Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: T9NEPd9cfCP7qFwxodJAif0oSpU3K+RSZRQ5txDr/OQ=
Subject key identifier: BC:B3:57:28:AD:90:54:5D:4B:40:93:05:F2:D0:62:C3:37:AD:11:FD
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 019D9A3E66F18555E73E7AB798D57A130B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:13 +0000
Manifest this update: Fri 17 Apr 2026 07:01:13 +0000
Manifest next update: Sat 18 Apr 2026 07:01:13 +0000
Files and hashes: 1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: xaX7UXLn9w1O5ypg2dKLsxX+/FeRFVry7ydU/xY7uOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:66:f1:85:55:e7:3e:7a:b7:98:d5:7a:13:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Apr 17 07:01:13 2026 GMT
Not After : Apr 18 07:01:13 2026 GMT
Subject: CN=bcb35728ad90545d4b409305f2d062c337ad11fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:bc:ad:1b:17:74:c8:45:47:f9:18:9b:48:
2a:6b:9e:39:29:27:b3:8c:99:fd:1b:5f:da:ba:df:
c7:69:da:b4:6e:77:1e:e8:af:6c:4f:62:c4:3b:7d:
98:81:66:7a:bc:86:b7:c2:ad:8d:6b:e4:11:17:1c:
b1:82:86:34:97:e1:4f:56:b5:b7:17:36:8f:64:43:
0c:8e:fc:2c:a7:2a:88:59:51:2f:80:1b:d1:d9:6c:
53:e1:ee:60:38:c2:8a:5b:75:71:e9:a6:bb:43:c9:
cc:52:c7:f6:21:18:82:01:86:73:a5:c5:fd:95:d4:
f2:0b:1a:ad:5e:cb:9c:b6:a2:56:75:78:12:c8:58:
48:00:ae:b2:47:88:b6:bd:59:54:c9:5d:9c:42:02:
d6:ec:d2:73:20:7a:61:62:1c:26:e6:3b:d8:65:60:
7e:2d:57:24:ff:0c:1a:f8:0d:bf:b6:47:05:7b:1a:
24:5e:4c:44:53:33:39:8f:be:10:09:be:05:f2:5f:
87:c1:69:80:9f:6f:d3:5a:79:dd:c6:9b:7b:61:f9:
6c:95:b1:36:0d:e3:28:a5:5b:7d:e8:e8:72:eb:78:
ed:a8:70:53:d4:78:44:d8:6e:77:5e:66:94:43:f4:
2d:9b:f1:cc:ad:64:18:cd:13:4d:7a:d3:0c:0f:bb:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:57:28:AD:90:54:5D:4B:40:93:05:F2:D0:62:C3:37:AD:11:FD
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:43:82:10:93:02:b0:7d:57:30:01:d9:fb:f5:b5:91:db:
1b:84:d2:df:12:26:ac:d0:45:1a:b4:ab:fb:74:5d:fa:4d:85:
3f:80:3c:98:05:1f:ef:17:ff:03:c1:54:1b:46:7e:52:8d:89:
19:51:9d:6f:fc:e0:79:b7:2e:89:6f:f8:e0:2b:ef:d8:07:05:
db:d8:49:22:29:d8:9e:49:87:ab:06:65:db:88:ef:2f:13:2b:
fa:87:38:55:92:22:d8:27:70:0c:18:4e:7d:a0:c2:a9:31:a4:
2e:01:ee:22:af:0a:fb:c6:c1:a2:3b:ba:8e:64:61:56:cc:db:
67:3a:b4:e1:42:17:2b:43:ba:06:9b:ee:90:8b:f7:3d:32:da:
b6:a6:e7:c6:54:3e:db:4a:e9:97:4d:65:55:5f:8b:a7:d0:f5:
15:01:8c:96:16:ee:61:fa:b8:ef:ae:fb:66:92:e4:ef:15:a8:
f5:5a:5a:1d:0a:7c:3a:b2:c8:67:e0:bc:df:be:fc:d7:f7:f4:
22:34:e7:2c:e1:dd:75:1d:d4:d7:d7:99:74:be:5d:61:8f:64:
da:1d:fb:42:2e:51:09:dd:9e:f8:1e:26:b7:10:61:6d:8f:91:
a2:15:70:eb:77:85:9f:14:d6:51:52:0a:f9:27:f0:37:c8:b9:
d5:26:3a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPmbxhVXnPnq3mNV6EwswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1
ZDFmODkwHhcNMjYwNDE3MDcwMTEzWhcNMjYwNDE4MDcwMTEzWjAzMTEwLwYDVQQD
EyhiY2IzNTcyOGFkOTA1NDVkNGI0MDkzMDVmMmQwNjJjMzM3YWQxMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuji8rRsXdMhFR/kYm0gqa545KSez
jJn9G1/aut/Hadq0bnce6K9sT2LEO32YgWZ6vIa3wq2Na+QRFxyxgoY0l+FPVrW3
FzaPZEMMjvwspyqIWVEvgBvR2WxT4e5gOMKKW3Vx6aa7Q8nMUsf2IRiCAYZzpcX9
ldTyCxqtXsuctqJWdXgSyFhIAK6yR4i2vVlUyV2cQgLW7NJzIHphYhwm5jvYZWB+
LVck/wwa+A2/tkcFexokXkxEUzM5j74QCb4F8l+HwWmAn2/TWnndxpt7YflslbE2
DeMopVt96Ohy63jtqHBT1HhE2G53XmaUQ/Qtm/HMrWQYzRNNetMMD7vaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyzVyitkFRdS0CTBfLQYsM3rRH9MB8GA1UdIwQY
MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt
MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw
LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/pDghCT
ArB9VzAB2fv1tZHbG4TS3xImrNBFGrSr+3Rd+k2FP4A8mAUf7xf/A8FUG0Z+Uo2J
GVGdb/zgebcuiW/44Cvv2AcF29hJIinYnkmHqwZl24jvLxMr+oc4VZIi2CdwDBhO
faDCqTGkLgHuIq8K+8bBoju6jmRhVszbZzq04UIXK0O6BpvukIv3PTLatqbnxlQ+
20rpl01lVV+Lp9D1FQGMlhbuYfq47677ZpLk7xWo9VpaHQp8OrLIZ+C837781/f0
IjTnLOHddR3U19eZdL5dYY9k2h37Qi5RCd2e+B4mtxBhbY+RohVw63eFnxTWUVIK
+SfwN8i51SY6Bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:57 2026 by rpki-client