Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json)
Hash identifier: eZc6p4fJUzidCs/NVA7z5g/fX1EoUD4TIVk6KaAVw+E=
Subject key identifier: 4C:F0:71:96:81:A4:73:E3:21:09:7B:68:D6:7A:C6:91:AF:2D:B5:04
Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Certificate serial: 019D98F498DC0F290F9DA8DB7C3F012D5DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: 5EHAYO3IGxEcJOEJeWkfTl6sJJSSj62BnCimNO37O0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:98:dc:0f:29:0f:9d:a8:db:7c:3f:01:2d:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=4cf0719681a473e321097b68d67ac691af2db504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:f7:33:1c:f3:04:9b:a1:ec:9c:8e:24:18:
09:48:98:a4:b0:4e:6d:07:56:90:31:40:40:7e:87:
42:33:55:24:40:7f:79:bd:6f:f8:63:2c:2e:68:b3:
88:26:39:e9:a8:90:ae:97:98:23:e0:18:ff:0a:45:
29:2f:4a:51:67:b3:33:76:06:6a:26:9d:16:83:20:
fe:e5:1e:77:c1:94:5e:2a:9b:59:08:ac:dd:4f:ab:
0b:7a:d9:fc:2f:3e:de:00:a5:11:b9:48:e1:52:0a:
af:d0:ca:61:92:e7:e7:28:f0:4f:9b:69:45:2e:ba:
bd:f5:6c:d2:97:b4:d2:ae:93:f2:57:0d:73:0b:d0:
8a:96:aa:d3:8b:51:15:0e:34:82:0e:dd:4f:8a:3b:
ef:54:7f:63:75:f9:36:f8:cc:07:4c:60:3e:cf:75:
77:83:24:ef:0e:2f:7e:06:94:b5:dc:67:c4:5c:db:
56:d6:42:82:44:2e:c9:82:8e:46:8d:15:84:79:bf:
f1:6f:c9:dc:9a:64:4d:26:87:de:46:03:40:15:12:
93:8c:3a:a2:c0:94:b6:8a:fd:7b:73:fc:a8:99:8e:
58:fd:7a:7e:6f:15:84:8a:66:c9:61:31:f6:93:87:
13:d0:19:3f:93:b9:56:46:e3:a5:0f:9b:46:a2:3d:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:71:96:81:A4:73:E3:21:09:7B:68:D6:7A:C6:91:AF:2D:B5:04
X509v3 Authority Key Identifier:
keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:fb:40:a0:e3:47:56:0c:d3:88:30:6a:32:7f:07:3a:d4:
c8:5f:d2:d2:6f:22:21:79:07:98:65:22:8c:b3:d5:b8:52:8a:
10:af:ee:66:36:56:86:9f:50:73:2b:f6:d8:c4:c8:a9:92:75:
f6:03:97:72:35:7d:04:cc:48:f0:97:49:de:69:5f:16:e5:f7:
20:cf:83:30:00:78:fb:38:6d:a9:71:b9:60:9f:21:35:76:2a:
50:a5:94:f1:7b:78:c1:23:7d:d5:c0:2e:1e:08:8b:3a:08:25:
2a:17:20:8b:b4:54:a2:f8:59:2b:56:cd:c7:6b:63:35:9e:71:
99:e9:fb:33:60:99:b9:02:30:e6:88:a9:2e:f2:fb:a6:cc:4d:
34:ce:8b:b4:e9:fe:bb:b7:60:5b:74:78:91:2a:3a:05:f3:f7:
f4:01:55:e3:80:4c:b5:2c:64:82:9e:0a:46:58:d8:27:42:ce:
44:09:05:c7:9d:ef:91:fc:d2:3d:10:56:7c:eb:a4:7d:d3:ca:
a0:e9:86:20:c1:83:9f:0f:b6:a5:b0:6f:37:6c:53:66:aa:66:
13:1e:f4:69:f7:47:fa:73:3b:c9:47:d5:13:7e:20:7d:f7:d9:
aa:14:21:dc:8e:cd:09:ca:bb:4a:f2:52:26:e1:b3:27:82:aa:
a7:1d:62:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9JjcDykPnajbfD8BLV2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjMyNGI1YjRjMTNkNzYwNmMzOTJjMzc0ZTM1YmJlNjRh
MjRlNTAwHhcNMjYwNDE3MDEwMDU5WhcNMjYwNDE4MDEwMDU5WjAzMTEwLwYDVQQD
Eyg0Y2YwNzE5NjgxYTQ3M2UzMjEwOTdiNjhkNjdhYzY5MWFmMmRiNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnX3MxzzBJuh7JyOJBgJSJiksE5t
B1aQMUBAfodCM1UkQH95vW/4YywuaLOIJjnpqJCul5gj4Bj/CkUpL0pRZ7MzdgZq
Jp0WgyD+5R53wZReKptZCKzdT6sLetn8Lz7eAKURuUjhUgqv0MphkufnKPBPm2lF
Lrq99WzSl7TSrpPyVw1zC9CKlqrTi1EVDjSCDt1PijvvVH9jdfk2+MwHTGA+z3V3
gyTvDi9+BpS13GfEXNtW1kKCRC7Jgo5GjRWEeb/xb8ncmmRNJofeRgNAFRKTjDqi
wJS2iv17c/yomY5Y/Xp+bxWEimbJYTH2k4cT0Bk/k7lWRuOlD5tGoj0KqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzwcZaBpHPjIQl7aNZ6xpGvLbUEMB8GA1UdIwQY
MBaAFHNjJLW0wT12BsOSw3TjW75kok5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYt
ZWFlOGEzMDU3MTU5LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYtZWFlOGEzMDU3MTU5
LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5n7QKDj
R1YM04gwajJ/BzrUyF/S0m8iIXkHmGUijLPVuFKKEK/uZjZWhp9Qcyv22MTIqZJ1
9gOXcjV9BMxI8JdJ3mlfFuX3IM+DMAB4+zhtqXG5YJ8hNXYqUKWU8Xt4wSN91cAu
HgiLOgglKhcgi7RUovhZK1bNx2tjNZ5xmen7M2CZuQIw5oipLvL7psxNNM6LtOn+
u7dgW3R4kSo6BfP39AFV44BMtSxkgp4KRljYJ0LORAkFx53vkfzSPRBWfOukfdPK
oOmGIMGDnw+2pbBvN2xTZqpmEx70afdH+nM7yUfVE34gfffZqhQh3I7NCcq7SvJS
JuGzJ4Kqpx1inw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:52 2026 by rpki-client