Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: mXJLxB0s1fiWMVBOoJJdei0DOXhAKPNBJzVpsFISDkI=
Subject key identifier: D3:D1:A0:74:5B:EA:64:31:E0:81:99:39:1C:12:47:B3:BC:DC:57:04
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019DA3E6005317808DC1DEE42B8ACAA77623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:00:52 +0000
Manifest this update: Sun 19 Apr 2026 04:00:52 +0000
Manifest next update: Mon 20 Apr 2026 04:00:52 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: Avwn66VX4/px0qdYpajriJvOj6zOyvKg3MidbiBqFyw=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:00:53:17:80:8d:c1:de:e4:2b:8a:ca:a7:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Apr 19 04:00:52 2026 GMT
Not After : Apr 20 04:00:52 2026 GMT
Subject: CN=d3d1a0745bea6431e08199391c1247b3bcdc5704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:a5:f7:44:5c:2f:91:15:12:5b:3c:2b:28:
dd:f9:e6:e8:c5:e4:97:61:41:ad:35:b9:7d:08:7c:
9e:dd:c7:7b:cf:8e:b8:15:a7:a5:2c:f6:9a:47:c8:
70:04:78:81:72:66:e2:3c:77:9e:b4:26:b8:a2:1d:
5c:1c:8d:c2:f4:57:70:b7:49:c8:2a:ca:ae:9f:9a:
2a:23:32:f7:54:4c:e6:19:f9:c8:ee:6e:8b:22:9c:
bc:2c:57:fb:8d:9c:96:d9:9e:5e:8e:5e:1d:87:17:
7d:51:5c:de:e6:ef:73:b1:42:5d:5a:b1:32:ff:c6:
6c:d1:fd:9b:d0:86:64:c9:51:cb:2f:0b:78:ee:88:
da:80:55:ba:25:da:48:61:5b:c0:af:a7:ff:43:e8:
55:45:24:d2:5d:60:51:fb:a6:08:71:9f:fa:f5:04:
55:a9:dd:fc:8a:fa:a4:75:a0:cd:ee:3a:e4:7f:b3:
f0:75:b1:ee:63:04:8b:71:6c:4d:9f:64:04:ec:37:
8b:bf:42:01:fe:03:48:6e:90:be:be:a1:ff:cb:f4:
7e:75:2c:08:c9:12:b3:06:78:01:c3:ea:99:01:45:
fd:b2:42:3f:4b:00:79:26:fb:a9:e4:60:dc:90:e1:
02:a0:ce:48:1f:e3:07:39:58:ba:71:59:1a:b0:01:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:A0:74:5B:EA:64:31:E0:81:99:39:1C:12:47:B3:BC:DC:57:04
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:53:da:55:d0:65:be:a2:09:1f:f2:7c:93:72:b1:89:5d:
71:1b:ef:da:7f:e5:78:ac:39:37:e1:dc:a9:2e:91:04:0e:b5:
e4:62:50:1c:4f:a7:ad:0a:bb:c4:78:e7:b8:73:7c:8a:7e:03:
21:ef:fc:ae:14:12:87:12:55:9e:d0:1b:6b:39:74:dd:b4:cb:
38:37:98:9e:5d:02:8c:a4:05:06:c6:39:a4:75:b6:37:8e:e0:
41:84:0a:70:f3:37:ca:e2:6a:c7:6e:61:4a:74:d4:20:42:0d:
5e:f4:3f:66:08:6a:5b:80:5a:bb:a2:b1:c9:78:02:9d:12:0d:
9b:ba:d4:de:0e:58:f5:77:a3:7c:13:4a:c3:14:1e:e1:5e:76:
90:78:12:b7:6d:fd:c5:02:b7:0e:eb:72:5e:0a:11:dd:d9:4c:
6e:e2:6a:0e:a2:8e:73:c5:3f:20:ee:1d:bf:61:03:c4:85:e6:
d8:09:55:d3:08:ca:d6:a3:58:06:c9:4c:77:8c:1b:ae:ff:5b:
23:ed:a8:55:d4:d7:5b:af:d1:04:53:46:24:64:82:20:ad:97:
89:5d:27:37:73:28:49:e9:58:8a:73:73:a8:e6:4e:49:a9:1f:
4f:a3:cd:eb:91:f8:79:07:fe:4b:cf:64:6f:0d:dc:b6:14:8e:
fa:fd:50:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5gBTF4CNwd7kK4rKp3YjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzhlYTQ2Y2MyMWQ0NWVkNjEyNjhkNGE5ZjU2NzMyYzg1
ZTIxNTAwHhcNMjYwNDE5MDQwMDUyWhcNMjYwNDIwMDQwMDUyWjAzMTEwLwYDVQQD
EyhkM2QxYTA3NDViZWE2NDMxZTA4MTk5MzkxYzEyNDdiM2JjZGM1NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ROl90RcL5EVEls8Kyjd+eboxeSX
YUGtNbl9CHye3cd7z464FaelLPaaR8hwBHiBcmbiPHeetCa4oh1cHI3C9Fdwt0nI
Ksqun5oqIzL3VEzmGfnI7m6LIpy8LFf7jZyW2Z5ejl4dhxd9UVze5u9zsUJdWrEy
/8Zs0f2b0IZkyVHLLwt47ojagFW6JdpIYVvAr6f/Q+hVRSTSXWBR+6YIcZ/69QRV
qd38ivqkdaDN7jrkf7PwdbHuYwSLcWxNn2QE7DeLv0IB/gNIbpC+vqH/y/R+dSwI
yRKzBngBw+qZAUX9skI/SwB5Jvup5GDckOECoM5IH+MHOVi6cVkasAHWhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPRoHRb6mQx4IGZORwSR7O83FcEMB8GA1UdIwQY
MBaAFA946kbMIdRe1hJo1Kn1ZzLIXiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMt
MDMyYjNiNjE0ZGQ4LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMtMDMyYjNiNjE0ZGQ4
LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVtT2lXQ
Zb6iCR/yfJNysYldcRvv2n/leKw5N+HcqS6RBA615GJQHE+nrQq7xHjnuHN8in4D
Ie/8rhQShxJVntAbazl03bTLODeYnl0CjKQFBsY5pHW2N47gQYQKcPM3yuJqx25h
SnTUIEINXvQ/ZghqW4Bau6KxyXgCnRINm7rU3g5Y9XejfBNKwxQe4V52kHgSt239
xQK3DutyXgoR3dlMbuJqDqKOc8U/IO4dv2EDxIXm2AlV0wjK1qNYBslMd4wbrv9b
I+2oVdTXW6/RBFNGJGSCIK2XiV0nN3MoSelYinNzqOZOSakfT6PN65H4eQf+S89k
bw3cthSO+v1Qag==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:38 2026 by rpki-client