Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: 9Z4GAKKQykaTf8YyBskBNK0RFefE1vvLHEz7lsZGW8M=
Subject key identifier: 14:90:F6:FB:97:AC:CE:C1:4A:57:83:62:F0:CC:86:D0:62:D4:14:0A
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019D99CFDF760494705BCE9041C26C3544C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 15FF
Signing time: Fri 17 Apr 2026 05:00:30 +0000
Manifest this update: Fri 17 Apr 2026 05:00:30 +0000
Manifest next update: Sat 18 Apr 2026 05:00:30 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: 1RiW7AQd9BuK2mtFeVFLfS4J+Jx9F3VYM5SzCmHq2QA=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:df:76:04:94:70:5b:ce:90:41:c2:6c:35:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Apr 17 05:00:30 2026 GMT
Not After : Apr 18 05:00:30 2026 GMT
Subject: CN=1490f6fb97accec14a578362f0cc86d062d4140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:67:a0:dc:d5:98:28:08:f6:56:f9:fd:97:
bf:6a:97:81:67:bc:c2:f4:e4:38:7a:d7:b6:47:70:
96:07:26:a7:d8:8c:52:13:ca:58:ac:32:b1:3a:0c:
c1:61:e6:a5:84:29:90:40:a8:64:59:d3:85:82:f3:
50:23:ff:cb:84:4c:55:95:48:b4:ef:05:1a:07:af:
87:3d:b4:d5:9d:f0:f7:58:9e:90:74:b7:31:c3:84:
10:34:7f:51:04:ee:d8:d0:5f:f6:c2:6f:8d:ee:ab:
a1:e0:5d:9c:ae:47:f8:5b:e5:87:16:2f:fa:c3:a7:
7c:c9:af:7e:94:96:ea:52:ab:ef:32:e9:57:9e:4c:
f0:e4:4f:c3:c0:36:dd:19:e3:8f:bb:63:a2:c1:6b:
49:45:b1:c7:e8:7b:e7:9d:9c:11:70:85:0a:38:90:
65:27:53:9a:e9:12:a1:e6:de:ff:95:28:7a:fd:02:
52:74:eb:1e:f6:94:c5:53:16:c9:fe:2d:fc:68:a2:
c8:ec:3e:3a:0a:33:54:6a:89:46:9b:bf:e1:33:f9:
61:87:90:71:ae:00:02:5b:24:97:1a:a6:24:f4:7c:
9a:bb:1b:6c:f9:e2:a9:03:56:23:82:32:2b:2d:e3:
0b:91:ae:7c:56:b4:70:ba:35:b3:66:50:06:00:94:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:F6:FB:97:AC:CE:C1:4A:57:83:62:F0:CC:86:D0:62:D4:14:0A
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:a6:f0:a3:f5:f3:01:de:f3:d4:1d:07:35:57:eb:bf:d5:
4d:e3:3e:0d:c8:6d:d4:c9:95:27:1f:25:e5:f3:75:97:80:52:
1d:a7:84:87:ba:46:44:fa:c1:ee:83:83:fe:1d:f8:75:6b:1b:
70:1b:44:19:c5:22:c0:01:90:45:9c:6b:5d:b1:fa:bc:5d:1a:
77:7e:a3:3f:27:71:ba:fd:d9:e0:50:5f:d9:33:3e:a7:55:cb:
0b:9d:ad:b8:d5:32:e2:02:fe:7d:d3:f6:f5:23:c2:e1:b9:c5:
82:f1:82:94:59:0d:62:76:06:1e:65:37:57:ac:ed:09:63:b5:
57:19:cc:44:96:3b:68:a2:95:80:45:3c:9b:40:3a:34:79:ec:
c1:44:f2:ea:64:d7:74:1b:fb:bf:b9:2f:d6:de:0a:88:5e:43:
e1:59:a5:6a:57:5c:2f:45:99:5b:09:9a:f6:f7:a8:bb:74:c1:
ec:e1:fa:6d:be:0c:09:83:b2:57:d6:c7:80:04:93:48:73:6c:
48:85:52:1e:6b:e4:1c:8e:ca:9f:50:b0:dc:3c:fa:3b:ee:e3:
27:16:9b:13:ec:31:d3:34:f5:1c:cd:a8:e6:5d:a7:80:9f:42:
ab:5d:13:35:23:d2:3a:df:55:bd:f1:56:4d:3b:38:4e:f6:f3:
d8:01:e8:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz992BJRwW86QQcJsNUTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjYwNDE3MDUwMDMwWhcNMjYwNDE4MDUwMDMwWjAzMTEwLwYDVQQD
EygxNDkwZjZmYjk3YWNjZWMxNGE1NzgzNjJmMGNjODZkMDYyZDQxNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSRnoNzVmCgI9lb5/Ze/apeBZ7zC
9OQ4ete2R3CWByan2IxSE8pYrDKxOgzBYealhCmQQKhkWdOFgvNQI//LhExVlUi0
7wUaB6+HPbTVnfD3WJ6QdLcxw4QQNH9RBO7Y0F/2wm+N7quh4F2crkf4W+WHFi/6
w6d8ya9+lJbqUqvvMulXnkzw5E/DwDbdGeOPu2OiwWtJRbHH6HvnnZwRcIUKOJBl
J1Oa6RKh5t7/lSh6/QJSdOse9pTFUxbJ/i38aKLI7D46CjNUaolGm7/hM/lhh5Bx
rgACWySXGqYk9Hyauxts+eKpA1YjgjIrLeMLka58VrRwujWzZlAGAJR2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSQ9vuXrM7BSleDYvDMhtBi1BQKMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo6m8KP1
8wHe89QdBzVX67/VTeM+Dcht1MmVJx8l5fN1l4BSHaeEh7pGRPrB7oOD/h34dWsb
cBtEGcUiwAGQRZxrXbH6vF0ad36jPydxuv3Z4FBf2TM+p1XLC52tuNUy4gL+fdP2
9SPC4bnFgvGClFkNYnYGHmU3V6ztCWO1VxnMRJY7aKKVgEU8m0A6NHnswUTy6mTX
dBv7v7kv1t4KiF5D4VmlaldcL0WZWwma9veou3TB7OH6bb4MCYOyV9bHgASTSHNs
SIVSHmvkHI7Kn1Cw3Dz6O+7jJxabE+wx0zT1HM2o5l2ngJ9Cq10TNSPSOt9VvfFW
TTs4Tvbz2AHo6A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:18 2026 by rpki-client