Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: IVoQP4hD+T4nYnHMeP4z72euMfALEWosiZox4FtaAjw=
Subject key identifier: 18:16:27:98:7D:60:34:2A:AF:B5:82:F8:C9:B8:89:E8:71:46:32:32
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 019D9B8752C95722E585C1EA5C08E83A22C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: pulIKWjUFjhxHETZ/tRLUg9zYD/7Ipe84VYUe0yzcvE=)
2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:52:c9:57:22:e5:85:c1:ea:5c:08:e8:3a:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=181627987d60342aafb582f8c9b889e871463232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:26:e6:50:cf:e9:33:91:79:13:c2:41:99:
04:24:04:24:da:a7:37:98:e8:93:21:7a:08:fc:7d:
0e:e0:66:ad:6c:a8:2b:2f:25:3d:68:9a:6e:18:24:
d2:06:e4:a4:7e:ac:4e:b4:6c:76:8d:c7:da:d0:04:
05:a2:aa:31:a6:94:71:7e:12:68:d4:e2:a2:5d:1f:
80:eb:de:15:74:99:79:5b:98:18:7a:ff:01:28:bf:
6f:8e:02:01:b6:95:2c:c2:50:e4:4e:12:b3:21:bf:
ae:74:50:6e:ce:48:ad:38:e2:99:ae:80:cb:0a:ef:
78:4d:09:32:19:d0:a7:a9:3b:5e:19:3a:48:7a:e4:
d3:89:54:8e:dc:83:43:e3:46:59:e5:85:8e:c5:8c:
0e:19:92:2b:0d:d3:23:3a:6f:70:2d:de:6f:13:b3:
70:2b:b0:ab:46:a2:6b:74:94:df:6d:5d:1b:94:8a:
4f:79:e9:2b:e4:a8:da:0a:0e:d9:bc:af:16:6a:7b:
0f:af:7b:ad:ee:8b:0f:a4:6c:d3:89:18:67:63:d0:
e7:31:95:7c:6a:b9:d2:1c:ef:78:ba:71:58:f5:2c:
b9:22:be:d8:86:01:5a:cc:e9:ab:27:bf:d7:4d:64:
5e:7f:e4:77:2b:79:ce:ea:ea:75:68:3f:a5:0e:8b:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:27:98:7D:60:34:2A:AF:B5:82:F8:C9:B8:89:E8:71:46:32:32
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:5f:8f:07:2d:4a:7f:6d:f5:97:11:e0:6c:42:01:d9:e8:
01:50:f2:fd:c6:70:7b:ea:38:1d:04:ea:e8:f0:ad:a7:a3:7a:
47:33:70:78:05:7e:98:21:5e:51:09:2f:6a:46:da:dc:ca:71:
f8:5d:c1:fd:45:17:eb:a5:ba:9f:34:2b:f4:65:b3:67:cd:27:
2d:12:da:79:e2:56:32:b4:70:c2:0d:f6:17:2a:61:d8:ec:fb:
83:2a:7c:88:d1:dc:b9:f4:66:c0:49:dc:e8:80:d3:da:ec:bb:
b3:d6:58:67:35:96:6f:b9:66:89:85:e3:a7:1b:76:fe:da:fb:
0b:6f:d0:81:c1:3c:c8:19:08:fa:a5:40:11:ea:68:ad:96:41:
e0:e2:14:c9:20:5b:a9:a1:08:72:95:59:92:25:3c:c4:20:ae:
d1:2a:53:56:40:91:4a:c0:cf:6e:0e:95:9a:3d:b8:92:29:41:
6f:f0:b6:e6:02:3d:b5:aa:7e:f3:2a:1e:2d:fc:c9:6e:da:7e:
35:b0:4a:95:45:f3:5f:0f:a8:81:57:2a:ab:d4:80:71:32:fa:
a3:c9:7f:30:a6:38:8d:79:cd:c3:5a:d5:e1:82:1c:e1:41:dd:
77:b0:2d:4d:1a:60:bd:79:d1:af:9b:27:51:ec:ff:c9:1a:1d:
a2:b3:7b:52
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2bh1LJVyLlhcHqXAjoOiLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5
MjE0NzEwHhcNMjYwNDE3MTMwMDMwWhcNMjYwNDE4MTMwMDMwWjAzMTEwLwYDVQQD
EygxODE2Mjc5ODdkNjAzNDJhYWZiNTgyZjhjOWI4ODllODcxNDYzMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoom5lDP6TOReRPCQZkEJAQk2qc3
mOiTIXoI/H0O4GatbKgrLyU9aJpuGCTSBuSkfqxOtGx2jcfa0AQFoqoxppRxfhJo
1OKiXR+A694VdJl5W5gYev8BKL9vjgIBtpUswlDkThKzIb+udFBuzkitOOKZroDL
Cu94TQkyGdCnqTteGTpIeuTTiVSO3IND40ZZ5YWOxYwOGZIrDdMjOm9wLd5vE7Nw
K7CrRqJrdJTfbV0blIpPeekr5KjaCg7ZvK8WansPr3ut7osPpGzTiRhnY9DnMZV8
arnSHO94unFY9Sy5Ir7YhgFazOmrJ7/XTWRef+R3K3nO6up1aD+lDosOsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBgWJ5h9YDQqr7WC+Mm4iehxRjIyMB8GA1UdIwQY
MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1
LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh
NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkJf
jwctSn9t9ZcR4GxCAdnoAVDy/cZwe+o4HQTq6PCtp6N6RzNweAV+mCFeUQkvakba
3Mpx+F3B/UUX66W6nzQr9GWzZ80nLRLaeeJWMrRwwg32Fyph2Oz7gyp8iNHcufRm
wEnc6IDT2uy7s9ZYZzWWb7lmiYXjpxt2/tr7C2/QgcE8yBkI+qVAEeporZZB4OIU
ySBbqaEIcpVZkiU8xCCu0SpTVkCRSsDPbg6Vmj24kilBb/C25gI9tap+8yoeLfzJ
btp+NbBKlUXzXw+ogVcqq9SAcTL6o8l/MKY4jXnNw1rV4YIc4UHdd7AtTRpgvXnR
r5snUez/yRodorN7Ug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:55 2026 by rpki-client