
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: wThvW5p6sirUWdAprES8cqBrQOPzYLewXq2tcDaw4pA=
Subject key identifier: A1:48:60:C9:BD:7E:1B:76:22:D7:FF:94:4F:DC:CE:5C:72:46:F3:2E
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 019D9B19BF2B3485151AED6E25B85222FB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 0A92
Signing time: Fri 17 Apr 2026 11:00:48 +0000
Manifest this update: Fri 17 Apr 2026 11:00:48 +0000
Manifest next update: Sat 18 Apr 2026 11:00:48 +0000
Files and hashes: 1: WQjl92RW0jdBTqM0hadCVWAMXP8.roa (hash: CIaHkNR2G65+9/3FHuVOGVz2ojdxwlcnxwiCYecNZcg=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: mpUEcXhEQlJPzUxLCGtbUf0N6p63k3w2PcI02atCpTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:bf:2b:34:85:15:1a:ed:6e:25:b8:52:22:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Apr 17 11:00:48 2026 GMT
Not After : Apr 18 11:00:48 2026 GMT
Subject: CN=a14860c9bd7e1b7622d7ff944fdcce5c7246f32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:77:47:29:b4:6d:dd:0a:a4:63:0c:3a:cb:
44:a3:ed:65:7e:aa:50:1a:92:2e:b4:94:09:ab:7b:
d5:a3:94:eb:3e:8e:71:7c:c3:47:a6:32:7e:29:af:
d0:03:b3:91:ca:9a:d8:11:22:17:ea:9f:2a:ac:42:
6a:0c:61:c9:33:8e:ff:e8:8a:ae:e2:58:1e:d5:37:
eb:fa:3f:17:f2:1a:31:82:53:9a:f6:db:2e:09:33:
cc:af:e0:be:2a:df:80:ba:7b:6e:ba:21:18:4e:c2:
38:b3:09:fa:9d:6d:b7:07:92:7b:9f:94:e7:fb:6c:
38:29:84:32:98:5b:a7:92:a4:2a:c4:4d:2d:0f:ab:
80:7a:4e:50:4f:e8:68:fd:c4:cf:43:b7:ff:b6:16:
9e:34:0d:65:62:ee:ff:a3:5e:9c:f1:fa:bc:17:79:
bd:7c:86:38:eb:1d:ee:07:c7:69:dd:c6:06:65:f7:
c0:df:36:a1:b4:6f:92:c5:37:8b:5f:49:96:02:e5:
62:a0:1b:e3:12:97:a5:4a:03:60:c1:95:fd:46:e3:
5c:12:a5:45:93:b2:e3:19:e3:92:0d:88:e6:e4:a5:
d6:7d:75:2e:e0:34:ed:56:38:2c:98:85:6b:61:e8:
fd:58:3e:fb:cc:a4:c3:ea:f1:2c:ae:b5:4f:0b:8e:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:60:C9:BD:7E:1B:76:22:D7:FF:94:4F:DC:CE:5C:72:46:F3:2E
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bd:7d:5a:0a:ed:45:2b:ab:a4:11:7d:a5:f4:38:81:0b:65:
16:9c:1a:ba:50:ae:1a:03:1b:b7:49:20:06:d1:49:d7:c5:be:
ac:fe:0f:a0:97:db:8e:e0:f0:77:29:73:1a:9b:7e:80:f4:2a:
6b:0a:2e:c3:32:18:c5:e6:a6:64:2c:82:bc:44:f6:18:55:e2:
5e:03:a6:44:bb:da:69:e7:5e:81:c3:c9:b4:8b:a6:68:df:8c:
66:45:63:55:ba:eb:89:1e:cf:71:ea:90:4e:12:99:6c:92:02:
14:7f:7b:38:60:6a:75:bd:31:79:0f:26:22:65:44:04:cf:36:
6c:2f:2d:37:b5:af:d8:3f:ec:00:74:e8:5f:07:18:84:7f:01:
85:c6:38:7f:a8:7b:e8:ad:0b:a7:6d:a6:d9:ca:e2:7e:9e:b4:
d8:06:55:de:64:0a:6d:55:6e:1b:e2:64:19:39:90:1a:4d:9f:
fc:b1:d0:61:6a:22:e5:c5:0e:c8:b2:66:75:e3:60:f9:8d:66:
50:f9:72:3e:08:5d:9d:01:b5:a3:a5:05:6f:b8:a9:a8:89:d1:
a9:1b:ea:b0:d4:be:13:78:c4:c8:43:c4:e2:6b:91:3d:eb:09:
fa:b8:75:35:7f:c6:66:14:67:20:70:fa:3b:79:35:d7:b1:87:
fc:5b:73:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGb8rNIUVGu1uJbhSIvtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh
ZWRkYjMwHhcNMjYwNDE3MTEwMDQ4WhcNMjYwNDE4MTEwMDQ4WjAzMTEwLwYDVQQD
EyhhMTQ4NjBjOWJkN2UxYjc2MjJkN2ZmOTQ0ZmRjY2U1YzcyNDZmMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQV3Rym0bd0KpGMMOstEo+1lfqpQ
GpIutJQJq3vVo5TrPo5xfMNHpjJ+Ka/QA7ORyprYESIX6p8qrEJqDGHJM47/6Iqu
4lge1Tfr+j8X8hoxglOa9tsuCTPMr+C+Kt+AuntuuiEYTsI4swn6nW23B5J7n5Tn
+2w4KYQymFunkqQqxE0tD6uAek5QT+ho/cTPQ7f/thaeNA1lYu7/o16c8fq8F3m9
fIY46x3uB8dp3cYGZffA3zahtG+SxTeLX0mWAuVioBvjEpelSgNgwZX9RuNcEqVF
k7LjGeOSDYjm5KXWfXUu4DTtVjgsmIVrYej9WD77zKTD6vEsrrVPC46tewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFIYMm9fht2Itf/lE/czlxyRvMuMB8GA1UdIwQY
MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt
ZmVjNmMyNzAxZWRhLzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh
LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb719Wgrt
RSurpBF9pfQ4gQtlFpwaulCuGgMbt0kgBtFJ18W+rP4PoJfbjuDwdylzGpt+gPQq
awouwzIYxeamZCyCvET2GFXiXgOmRLvaaedegcPJtIumaN+MZkVjVbrriR7PceqQ
ThKZbJICFH97OGBqdb0xeQ8mImVEBM82bC8tN7Wv2D/sAHToXwcYhH8BhcY4f6h7
6K0Lp22m2crifp602AZV3mQKbVVuG+JkGTmQGk2f/LHQYWoi5cUOyLJmdeNg+Y1m
UPlyPghdnQG1o6UFb7ipqInRqRvqsNS+E3jEyEPE4muRPesJ+rh1NX/GZhRnIHD6
O3k117GH/FtzmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:44 2026 by rpki-client