Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: eU8qa4iQ0gouAemHfrcVXrlYMVnj7f66QNVr0aZBT4A=
Subject key identifier: C2:54:C1:78:EA:35:9B:99:97:A0:76:6D:4F:A7:DF:54:46:BD:A9:31
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019DA37903CDDAFCA6D40781B6B72B2912FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:50 +0000
Manifest this update: Sun 19 Apr 2026 02:01:50 +0000
Manifest next update: Mon 20 Apr 2026 02:01:50 +0000
Files and hashes: 1: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: oLwwbH3qXj8UJsFZWL9CvrHDdAcXSr5W04PeGGPXXDU=)
2: cF8uP7QlOdwZi4fd-Vewyhyr1JU.roa (hash: /tEiL73EsYnvkx71Q1CMlvgCMIyqQRf+8UDWXXfTyn4=)
3: mIHKTw-XLrmmWG8YqweQVC7V0bI.roa (hash: jyb24Oi7s06EeSQHlaZE/EE7bOHrHv2+206uhSP0nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:03:cd:da:fc:a6:d4:07:81:b6:b7:2b:29:12:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Apr 19 02:01:50 2026 GMT
Not After : Apr 20 02:01:50 2026 GMT
Subject: CN=c254c178ea359b9997a0766d4fa7df5446bda931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:bc:a8:6b:87:d9:6d:24:f6:89:98:4f:f9:
7c:69:97:f4:c2:b3:46:54:7e:55:83:9c:bb:71:3f:
88:23:8f:81:62:9d:34:c1:16:3e:eb:61:69:70:e0:
db:db:cf:9a:5c:f3:51:b9:e7:74:e9:a1:70:26:02:
c7:4e:31:d7:a0:e7:0a:e7:90:64:58:a6:35:d6:a9:
63:e3:59:70:73:bb:28:94:15:18:ca:a1:ff:73:cd:
81:e9:05:7e:e6:2e:d2:9d:9a:3e:16:74:bd:c7:eb:
ed:d6:98:03:ff:0f:b3:8f:48:5a:42:af:0c:2e:83:
b4:81:99:9e:ff:d5:57:19:f7:a7:63:bf:8b:13:ed:
53:8b:22:ef:69:25:03:bf:aa:74:b4:7a:bf:4c:1e:
a8:d5:8b:37:c8:5a:b8:1f:b8:3a:66:71:17:9d:35:
4e:e9:05:2b:c8:f6:9a:b9:42:97:50:b7:74:0a:68:
a3:50:15:0d:be:06:30:67:18:ec:fc:ee:4e:5f:a9:
cc:d1:48:42:37:0e:c2:bd:d7:3f:27:31:b3:cf:66:
c7:02:41:7b:65:e7:4f:db:5d:84:92:b0:64:aa:c4:
07:7b:71:4e:a8:5c:96:85:7e:e9:fd:69:4a:7a:b4:
2b:88:03:eb:8b:dc:48:8f:77:ec:41:fd:74:c3:e1:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:C1:78:EA:35:9B:99:97:A0:76:6D:4F:A7:DF:54:46:BD:A9:31
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:7a:c7:e7:dd:06:e0:12:83:f0:f5:b5:a4:28:30:69:6b:
90:77:a0:92:79:fd:ec:85:ab:4b:8a:01:dd:ab:54:34:e1:52:
53:82:32:55:55:52:32:39:2b:48:3a:b9:49:29:70:6a:08:e5:
92:88:6b:93:62:32:35:e1:a2:de:a4:e0:e7:40:60:19:89:81:
9b:15:5e:b5:fc:a5:cb:c0:dd:34:98:4b:d9:02:32:33:f0:78:
2a:1b:8b:50:8a:78:b4:19:15:69:9d:2b:1f:3c:e2:2b:5f:be:
31:64:77:f6:94:83:a9:32:07:32:e6:7d:df:b4:b7:b0:e1:1a:
24:2f:c3:ea:e3:7b:4f:97:24:f2:7d:9a:51:f0:11:61:94:19:
e3:25:a4:b3:42:d6:c3:2a:07:85:e6:62:46:7b:00:81:97:12:
fd:ff:bc:a3:0d:6f:15:de:fa:81:6d:50:7b:02:e5:9d:90:51:
0d:e4:3f:4f:06:43:bf:05:d2:20:1c:36:4e:be:7d:e8:b7:d7:
29:8d:a3:f6:85:a8:7f:f2:5d:fc:8f:f6:bc:9f:5d:fa:6b:9a:
83:a0:5b:34:d3:11:d3:69:47:b9:c2:71:f7:60:b1:b1:65:9a:
b3:c8:ed:42:4d:0d:37:68:49:f6:e7:17:19:b7:8c:03:d1:80:
cd:4f:56:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeQPN2vym1AeBtrcrKRL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj
N2M2ZDUwHhcNMjYwNDE5MDIwMTUwWhcNMjYwNDIwMDIwMTUwWjAzMTEwLwYDVQQD
EyhjMjU0YzE3OGVhMzU5Yjk5OTdhMDc2NmQ0ZmE3ZGY1NDQ2YmRhOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm68qGuH2W0k9omYT/l8aZf0wrNG
VH5Vg5y7cT+II4+BYp00wRY+62FpcODb28+aXPNRued06aFwJgLHTjHXoOcK55Bk
WKY11qlj41lwc7solBUYyqH/c82B6QV+5i7SnZo+FnS9x+vt1pgD/w+zj0haQq8M
LoO0gZme/9VXGfenY7+LE+1TiyLvaSUDv6p0tHq/TB6o1Ys3yFq4H7g6ZnEXnTVO
6QUryPaauUKXULd0CmijUBUNvgYwZxjs/O5OX6nM0UhCNw7Cvdc/JzGzz2bHAkF7
ZedP212EkrBkqsQHe3FOqFyWhX7p/WlKerQriAPri9xIj3fsQf10w+EhEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJUwXjqNZuZl6B2bU+n31RGvakxMB8GA1UdIwQY
MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt
Njk5OWE5OWRjZjFlLzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl
LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2l6x+fd
BuASg/D1taQoMGlrkHegknn97IWrS4oB3atUNOFSU4IyVVVSMjkrSDq5SSlwagjl
kohrk2IyNeGi3qTg50BgGYmBmxVetfyly8DdNJhL2QIyM/B4KhuLUIp4tBkVaZ0r
HzziK1++MWR39pSDqTIHMuZ937S3sOEaJC/D6uN7T5ck8n2aUfARYZQZ4yWks0LW
wyoHheZiRnsAgZcS/f+8ow1vFd76gW1QewLlnZBRDeQ/TwZDvwXSIBw2Tr596LfX
KY2j9oWof/Jd/I/2vJ9d+muag6BbNNMR02lHucJx92CxsWWas8jtQk0NN2hJ9ucX
GbeMA9GAzU9WYw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:45:01 2026 by rpki-client