95:24:e1:d2:04:cb:
cc:ca:ae:28:6f:e6:dd:4b:f9:34:5a:d3:a6:f8:6e:ae:39:c3:
7f:0c:55:86:3f:c2:14:d0:96:38:c5:dc:70:2c:41:b2:70:4c:
48:da:24:ff:22:ad:b8:37:82:c5:67:89:1d:7b:33:aa:45:02:
04:ff:fa:ea:c7:f1:b6:82:89:c8:e7:86:79:1a:88:85:8e:c1:
98:72:58:15:62:5f:05:3f:b8:c6:f7:77:24:43:68:0a:f4:02:
82:fb:0b:a8:09:05:e7:4b:d0:03:02:bc:8c:ff:d7:52:ef:5c:
db:a1:61:14:9f:bf:33:70:30:45:9c:7d:41:68:5a:12:03:85:
15:c1:21:06:37:8a:11:ae:69:62:c9:f3:ca:b7:9d:58:11:2d:
00:b2:8f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BLXeEIU5917DW+IP2r2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDc4MjE5MjE1NThmNjZhMDM3ZmU5Y2EwZGNjMTA0NmNm
NDg0ZTAwHhcNMjYwNDE3MDUwMDQzWhcNMjYwNDE4MDUwMDQzWjAzMTEwLwYDVQQD
EyhlMTYxNGNjM2JlOWZlNGY2NzgxODAwYTlhNTQ0MGNiMzk2Y2UxODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5W681uC8RYqItjPEd4dbKxgiGYv
BuEjDtkjgUZ6/Oe+uRpN0Mr8p9YlhNc5zehK+Ecunji7PcKgvoDoddOam61Suw3U
gRBMU4tWJBudGjYm/ElHqKetVqYG037WhhXlZRJOdtxtjkOhwV1vgLyFOj02S95m
MxgI8VDa6qIoAAK9FcpgCCM9iYfofQwwGtVPcY4X0ubNCwIoM3FDsBAPTYAEZaQb
I9jVbQfTTd57G4dMa6TFOUt4EXz6vQ+9M+U/CjcUUIImhoUhR5zNz5D7oHYj4KQ8
N20jg2Uncj7T4SrIaPYGtUFNGeLTcQLbeXIm9DZ7fXrJepcFhMToZ0aAwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFhTMO+n+T2eBgAqaVEDLOWzhggMB8GA1UdIwQY
MBaAFFNHghkhVY9moDf+nKDcwQRs9ITgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQt
ZWQxNzc0YWRiZjJmLzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQtZWQxNzc0YWRiZjJm
LzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV8Tu2g8
aZk5vAD54PgyqwFXH5lMcybSibzfsus7lbZ1llLtB38QCC1iwpx8l36Ifha61i2i
sZX/YdgJreHh7jhbLkaN/AX4iz26v7OKF60avJJDi2L5d2WpjqOpHacYGKgtqVZa
lSTh0gTLzMquKG/m3Uv5NFrTpvhurjnDfwxVhj/CFNCWOMXccCxBsnBMSNok/yKt
uDeCxWeJHXszqkUCBP/66sfxtoKJyOeGeRqIhY7BmHJYFWJfBT+4xvd3JENoCvQC
gvsLqAkF50vQAwK8jP/XUu9c26FhFJ+/M3AwRZx9QWhaEgOFFcEhBjeKEa5pYsnz
yredWBEtALKPkw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:57 2026 by rpki-client