Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 7cZt8z+hbJq4lyH+q/zVWZr6uYhyh2fqfsHS1JqGi8c=
Subject key identifier: 86:03:1D:42:15:7C:38:01:3B:4B:F4:53:DD:04:F8:88:C1:7C:27:8F
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019D9C9A49590D64D0F115D1D24591E43FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 18:00:50 +0000
Manifest this update: Fri 17 Apr 2026 18:00:50 +0000
Manifest next update: Sat 18 Apr 2026 18:00:50 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: NexlN6+Mgx4ffSpody22FGZa0jGMofQIi5LJQnoJw+4=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:49:59:0d:64:d0:f1:15:d1:d2:45:91:e4:3f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Apr 17 18:00:50 2026 GMT
Not After : Apr 18 18:00:50 2026 GMT
Subject: CN=86031d42157c38013b4bf453dd04f888c17c278f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:b3:6f:d1:b0:77:6d:03:e6:5c:1c:c3:7b:
1f:67:ce:c5:38:53:12:d1:78:80:74:56:9b:af:11:
61:48:c2:8a:df:53:a3:57:a1:40:50:64:7f:82:36:
40:a5:04:ea:56:69:b5:8c:ce:70:37:71:e1:7d:a7:
a1:b2:05:fb:bc:2d:23:a5:42:b0:17:eb:e0:84:13:
f9:ec:9a:cd:30:51:43:63:dd:f3:62:27:c8:97:45:
d5:13:3f:c5:ff:e5:ad:61:13:ac:d1:1b:63:05:12:
f1:12:a0:bf:b0:e0:17:12:67:79:92:0d:6b:69:c6:
a6:d6:5c:b7:aa:1e:65:c6:22:45:dd:69:68:64:23:
c2:f4:78:14:a3:83:2d:fd:ec:fd:77:d9:c2:59:c4:
ac:4c:a8:b5:aa:0a:e0:84:ea:01:a1:89:5b:ba:b0:
51:0a:7f:08:29:67:ff:75:50:74:0b:f9:05:c1:61:
0e:8d:a8:ec:4e:5c:aa:9f:a0:52:a5:83:1b:dc:33:
81:a3:6d:d3:2f:f5:b9:9e:20:f2:fc:92:e6:20:90:
40:bb:c1:41:f2:fb:9e:01:19:98:fa:ca:d7:d6:23:
72:01:e2:e3:5c:43:0d:b6:86:4b:6a:63:c1:49:d6:
04:ae:c3:de:5d:4f:4f:09:ec:f0:14:f3:50:0c:b3:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:1D:42:15:7C:38:01:3B:4B:F4:53:DD:04:F8:88:C1:7C:27:8F
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3e:5e:33:44:ae:58:c2:87:6e:23:72:7a:f3:65:7a:30:6d:
de:6b:26:88:b4:9e:59:0b:b3:e1:e1:7b:59:83:27:f6:a2:71:
bf:ca:3c:43:cf:e1:e9:88:07:85:67:12:1d:25:8d:16:4a:c2:
c6:3e:fe:0a:05:17:3f:e6:5e:fd:c3:d9:28:c3:65:1c:c6:8c:
ef:f0:57:d8:82:fc:3d:96:0c:88:16:50:03:21:72:09:37:39:
8a:f5:e1:f1:a1:6c:9c:24:21:64:c4:6d:56:f7:8a:69:0d:72:
37:9b:1d:aa:5d:d4:17:ab:47:28:89:75:1b:63:f9:f1:26:ae:
a0:11:16:b9:01:9e:0a:df:d0:9b:d8:80:f4:2b:c8:64:94:57:
3c:52:29:2c:ce:5a:15:90:7a:a8:ea:37:cb:71:2e:3a:b1:9b:
aa:a2:ae:c1:52:b6:9f:fc:78:00:54:ed:cd:07:f4:70:b6:03:
58:06:b5:eb:b1:4d:4e:fb:b1:f5:60:9e:c5:dc:a1:cf:82:fd:
7f:ba:fd:8e:2b:ae:ce:a7:ce:44:a4:5e:72:16:c4:b5:5a:a4:
28:3d:a4:55:2f:8d:a3:b1:66:36:f8:4c:3c:da:72:8a:c4:3a:
a6:e3:f1:f1:6d:dd:88:b6:f9:e4:84:8c:ef:f9:03:3e:7f:75:
b1:54:ac:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmklZDWTQ8RXR0kWR5D+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm
ZmYxOTAwHhcNMjYwNDE3MTgwMDUwWhcNMjYwNDE4MTgwMDUwWjAzMTEwLwYDVQQD
Eyg4NjAzMWQ0MjE1N2MzODAxM2I0YmY0NTNkZDA0Zjg4OGMxN2MyNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQWzb9Gwd20D5lwcw3sfZ87FOFMS
0XiAdFabrxFhSMKK31OjV6FAUGR/gjZApQTqVmm1jM5wN3HhfaehsgX7vC0jpUKw
F+vghBP57JrNMFFDY93zYifIl0XVEz/F/+WtYROs0RtjBRLxEqC/sOAXEmd5kg1r
acam1ly3qh5lxiJF3WloZCPC9HgUo4Mt/ez9d9nCWcSsTKi1qgrghOoBoYlburBR
Cn8IKWf/dVB0C/kFwWEOjajsTlyqn6BSpYMb3DOBo23TL/W5niDy/JLmIJBAu8FB
8vueARmY+srX1iNyAeLjXEMNtoZLamPBSdYErsPeXU9PCezwFPNQDLOlZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYDHUIVfDgBO0v0U90E+IjBfCePMB8GA1UdIwQY
MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt
NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1
LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT5eM0Su
WMKHbiNyevNlejBt3msmiLSeWQuz4eF7WYMn9qJxv8o8Q8/h6YgHhWcSHSWNFkrC
xj7+CgUXP+Ze/cPZKMNlHMaM7/BX2IL8PZYMiBZQAyFyCTc5ivXh8aFsnCQhZMRt
VveKaQ1yN5sdql3UF6tHKIl1G2P58SauoBEWuQGeCt/Qm9iA9CvIZJRXPFIpLM5a
FZB6qOo3y3EuOrGbqqKuwVK2n/x4AFTtzQf0cLYDWAa167FNTvux9WCexdyhz4L9
f7r9jiuuzqfORKRechbEtVqkKD2kVS+No7FmNvhMPNpyisQ6puPx8W3diLb55ISM
7/kDPn91sVSsyg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:47 2026 by rpki-client