Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier: 5eSeBTvNAEL/RaT/XiIOCI/huz2TbTpVFZ4EI8r7fUc=
Subject key identifier: B2:1B:19:A9:70:A0:8E:DA:E2:3C:8E:9B:7F:06:AD:7B:2F:DE:9A:83
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019D9850B7D3803BD58D7C47797E7B03E0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number: 18DB
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: obK5GDK7Q6bHq3Xmjy7SX+FzH21jRRV8orhP5PXfYY4=)
8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b7:d3:80:3b:d5:8d:7c:47:79:7e:7b:03:e0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=b21b19a970a08edae23c8e9b7f06ad7b2fde9a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:40:d5:9a:00:7a:cc:9e:4f:3b:3e:79:63:
29:66:b3:9c:15:d5:95:18:3d:89:84:cb:c6:d3:bb:
2e:fb:1a:24:bf:b1:5f:24:75:78:66:52:4d:fe:97:
89:e1:27:33:bb:5a:57:dc:ba:ac:09:97:4b:49:6d:
7c:3b:fa:6b:5f:fd:b0:0a:23:21:87:59:50:ec:c2:
dd:e1:15:9e:07:a5:ae:14:48:3f:28:05:00:ff:f1:
ad:bb:20:6c:60:f8:7a:38:4b:0e:2e:d1:0f:7b:19:
dc:96:96:da:a4:58:49:e6:c7:b3:e2:2a:a8:d5:e0:
62:a6:ce:cc:41:29:ba:54:3c:98:fb:62:cd:2e:43:
f6:cb:f9:c5:e4:aa:57:ce:81:40:b0:6e:b5:44:c5:
c3:d3:db:45:68:58:01:81:87:1d:11:20:e0:09:fd:
42:c7:44:38:b9:e9:17:c6:97:5e:c9:59:84:f6:c7:
72:bc:ae:05:20:0f:96:65:d6:ea:1b:23:73:73:ef:
cd:53:b3:90:07:8c:c9:de:9f:9f:04:fd:80:71:26:
b1:59:3e:8f:df:b6:72:3b:d3:ed:ee:56:5c:1a:b4:
02:45:c7:0e:48:60:b4:dd:36:83:fc:8f:f4:69:9d:
06:17:d7:de:64:87:e4:12:bc:62:6b:5d:f0:e1:0f:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:19:A9:70:A0:8E:DA:E2:3C:8E:9B:7F:06:AD:7B:2F:DE:9A:83
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:3f:b1:35:19:b2:7b:88:1e:08:c6:44:45:21:4d:a3:3f:
30:a5:3e:6e:60:18:7d:c1:d5:55:93:ac:1f:bb:8e:77:c6:04:
a8:79:a1:fc:6d:b7:87:10:42:79:0f:1a:36:4b:96:f4:9d:f4:
6b:ab:9f:51:92:ef:ce:90:7d:fc:84:c0:8c:ee:9b:c8:b3:e3:
a8:e3:a4:f5:8f:a3:32:d4:0e:6c:b3:db:d9:fb:9a:76:f4:e1:
40:20:6f:51:f5:ac:af:6f:78:b9:fd:41:fc:a7:70:d2:0c:0f:
3d:22:65:b6:14:46:d1:8b:bf:37:2d:fe:04:f1:be:ec:2f:4e:
82:13:38:03:5e:42:08:1a:ba:21:88:d8:43:28:25:ed:ba:75:
b9:72:f2:6f:56:8b:7e:14:c0:24:1c:a6:ea:13:91:71:74:dd:
bf:d5:b9:d8:60:47:2d:71:8a:c7:29:f2:01:9b:37:e3:cb:c5:
f5:c2:af:8b:bc:7e:b9:0e:aa:4c:ca:0a:b4:26:96:ed:7e:77:
64:19:54:c1:48:c6:b4:39:b2:05:38:4c:db:6f:ff:d1:d2:cd:
d7:d1:17:62:18:3a:43:13:d8:fb:09:e2:1f:ec:9f:22:d9:63:
61:8e:2a:04:3b:2b:d8:5e:45:f9:69:be:f6:20:f0:2a:93:47:
fa:50:b0:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YULfTgDvVjXxHeX57A+D3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjYwNDE2MjIwMTU5WhcNMjYwNDE3MjIwMTU5WjAzMTEwLwYDVQQD
EyhiMjFiMTlhOTcwYTA4ZWRhZTIzYzhlOWI3ZjA2YWQ3YjJmZGU5YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6NA1ZoAesyeTzs+eWMpZrOcFdWV
GD2JhMvG07su+xokv7FfJHV4ZlJN/peJ4Sczu1pX3LqsCZdLSW18O/prX/2wCiMh
h1lQ7MLd4RWeB6WuFEg/KAUA//GtuyBsYPh6OEsOLtEPexnclpbapFhJ5sez4iqo
1eBips7MQSm6VDyY+2LNLkP2y/nF5KpXzoFAsG61RMXD09tFaFgBgYcdESDgCf1C
x0Q4uekXxpdeyVmE9sdyvK4FIA+WZdbqGyNzc+/NU7OQB4zJ3p+fBP2AcSaxWT6P
37ZyO9Pt7lZcGrQCRccOSGC03TaD/I/0aZ0GF9feZIfkErxia13w4Q8eGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIbGalwoI7a4jyOm38GrXsv3pqDMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYE/sTUZ
snuIHgjGREUhTaM/MKU+bmAYfcHVVZOsH7uOd8YEqHmh/G23hxBCeQ8aNkuW9J30
a6ufUZLvzpB9/ITAjO6byLPjqOOk9Y+jMtQObLPb2fuadvThQCBvUfWsr294uf1B
/Kdw0gwPPSJlthRG0Yu/Ny3+BPG+7C9OghM4A15CCBq6IYjYQygl7bp1uXLyb1aL
fhTAJBym6hORcXTdv9W52GBHLXGKxynyAZs348vF9cKvi7x+uQ6qTMoKtCaW7X53
ZBlUwUjGtDmyBThM22//0dLN19EXYhg6QxPY+wniH+yfItljYY4qBDsr2F5F+Wm+
9iDwKpNH+lCwxg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:28 2026 by rpki-client