Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: q8Rw7TLjcZKDp33WkxnN0IzM5Ng3gZPkD1B2umWfvhY=
Subject key identifier: D8:BC:8D:32:FF:B2:8D:49:AB:06:44:14:72:6C:10:18:7A:85:9F:B7
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019D9AAC20CE59ECA551D89DB964504E4A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0E09
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: 7cbTir2tjy7k9mTI4PKNIspRpgyI7hBzJw56a0FMUj4=)
2: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (hash: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:20:ce:59:ec:a5:51:d8:9d:b9:64:50:4e:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=d8bc8d32ffb28d49ab064414726c10187a859fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:6f:50:c7:32:2a:08:63:98:0e:3e:73:ba:
bf:93:19:11:a1:84:7e:d8:90:df:be:ca:31:10:e2:
61:30:e9:fc:78:a4:6f:69:52:da:bf:9b:8f:3d:7e:
2a:0e:6f:b1:1f:d9:47:e0:4a:72:b4:58:b7:62:ff:
02:8c:74:65:94:f6:4a:9f:2f:cf:5e:a7:27:4e:bc:
85:0a:b7:82:09:ce:e0:db:86:d9:ec:21:ec:f2:60:
78:92:38:35:1c:48:38:43:0c:e1:0e:7f:a7:12:57:
12:0f:2f:fc:b7:66:05:b8:25:fb:2a:08:07:6a:11:
e6:f6:ed:ca:c5:7e:a8:90:22:97:32:cd:f2:1e:89:
e1:e8:2c:e2:b5:b8:bc:76:df:77:9f:18:4a:5c:04:
74:d9:47:1f:de:16:a7:6c:4c:95:0f:14:e2:aa:d8:
7a:8d:13:da:f3:f7:49:e8:73:bd:0c:ff:f3:b3:3b:
b5:f4:51:1e:f4:ed:a5:2c:a6:15:8c:d7:27:32:fc:
79:23:73:ae:eb:54:df:02:b7:b9:97:71:50:f2:dd:
f4:a8:bf:ee:2d:d7:7b:70:2f:17:d3:30:66:9f:b7:
2f:fe:ff:7a:d8:0e:65:f5:73:d1:eb:85:18:da:c5:
1e:78:a5:ee:21:11:29:ce:0f:75:e0:93:29:ad:7f:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:8D:32:FF:B2:8D:49:AB:06:44:14:72:6C:10:18:7A:85:9F:B7
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:f3:2c:7b:3e:53:eb:4c:4d:62:78:85:fb:d4:b8:de:81:
d1:55:5a:b8:ed:3e:b6:4a:48:18:b1:c5:ff:a8:f3:a7:4e:83:
38:4c:c1:4f:04:19:fb:4c:db:8e:e9:16:83:88:ad:55:36:68:
ab:a4:b8:fb:11:19:3f:87:6a:72:d9:bf:2d:49:81:cb:e1:1a:
dd:32:d5:13:8b:45:48:8c:32:57:e0:70:2f:e1:49:46:87:d7:
27:3e:35:97:e8:6b:3b:f3:62:33:e8:95:73:08:ce:74:a7:d2:
7d:93:0a:04:3f:af:65:a5:ea:5a:c6:fe:25:49:5d:81:07:34:
e7:5f:f3:84:10:db:8c:f1:91:8d:20:57:17:f9:61:50:09:c7:
65:f0:8d:65:39:03:b6:f2:dd:a9:0f:36:78:ca:1a:bf:c4:2a:
bb:97:26:db:54:c8:96:6e:41:d4:ae:a8:4f:ff:d1:71:d6:f4:
92:03:48:94:54:ed:c0:9b:f4:29:4f:af:6d:9a:29:11:dd:a6:
ed:e0:7e:95:7e:c1:d1:06:89:e6:43:b4:db:9e:57:5a:fa:bb:
5c:b7:9c:b9:00:40:05:ad:27:a0:bc:e5:db:30:7f:65:93:3f:
db:24:a9:ce:ee:99:d2:df:68:3f:e9:97:c7:68:c3:17:0a:43:
b2:23:f3:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arCDOWeylUdiduWRQTkpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjYwNDE3MDkwMTA0WhcNMjYwNDE4MDkwMTA0WjAzMTEwLwYDVQQD
EyhkOGJjOGQzMmZmYjI4ZDQ5YWIwNjQ0MTQ3MjZjMTAxODdhODU5ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEFvUMcyKghjmA4+c7q/kxkRoYR+
2JDfvsoxEOJhMOn8eKRvaVLav5uPPX4qDm+xH9lH4EpytFi3Yv8CjHRllPZKny/P
XqcnTryFCreCCc7g24bZ7CHs8mB4kjg1HEg4QwzhDn+nElcSDy/8t2YFuCX7KggH
ahHm9u3KxX6okCKXMs3yHonh6Czitbi8dt93nxhKXAR02Ucf3hanbEyVDxTiqth6
jRPa8/dJ6HO9DP/zszu19FEe9O2lLKYVjNcnMvx5I3Ou61TfAre5l3FQ8t30qL/u
Ldd7cC8X0zBmn7cv/v962A5l9XPR64UY2sUeeKXuIREpzg914JMprX+01wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi8jTL/so1JqwZEFHJsEBh6hZ+3MB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7rzLHs+
U+tMTWJ4hfvUuN6B0VVauO0+tkpIGLHF/6jzp06DOEzBTwQZ+0zbjukWg4itVTZo
q6S4+xEZP4dqctm/LUmBy+Ea3TLVE4tFSIwyV+BwL+FJRofXJz41l+hrO/NiM+iV
cwjOdKfSfZMKBD+vZaXqWsb+JUldgQc051/zhBDbjPGRjSBXF/lhUAnHZfCNZTkD
tvLdqQ82eMoav8Qqu5cm21TIlm5B1K6oT//Rcdb0kgNIlFTtwJv0KU+vbZopEd2m
7eB+lX7B0QaJ5kO0255XWvq7XLecuQBABa0noLzl2zB/ZZM/2ySpzu6Z0t9oP+mX
x2jDFwpDsiPzVg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:19 2026 by rpki-client