Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: 2XCZD7I0HAmpOc4MYIAqyed9vsQy2BT9yzRke+8hnKA=
Subject key identifier: 27:C1:A6:A4:B1:6E:ED:00:4C:2D:99:09:6A:14:99:9F:0C:D7:12:16
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019D98BD21E4BE73FA6B3207A0EB548BCA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:24 +0000
Manifest this update: Fri 17 Apr 2026 00:00:24 +0000
Manifest next update: Sat 18 Apr 2026 00:00:24 +0000
Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: D7hSZFLLGAq0fF1gFtt/AgNB5z4kQCPzjOI4ktGjLNs=)
2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:21:e4:be:73:fa:6b:32:07:a0:eb:54:8b:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Apr 17 00:00:24 2026 GMT
Not After : Apr 18 00:00:24 2026 GMT
Subject: CN=27c1a6a4b16eed004c2d99096a14999f0cd71216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:8c:e0:cb:a0:b4:54:40:c6:42:89:f0:d2:
11:21:66:43:a8:10:dc:a7:67:63:1a:2e:c6:df:3f:
67:7a:d9:75:18:1a:98:a0:79:6d:4a:c3:40:5c:b0:
a0:71:2c:c9:c8:87:19:ec:b4:f5:6d:69:8a:5f:df:
89:9c:25:6a:dc:27:e9:43:28:8b:00:78:37:49:6f:
85:1e:15:85:ab:4c:bb:59:fc:51:d9:23:f1:81:e2:
f4:b1:14:d1:d8:e9:5c:35:9a:05:b9:48:9a:77:ae:
03:59:28:fd:f8:b1:b1:fa:d1:e0:56:af:ad:ff:53:
c4:8d:2a:97:1c:dc:fd:f9:97:54:8f:dc:33:1f:8b:
c3:b2:31:86:87:c3:62:4c:04:a5:0d:22:00:7e:12:
ed:69:76:50:88:8e:73:b5:e3:36:70:89:f9:a1:5b:
86:62:e6:e2:a4:2a:f4:3e:34:2f:ae:03:59:b0:b8:
cc:e8:7b:f5:4a:2c:14:18:f9:e8:a8:1b:43:ea:45:
9a:e3:12:40:f4:32:6d:d8:e4:ee:06:e5:c0:5a:0c:
c1:fd:b8:d6:90:2d:8b:40:2b:2d:e6:4b:44:e7:0a:
a0:98:2a:60:ed:22:97:d7:a2:df:3e:80:ca:0a:c5:
bf:16:3e:8b:6c:4b:51:85:23:46:85:a3:53:63:99:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:A6:A4:B1:6E:ED:00:4C:2D:99:09:6A:14:99:9F:0C:D7:12:16
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e5:1b:75:33:69:2c:54:71:c2:70:67:34:82:74:db:ea:d7:
d9:2d:67:a6:08:3c:5f:24:bf:12:ab:24:79:af:1a:6a:12:be:
ab:f5:c5:d3:a9:04:6e:1e:1c:38:a1:cb:b6:46:fe:35:f0:68:
bb:e7:fa:5e:40:df:94:4f:77:98:dc:93:52:f6:ef:ac:37:ee:
84:2e:bc:1e:d3:e2:0e:93:c6:a0:8c:b7:ea:a8:58:43:65:0e:
ec:17:c6:93:82:c3:b0:9f:d6:bf:1d:e6:94:30:4a:6a:6e:b0:
83:e2:13:84:50:b1:92:1f:e5:b9:48:e9:e8:a0:e8:19:7d:f3:
e8:15:ed:9f:91:15:82:1f:08:e9:d9:01:8b:7c:bb:58:7c:eb:
03:cd:a9:1b:f5:03:49:68:78:da:d9:4a:25:3f:6a:81:d2:c1:
8b:d5:a2:1b:f5:46:df:dd:df:e9:27:8e:3d:41:d8:3c:55:f4:
89:d0:d1:7c:48:1c:af:16:ed:b3:98:3b:65:c3:58:b8:98:a5:
b3:da:24:1f:d2:f8:2e:82:f8:d6:fb:4c:79:02:fb:ab:fc:4e:
21:d9:65:e5:85:53:1c:9a:5e:26:ed:f0:c5:52:97:ad:1c:aa:
6c:02:18:85:58:22:f9:04:ce:16:47:b9:f6:a9:ff:64:5d:b7:
c7:2d:b5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvSHkvnP6azIHoOtUi8o8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx
NGYzNjEwHhcNMjYwNDE3MDAwMDI0WhcNMjYwNDE4MDAwMDI0WjAzMTEwLwYDVQQD
EygyN2MxYTZhNGIxNmVlZDAwNGMyZDk5MDk2YTE0OTk5ZjBjZDcxMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzOM4MugtFRAxkKJ8NIRIWZDqBDc
p2djGi7G3z9netl1GBqYoHltSsNAXLCgcSzJyIcZ7LT1bWmKX9+JnCVq3CfpQyiL
AHg3SW+FHhWFq0y7WfxR2SPxgeL0sRTR2OlcNZoFuUiad64DWSj9+LGx+tHgVq+t
/1PEjSqXHNz9+ZdUj9wzH4vDsjGGh8NiTASlDSIAfhLtaXZQiI5zteM2cIn5oVuG
YubipCr0PjQvrgNZsLjM6Hv1SiwUGPnoqBtD6kWa4xJA9DJt2OTuBuXAWgzB/bjW
kC2LQCst5ktE5wqgmCpg7SKX16LfPoDKCsW/Fj6LbEtRhSNGhaNTY5kzaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfBpqSxbu0ATC2ZCWoUmZ8M1xIWMB8GA1UdIwQY
MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt
NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk
LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuUbdTNp
LFRxwnBnNIJ02+rX2S1npgg8XyS/Eqskea8aahK+q/XF06kEbh4cOKHLtkb+NfBo
u+f6XkDflE93mNyTUvbvrDfuhC68HtPiDpPGoIy36qhYQ2UO7BfGk4LDsJ/Wvx3m
lDBKam6wg+IThFCxkh/luUjp6KDoGX3z6BXtn5EVgh8I6dkBi3y7WHzrA82pG/UD
SWh42tlKJT9qgdLBi9WiG/VG393f6SeOPUHYPFX0idDRfEgcrxbts5g7ZcNYuJil
s9okH9L4LoL41vtMeQL7q/xOIdll5YVTHJpeJu3wxVKXrRyqbAIYhVgi+QTOFke5
9qn/ZF23xy21bg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:28 2026 by rpki-client