
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 3UpTFm26dybOxXXZ5g9eUMFOVI926g7csoiOKrC/rcQ=
Subject key identifier: DE:EB:14:44:C3:E3:29:02:0C:BD:3C:3E:A9:7A:59:58:CD:F3:7C:33
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019D9AABC6B5FB3277764CD4A8B44499EB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: AZha/6XakOFGQd4Mfir4t4kMXUtDcWwceR0Rmm9UFPQ=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c6:b5:fb:32:77:76:4c:d4:a8:b4:44:99:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=deeb1444c3e329020cbd3c3ea97a5958cdf37c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f5:41:07:a1:a3:cb:33:b0:2f:76:23:40:4e:
a4:a8:b7:f1:5b:51:69:0b:79:36:1f:7e:ac:21:14:
f8:aa:21:1a:3f:78:d3:00:d1:a7:73:bc:d5:bd:53:
75:dd:75:6a:a7:db:9f:96:3b:41:83:10:44:55:8e:
3a:ec:f1:e6:b0:97:a5:80:c7:d8:13:51:ad:56:da:
7c:74:e9:1c:df:24:de:aa:de:a4:ac:8c:26:5f:9a:
4c:2d:b6:82:2f:6f:be:d9:83:43:8e:ac:0a:7e:1c:
3e:7a:7c:78:81:8d:16:50:da:7d:69:e6:a4:e1:cc:
03:ce:93:89:6c:60:92:61:7b:da:b2:cf:5e:2b:2a:
06:af:a6:ce:ca:f8:87:60:bd:4e:53:59:f0:5b:9e:
fa:b5:53:45:11:95:3a:da:8b:c6:bc:a3:0f:83:64:
6e:15:38:5c:9b:9c:b1:26:12:5f:5d:6e:d1:86:5f:
75:9a:69:65:af:b9:ae:7d:4e:09:77:a6:68:ef:ec:
e9:4b:2d:46:ea:cf:2e:d7:a1:02:09:e2:32:75:d5:
f8:db:eb:4a:4e:d5:7c:41:d0:1d:00:d0:a1:cf:62:
c0:10:71:03:fa:5c:e4:19:5c:c5:ed:66:25:82:36:
96:cf:bf:5c:63:01:41:53:72:8a:c1:c4:4b:2d:df:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:14:44:C3:E3:29:02:0C:BD:3C:3E:A9:7A:59:58:CD:F3:7C:33
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:2a:c3:db:5c:bc:19:da:00:10:e1:a6:8b:06:5d:2b:a5:
e2:14:2b:36:f5:c4:ee:41:79:3c:1f:64:ef:78:0a:31:85:c8:
a4:3b:59:39:4f:c5:c2:44:65:7c:ca:af:e1:ee:1b:41:af:33:
ab:33:61:7e:97:95:c0:3d:91:1d:f2:92:07:28:30:d9:9f:56:
49:2a:65:cf:bf:96:98:db:f8:cf:3d:fa:16:71:0f:e7:9f:2e:
7b:0c:0c:d0:a4:da:f8:2d:5b:19:af:74:83:52:1c:c3:08:c0:
b8:90:dc:f3:88:b7:3d:0a:92:eb:1d:99:e3:bb:56:17:3c:e5:
1a:31:63:ef:99:06:1f:31:08:c5:7d:46:aa:d0:c8:cc:31:c7:
5b:cc:04:62:ee:c7:83:c6:53:64:13:26:86:5b:f2:b4:2e:ac:
c6:de:7b:13:8d:9b:e3:0c:42:ef:53:b7:48:be:73:89:c9:5b:
69:53:e0:14:ef:e7:4f:29:b3:ea:04:9d:67:71:99:11:b5:72:
c2:61:6d:dc:10:dc:c3:3a:54:bc:42:f9:5c:b8:4d:13:42:2d:
c3:75:f9:eb:0d:88:bc:d2:4f:15:61:ac:07:49:75:2e:45:88:
f1:91:3f:22:5f:0b:1b:73:4d:c3:11:3a:2b:9b:32:d2:93:dc:
65:b8:44:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8a1+zJ3dkzUqLREmetqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm
ZmYxOTAwHhcNMjYwNDE3MDkwMDQxWhcNMjYwNDE4MDkwMDQxWjAzMTEwLwYDVQQD
EyhkZWViMTQ0NGMzZTMyOTAyMGNiZDNjM2VhOTdhNTk1OGNkZjM3YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vVBB6GjyzOwL3YjQE6kqLfxW1Fp
C3k2H36sIRT4qiEaP3jTANGnc7zVvVN13XVqp9ufljtBgxBEVY467PHmsJelgMfY
E1GtVtp8dOkc3yTeqt6krIwmX5pMLbaCL2++2YNDjqwKfhw+enx4gY0WUNp9aeak
4cwDzpOJbGCSYXvass9eKyoGr6bOyviHYL1OU1nwW576tVNFEZU62ovGvKMPg2Ru
FThcm5yxJhJfXW7Rhl91mmllr7mufU4Jd6Zo7+zpSy1G6s8u16ECCeIyddX42+tK
TtV8QdAdANChz2LAEHED+lzkGVzF7WYlgjaWz79cYwFBU3KKwcRLLd9QSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7rFETD4ykCDL08Pql6WVjN83wzMB8GA1UdIwQY
MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt
NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1
LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZAqw9tc
vBnaABDhposGXSul4hQrNvXE7kF5PB9k73gKMYXIpDtZOU/FwkRlfMqv4e4bQa8z
qzNhfpeVwD2RHfKSBygw2Z9WSSplz7+WmNv4zz36FnEP558uewwM0KTa+C1bGa90
g1IcwwjAuJDc84i3PQqS6x2Z47tWFzzlGjFj75kGHzEIxX1GqtDIzDHHW8wEYu7H
g8ZTZBMmhlvytC6sxt57E42b4wxC71O3SL5ziclbaVPgFO/nTymz6gSdZ3GZEbVy
wmFt3BDcwzpUvEL5XLhNE0Itw3X56w2IvNJPFWGsB0l1LkWI8ZE/Il8LG3NNwxE6
K5sy0pPcZbhECQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:51 2026 by rpki-client