Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: bgJvnA+viDp96yizPSyDZhJUSY3b21MtBgJCy3/p23I=
Subject key identifier: 68:F1:FC:89:F2:2E:84:FD:9C:73:94:E7:2F:A8:9C:3B:7E:6C:FA:CC
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019D98BD83C6D0C2D1A552738F1C86532032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 12B9
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: vefkhw9GNWaq5AL3AZuZ9UZckzER/uzWDd7pQrX6CQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:83:c6:d0:c2:d1:a5:52:73:8f:1c:86:53:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=68f1fc89f22e84fd9c7394e72fa89c3b7e6cfacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:be:7b:d3:bd:65:5d:bf:83:72:60:e9:6e:
b1:0e:53:ac:78:56:f0:be:cb:17:4d:01:92:7d:00:
f5:b1:5d:f2:1f:b4:e0:43:05:dc:bb:d8:0d:d0:d6:
55:80:d2:b4:61:55:5b:5a:01:fc:43:d3:ef:c9:86:
22:8c:01:ae:d6:d5:20:d1:52:9b:31:a5:35:3b:2d:
2a:87:ce:fe:37:0b:a7:6f:19:65:7e:45:8e:b2:81:
b8:47:57:9a:1e:4d:94:88:b1:a5:2b:de:c3:42:f6:
03:fb:84:c2:a0:e7:77:dd:a7:77:07:b8:f7:09:cd:
63:28:b0:32:97:9e:ca:6f:f8:76:5f:47:5d:5a:be:
49:b2:5c:1c:b5:b8:be:dd:72:37:45:26:95:ef:56:
f1:28:41:e2:9b:00:13:54:8e:d8:39:c2:34:41:46:
06:e1:ff:c2:c9:e7:ea:0d:52:ba:01:18:d0:43:3f:
43:fe:9e:f0:11:71:aa:4b:8c:8d:1a:9e:3a:64:24:
9b:c9:93:30:6b:67:40:1f:99:c8:54:c9:58:03:36:
e7:63:4f:9c:b6:b0:b4:22:92:25:22:bc:a4:3f:50:
dd:88:0b:ec:14:89:dd:20:55:a9:51:d3:58:39:2f:
80:51:43:4e:64:e2:25:68:9c:0f:0b:b7:8d:ca:55:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:FC:89:F2:2E:84:FD:9C:73:94:E7:2F:A8:9C:3B:7E:6C:FA:CC
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:01:10:28:d8:5c:32:8c:48:e0:e0:f4:7f:a9:fe:15:f8:94:
48:9d:a2:b9:dd:38:67:f7:67:27:00:a7:bc:66:63:7d:14:30:
af:6e:59:37:7a:b8:00:ba:8c:0a:31:1d:8d:fb:68:a2:a3:4d:
a8:9c:eb:64:76:2a:99:91:fd:74:fb:0a:3b:03:1e:3d:68:90:
96:cd:3f:3e:a2:0f:81:13:bc:0b:7d:53:49:fd:4c:62:24:fa:
67:61:8b:c6:ef:b7:2f:60:ba:c1:cd:22:a1:2b:f3:a4:f6:6c:
36:3f:9d:9e:3c:af:56:28:20:09:59:8b:f0:8c:2c:98:1c:7c:
35:64:0f:f5:10:b5:e1:9b:8f:50:d9:e7:fe:98:c1:fe:20:ff:
49:35:75:51:88:16:48:c5:9a:2b:40:58:50:81:2a:58:18:5c:
b7:07:38:d5:d5:48:64:e2:e5:d9:03:77:18:13:98:3d:ae:c6:
73:8b:0f:56:56:86:23:d8:aa:d7:24:80:b4:79:db:b5:5e:8a:
1d:e0:cf:7f:c4:a2:94:e2:d7:bd:07:fa:40:9e:2d:62:64:dc:
d5:4c:a4:66:da:da:7a:91:86:9d:75:42:12:58:fa:4f:40:79:
6b:53:a8:e7:1f:a4:fb:eb:c0:68:7b:76:03:15:43:db:1c:b6:
37:1e:98:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvYPG0MLRpVJzjxyGUyAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWYxYzQxNTJjNGE0NjA1NWY3MmNiZTg2NmE4OGQ1MDBk
Zjk4M2YwHhcNMjYwNDE3MDAwMDQ5WhcNMjYwNDE4MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg2OGYxZmM4OWYyMmU4NGZkOWM3Mzk0ZTcyZmE4OWMzYjdlNmNmYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmka+e9O9ZV2/g3Jg6W6xDlOseFbw
vssXTQGSfQD1sV3yH7TgQwXcu9gN0NZVgNK0YVVbWgH8Q9PvyYYijAGu1tUg0VKb
MaU1Oy0qh87+NwunbxllfkWOsoG4R1eaHk2UiLGlK97DQvYD+4TCoOd33ad3B7j3
Cc1jKLAyl57Kb/h2X0ddWr5Jslwctbi+3XI3RSaV71bxKEHimwATVI7YOcI0QUYG
4f/CyefqDVK6ARjQQz9D/p7wEXGqS4yNGp46ZCSbyZMwa2dAH5nIVMlYAzbnY0+c
trC0IpIlIrykP1DdiAvsFIndIFWpUdNYOS+AUUNOZOIlaJwPC7eNylV8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjx/InyLoT9nHOU5y+onDt+bPrMMB8GA1UdIwQY
MBaAFO9fHEFSxKRgVfcsvoZqiNUA35g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMt
ZTQ0NDZmMmMxMmVjLzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMtZTQ0NDZmMmMxMmVj
LzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQEQKNhc
MoxI4OD0f6n+FfiUSJ2iud04Z/dnJwCnvGZjfRQwr25ZN3q4ALqMCjEdjftooqNN
qJzrZHYqmZH9dPsKOwMePWiQls0/PqIPgRO8C31TSf1MYiT6Z2GLxu+3L2C6wc0i
oSvzpPZsNj+dnjyvViggCVmL8IwsmBx8NWQP9RC14ZuPUNnn/pjB/iD/STV1UYgW
SMWaK0BYUIEqWBhctwc41dVIZOLl2QN3GBOYPa7Gc4sPVlaGI9iq1ySAtHnbtV6K
HeDPf8SilOLXvQf6QJ4tYmTc1UykZtraepGGnXVCElj6T0B5a1Oo5x+k++vAaHt2
AxVD2xy2Nx6YrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:41 2026 by rpki-client