Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: v3LN9+y99S+29RBo/WVQ3Uwl5xGUbfye/2tKkcyxfUU=
Subject key identifier: A9:35:2A:4E:1B:70:32:9C:36:83:04:31:84:36:17:F0:20:27:48:BE
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019D9A3ED28BD603496A37DC90E1C9753180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: sN2mZo18y0D+AHjlWmDa76UBwAB3XYNL38Ld8w9fnXg=)
2: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
3: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
4: kj8-3DtT32XqscwKCiQPzi9o7X4.roa (hash: VlQ7LnPKpNwk4BdUZ5Ryr+mzC2TSKzAr4UDFF48gtfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:8b:d6:03:49:6a:37:dc:90:e1:c9:75:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=a9352a4e1b70329c36830431843617f0202748be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:3e:52:c8:f0:bf:89:ac:61:d6:10:e4:3c:
b0:eb:17:79:a0:ae:56:6c:72:4a:d4:a8:a6:89:5c:
1a:4d:ff:6f:0e:16:d9:dd:90:0a:ef:be:21:99:bd:
ed:39:f5:13:ac:56:0e:b9:ff:79:82:b0:03:63:13:
ca:31:25:d6:ee:9b:b6:b7:aa:c7:ca:4f:14:f5:4b:
0e:8d:7e:f2:20:84:80:73:ff:dc:d7:b3:1e:4a:b2:
ed:91:55:a9:fa:e4:ab:90:3e:68:01:35:2e:28:eb:
8a:61:33:71:db:fd:29:73:9a:c3:c1:8a:8c:bc:a2:
65:af:ca:ea:94:09:db:81:5e:d7:0a:51:ce:f2:99:
46:01:a0:d8:71:f7:3f:b5:97:bd:4f:b6:4b:33:11:
87:32:54:93:58:cb:6b:b1:c5:13:0a:e3:7a:51:43:
2e:72:f4:ef:8c:76:37:f4:ff:60:50:1d:c3:2e:ee:
3f:ef:a8:49:7d:e3:b1:36:ba:f5:bd:9b:fd:d4:a8:
c6:a8:7b:c9:1d:37:4d:b7:e3:d2:be:fa:06:96:1b:
97:65:91:96:e6:79:ee:d0:42:75:06:f3:23:fe:12:
d4:c3:1e:59:dd:a6:9c:7e:a6:52:d9:9d:8d:15:bc:
be:ad:8f:4f:b3:0c:03:7c:c8:c2:e5:cc:70:75:c3:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:2A:4E:1B:70:32:9C:36:83:04:31:84:36:17:F0:20:27:48:BE
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:71:6e:ea:57:f4:06:a8:c2:33:01:b0:54:ba:24:d2:4d:ac:
26:7f:a9:79:32:65:78:84:b0:bd:81:27:75:ab:10:97:c9:01:
c9:95:05:4b:14:70:f5:79:7d:fb:aa:21:3b:f5:e2:98:70:7f:
ce:b0:64:14:d8:59:68:4f:5f:37:a1:36:9a:21:a6:43:51:db:
94:5c:20:db:72:ac:b7:7d:8b:5f:25:e4:31:1c:e5:7c:bc:41:
3e:3e:46:09:28:be:2e:93:be:a5:c7:6e:15:01:53:04:47:bf:
c9:41:e3:ed:91:79:4f:3f:87:90:30:8d:0e:f9:a5:9f:70:e5:
10:af:fd:1d:a9:33:cf:03:2f:bd:9e:62:0d:2f:24:5f:c4:60:
4a:7b:5a:7d:6e:b2:36:e6:c7:47:4b:c1:57:a5:87:66:9c:fa:
50:85:11:a2:fc:73:a2:bd:b1:4c:9d:54:3d:9b:03:e2:7b:1c:
d3:e3:43:42:89:9b:15:20:32:ad:39:b6:fe:7e:8d:ed:a9:76:
28:f3:e5:47:0e:78:cc:7e:58:4d:df:5b:9c:4c:c4:67:5a:45:
19:25:a1:aa:26:9c:96:77:3e:ba:01:89:ec:32:11:a3:08:60:
2e:cb:52:3c:2a:61:dc:b1:d2:c2:a3:f3:9e:c9:ac:1a:2c:44:
1a:54:60:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPtKL1gNJajfckOHJdTGAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjYwNDE3MDcwMTQxWhcNMjYwNDE4MDcwMTQxWjAzMTEwLwYDVQQD
EyhhOTM1MmE0ZTFiNzAzMjljMzY4MzA0MzE4NDM2MTdmMDIwMjc0OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocQ+Usjwv4msYdYQ5Dyw6xd5oK5W
bHJK1KimiVwaTf9vDhbZ3ZAK774hmb3tOfUTrFYOuf95grADYxPKMSXW7pu2t6rH
yk8U9UsOjX7yIISAc//c17MeSrLtkVWp+uSrkD5oATUuKOuKYTNx2/0pc5rDwYqM
vKJlr8rqlAnbgV7XClHO8plGAaDYcfc/tZe9T7ZLMxGHMlSTWMtrscUTCuN6UUMu
cvTvjHY39P9gUB3DLu4/76hJfeOxNrr1vZv91KjGqHvJHTdNt+PSvvoGlhuXZZGW
5nnu0EJ1BvMj/hLUwx5Z3aacfqZS2Z2NFby+rY9PswwDfMjC5cxwdcPEmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk1Kk4bcDKcNoMEMYQ2F/AgJ0i+MB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3Fu6lf0
BqjCMwGwVLok0k2sJn+peTJleISwvYEndasQl8kByZUFSxRw9Xl9+6ohO/XimHB/
zrBkFNhZaE9fN6E2miGmQ1HblFwg23Kst32LXyXkMRzlfLxBPj5GCSi+LpO+pcdu
FQFTBEe/yUHj7ZF5Tz+HkDCNDvmln3DlEK/9HakzzwMvvZ5iDS8kX8RgSntafW6y
NubHR0vBV6WHZpz6UIURovxzor2xTJ1UPZsD4nsc0+NDQombFSAyrTm2/n6N7al2
KPPlRw54zH5YTd9bnEzEZ1pFGSWhqiaclnc+ugGJ7DIRowhgLstSPCph3LHSwqPz
nsmsGixEGlRgYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:25 2026 by rpki-client