Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: vFY2f/LZ8EdjrcSRZqYAc4JSKBZW4oRbs5Ug91nutZ0=
Subject key identifier: 98:0B:88:E9:81:DC:3B:A9:A7:7D:CD:9C:08:E6:0B:CD:9C:AB:92:D1
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 019D97E266E2B62BEE201E4ACF180187E3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 12BC
Signing time: Thu 16 Apr 2026 20:01:30 +0000
Manifest this update: Thu 16 Apr 2026 20:01:30 +0000
Manifest next update: Fri 17 Apr 2026 20:01:30 +0000
Files and hashes: 1: nU7s4umftAMiGN6r7wo4esT2bnk.roa (hash: L35jrGV9LS0QTr/GiGbmv85SpItryPBRv0p450JVajw=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: CMXdAi4kuVCAfoU/QgAk1upMPfk0WPgdJl+2WA0mBXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:66:e2:b6:2b:ee:20:1e:4a:cf:18:01:87:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Apr 16 20:01:30 2026 GMT
Not After : Apr 17 20:01:30 2026 GMT
Subject: CN=980b88e981dc3ba9a77dcd9c08e60bcd9cab92d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:54:86:34:a4:0e:25:40:00:e1:1b:d3:ea:
d3:c7:96:fc:70:58:40:28:cc:be:54:dc:a0:35:b0:
32:8e:df:dc:17:a0:87:0c:4c:96:01:58:e4:da:ad:
36:40:51:a7:c2:9d:fc:69:73:7e:f6:9f:1e:a1:62:
9c:6b:3b:e7:12:c8:58:3c:0f:df:a4:da:a6:df:53:
1b:40:20:76:f7:37:96:be:73:f3:8e:3f:35:b9:e2:
c7:85:09:be:84:92:ad:ce:b7:e4:63:ee:b7:e8:e2:
92:f9:19:af:ca:e4:ec:7b:80:f0:2d:0c:d6:2b:e9:
a8:e6:05:8f:60:61:db:fa:e7:07:5f:85:92:21:73:
8d:86:25:08:85:5c:1e:ff:6e:99:78:4a:50:5c:47:
d3:5e:eb:46:3a:17:8a:c7:43:a9:0b:f0:b4:c1:3f:
5e:a8:74:06:09:9c:39:00:1e:d2:df:b9:aa:0a:35:
6c:99:53:f1:d3:e9:0c:d1:99:6c:45:fb:8d:32:5f:
73:d1:40:a2:d9:ea:6a:3b:cf:cf:30:9b:e0:21:f3:
a7:f0:eb:62:a5:21:72:02:cd:cc:9d:9a:7c:88:30:
f5:92:95:92:cf:0a:c6:8f:f4:93:fa:5d:98:bd:d9:
ca:d7:27:77:58:2a:a1:10:01:0e:b4:80:59:cf:7a:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:88:E9:81:DC:3B:A9:A7:7D:CD:9C:08:E6:0B:CD:9C:AB:92:D1
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:e3:09:d3:09:ef:e5:e0:08:fe:aa:3c:72:03:10:0b:f7:
f4:e2:d5:55:c5:91:1c:b1:a6:15:54:2a:38:29:04:10:b5:00:
46:03:1b:70:93:e1:5b:3a:a8:23:01:df:42:91:69:ea:7a:54:
d4:98:07:17:96:be:0c:c6:df:0c:1c:cc:5f:e4:33:71:e4:34:
e6:7f:a2:94:92:96:3f:65:dc:57:6a:87:48:e2:5f:a3:15:2b:
76:14:60:41:84:a6:42:6f:8a:a9:7d:ca:27:51:c1:15:23:24:
d3:9d:85:0d:f1:ec:18:df:17:58:e1:67:74:6a:2f:84:6e:9b:
e5:85:cf:24:95:c0:2e:aa:04:96:0e:62:45:f1:80:b6:c7:45:
e1:8f:6d:93:73:da:1e:e6:0f:96:ca:bf:3d:5b:db:28:41:91:
85:0f:76:62:c0:ea:4b:99:f4:9c:ed:14:31:37:70:63:ae:49:
32:80:71:b4:76:57:75:c3:6d:d8:b5:5f:b5:8c:ee:8f:99:6a:
b3:aa:7e:2b:19:11:92:f9:14:49:49:a6:89:f2:15:84:ee:6d:
b6:d1:57:39:10:3f:7e:0f:d5:03:e7:64:64:18:d8:be:d8:be:
42:b4:2e:31:51:3e:7e:df:73:0a:ab:97:59:5d:4f:71:b7:26:
97:05:7c:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4mbitivuIB5KzxgBh+P4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw
NGZkOWMwHhcNMjYwNDE2MjAwMTMwWhcNMjYwNDE3MjAwMTMwWjAzMTEwLwYDVQQD
Eyg5ODBiODhlOTgxZGMzYmE5YTc3ZGNkOWMwOGU2MGJjZDljYWI5MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U5UhjSkDiVAAOEb0+rTx5b8cFhA
KMy+VNygNbAyjt/cF6CHDEyWAVjk2q02QFGnwp38aXN+9p8eoWKcazvnEshYPA/f
pNqm31MbQCB29zeWvnPzjj81ueLHhQm+hJKtzrfkY+636OKS+RmvyuTse4DwLQzW
K+mo5gWPYGHb+ucHX4WSIXONhiUIhVwe/26ZeEpQXEfTXutGOheKx0OpC/C0wT9e
qHQGCZw5AB7S37mqCjVsmVPx0+kM0ZlsRfuNMl9z0UCi2epqO8/PMJvgIfOn8Oti
pSFyAs3MnZp8iDD1kpWSzwrGj/ST+l2YvdnK1yd3WCqhEAEOtIBZz3rr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgLiOmB3Dupp33NnAjmC82cq5LRMB8GA1UdIwQY
MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt
MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw
LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgXjCdMJ
7+XgCP6qPHIDEAv39OLVVcWRHLGmFVQqOCkEELUARgMbcJPhWzqoIwHfQpFp6npU
1JgHF5a+DMbfDBzMX+QzceQ05n+ilJKWP2XcV2qHSOJfoxUrdhRgQYSmQm+KqX3K
J1HBFSMk052FDfHsGN8XWOFndGovhG6b5YXPJJXALqoElg5iRfGAtsdF4Y9tk3Pa
HuYPlsq/PVvbKEGRhQ92YsDqS5n0nO0UMTdwY65JMoBxtHZXdcNt2LVftYzuj5lq
s6p+KxkRkvkUSUmmifIVhO5tttFXORA/fg/VA+dkZBjYvti+QrQuMVE+ft9zCquX
WV1PcbcmlwV8bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:51 2026 by rpki-client