Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: SzLTn+Rwa2gnd0Mf333Tm9uoNTYRNFMeRX/la8Rm9/E=
Subject key identifier: BE:2E:20:58:06:25:5B:FD:E5:B1:3C:E2:45:44:9F:20:17:69:FF:96
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019D9A072140D053D744CF27782799BCB952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 06:00:51 +0000
Manifest this update: Fri 17 Apr 2026 06:00:51 +0000
Manifest next update: Sat 18 Apr 2026 06:00:51 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: ZqffNfafSUevuRVbNFOmjcd6WoWBH9RwL1pUXYmPLZ4=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:21:40:d0:53:d7:44:cf:27:78:27:99:bc:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Apr 17 06:00:51 2026 GMT
Not After : Apr 18 06:00:51 2026 GMT
Subject: CN=be2e205806255bfde5b13ce245449f201769ff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:9c:23:cc:dc:43:3a:f3:a7:d6:51:b8:00:
9a:60:2d:24:db:f5:63:69:19:c5:a6:73:42:72:9f:
f0:60:41:e4:da:6a:c5:e6:71:48:fd:14:5e:a0:41:
ba:43:ce:ab:db:82:bb:07:47:41:40:79:c5:26:ad:
de:19:b9:56:a0:62:4d:43:48:7f:d4:15:22:cf:95:
6b:fa:2c:09:44:b9:d5:5e:89:b7:a1:14:9e:bd:a7:
bb:92:e8:4f:50:b9:4e:6b:0b:fb:2d:65:38:e2:9b:
1f:90:4d:3a:8c:e9:68:cf:ce:e4:51:b0:e4:82:ca:
3b:14:95:76:5c:92:70:49:4f:b3:12:10:17:94:01:
91:24:b5:08:47:2c:e8:f6:48:f0:ce:64:ae:c0:ae:
4c:15:8c:fe:aa:17:22:04:29:93:bd:6c:68:45:4f:
63:2f:f8:c3:0c:83:2c:51:75:c3:ef:4e:63:b7:41:
4f:14:89:ea:c0:f0:84:1c:5d:18:4e:b8:99:b6:d1:
05:ac:ca:86:1f:22:d2:79:c3:8b:3e:f6:f1:27:86:
c8:78:4e:d1:1b:e1:8f:1a:ef:a4:9e:f8:64:31:2f:
19:65:17:f4:e2:5f:cb:d2:15:52:7d:70:ec:c2:51:
3d:ef:6b:c7:55:f1:c7:86:23:7f:e0:99:62:30:05:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:20:58:06:25:5B:FD:E5:B1:3C:E2:45:44:9F:20:17:69:FF:96
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:a9:20:f2:0a:4f:1e:f3:40:64:d3:9f:ed:db:16:be:58:
d2:3e:88:0d:a8:94:03:57:5a:f5:f6:08:f3:83:65:84:b7:82:
dd:b7:5c:23:3e:77:77:bc:11:b0:ce:3e:81:31:bf:dc:b6:6a:
a0:95:4e:00:0c:d1:ad:f3:e3:20:be:45:88:8d:8a:8f:01:e1:
15:de:dd:4c:5d:53:2b:78:d5:ca:c1:24:09:30:38:fc:a3:7a:
ad:f1:06:db:d5:ed:b6:ae:c4:07:fd:7b:35:14:2c:88:27:7c:
7d:5e:80:e1:fb:8f:22:3e:ba:a0:19:62:3a:23:fb:d6:90:4b:
b0:fc:73:c4:08:3c:ce:bc:45:e8:4a:88:36:01:4b:78:6a:b0:
c5:84:9b:f1:9c:06:f3:ef:0d:38:e7:e0:bd:b2:b5:9f:57:2e:
a3:e4:25:71:e0:57:c8:ad:85:57:87:af:b3:fa:e0:40:cb:a1:
f4:51:dc:6f:35:dd:1a:88:0d:3b:6c:2c:47:52:17:01:a2:ac:
c4:3f:df:e0:74:49:4d:48:cc:a8:05:05:98:df:54:23:b4:21:
97:b4:ab:03:15:fc:2d:02:37:c3:3a:94:34:fe:dc:8e:87:5a:
b4:5d:0f:76:67:03:75:9d:4e:36:97:0d:43:ea:07:e5:0d:de:
5e:46:06:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aByFA0FPXRM8neCeZvLlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYwNDE3MDYwMDUxWhcNMjYwNDE4MDYwMDUxWjAzMTEwLwYDVQQD
EyhiZTJlMjA1ODA2MjU1YmZkZTViMTNjZTI0NTQ0OWYyMDE3NjlmZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6cI8zcQzrzp9ZRuACaYC0k2/Vj
aRnFpnNCcp/wYEHk2mrF5nFI/RReoEG6Q86r24K7B0dBQHnFJq3eGblWoGJNQ0h/
1BUiz5Vr+iwJRLnVXom3oRSevae7kuhPULlOawv7LWU44psfkE06jOloz87kUbDk
gso7FJV2XJJwSU+zEhAXlAGRJLUIRyzo9kjwzmSuwK5MFYz+qhciBCmTvWxoRU9j
L/jDDIMsUXXD705jt0FPFInqwPCEHF0YTriZttEFrMqGHyLSecOLPvbxJ4bIeE7R
G+GPGu+knvhkMS8ZZRf04l/L0hVSfXDswlE972vHVfHHhiN/4JliMAV2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4uIFgGJVv95bE84kVEnyAXaf+WMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPqpIPIK
Tx7zQGTTn+3bFr5Y0j6IDaiUA1da9fYI84NlhLeC3bdcIz53d7wRsM4+gTG/3LZq
oJVOAAzRrfPjIL5FiI2KjwHhFd7dTF1TK3jVysEkCTA4/KN6rfEG29Xttq7EB/17
NRQsiCd8fV6A4fuPIj66oBliOiP71pBLsPxzxAg8zrxF6EqINgFLeGqwxYSb8ZwG
8+8NOOfgvbK1n1cuo+QlceBXyK2FV4evs/rgQMuh9FHcbzXdGogNO2wsR1IXAaKs
xD/f4HRJTUjMqAUFmN9UI7Qhl7SrAxX8LQI3wzqUNP7cjodatF0PdmcDdZ1ONpcN
Q+oH5Q3eXkYGIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:27 2026 by rpki-client