Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: ZFU98vJqJHRNJ+buHGGCOKPpQqPQouA73xFu8+rJngM=
Subject key identifier: BA:28:07:48:FD:BF:16:AC:1D:13:A7:33:D1:70:7F:B9:74:15:78:F7
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019D98BD31761E6CA377ED5FAFB6485612D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 00:00:28 +0000
Manifest this update: Fri 17 Apr 2026 00:00:28 +0000
Manifest next update: Sat 18 Apr 2026 00:00:28 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: x6tnr9w0fiDWgeP+rJXBWDfYTVu1XOi89pjuf2opsaE=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:31:76:1e:6c:a3:77:ed:5f:af:b6:48:56:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Apr 17 00:00:28 2026 GMT
Not After : Apr 18 00:00:28 2026 GMT
Subject: CN=ba280748fdbf16ac1d13a733d1707fb9741578f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:a9:20:77:6a:2f:fa:23:08:0d:1e:77:62:
26:5e:25:21:f2:09:ba:3c:08:95:84:25:c2:e1:43:
2f:93:1b:0b:ab:c4:11:44:8f:00:49:87:77:90:61:
54:4d:19:2f:58:42:5f:34:70:98:c7:58:fc:10:3e:
67:fb:8b:99:f3:08:72:d1:66:6e:3c:07:27:08:41:
76:ab:7a:0c:83:d4:11:c1:07:ce:90:9f:25:5e:8d:
5a:8a:3e:31:41:0f:48:ac:81:ec:80:2e:c6:8f:a9:
ba:4d:aa:f8:fa:75:cd:56:a8:15:cd:8a:83:43:54:
6c:94:55:02:58:2e:2a:a8:7c:ee:8b:d2:43:66:a1:
c3:39:14:a1:7f:d1:ba:0f:3d:f0:e6:f1:05:98:29:
50:f3:54:4f:2f:4a:31:cc:fa:39:a0:24:bd:0f:09:
d1:c6:99:b5:1d:bf:2e:3d:00:31:fa:23:1d:d3:f8:
34:e9:fa:b6:25:22:09:3e:22:9c:4d:72:e3:82:51:
9a:69:4f:b8:87:e3:c5:93:95:74:89:28:19:b5:3f:
b7:a2:f0:9e:d6:5f:c2:5d:b3:ea:8b:9a:54:ce:60:
38:98:7a:80:3b:ab:d2:a5:aa:be:db:4a:9f:4a:43:
ca:54:60:0e:83:3f:4b:f5:d6:22:47:b0:e1:21:6e:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:07:48:FD:BF:16:AC:1D:13:A7:33:D1:70:7F:B9:74:15:78:F7
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f5:ca:bc:16:57:d0:4f:f5:ad:fd:98:80:93:31:29:6d:20:
08:ed:fc:f2:89:f7:db:5c:ce:b1:1b:ab:5d:a6:31:27:f7:20:
1b:c0:46:67:1a:19:8f:cb:28:bb:05:92:01:90:ad:f3:0c:91:
df:d6:34:67:79:e8:bd:1b:6a:3a:44:c8:8a:8d:dc:f6:cc:a3:
18:da:f2:05:35:eb:de:17:c7:a8:96:4c:66:89:4f:77:f9:76:
03:fc:04:7f:14:05:cc:b3:5f:ed:6c:65:66:b0:cb:1d:e3:f4:
d4:6b:4d:a8:ba:70:e3:9b:4b:57:08:4d:db:b0:5c:3e:c7:2a:
bf:a5:ad:39:74:a3:46:c9:0d:2d:8e:90:ef:89:97:09:26:fc:
ec:06:d5:e9:43:dc:6d:6c:30:30:e0:23:10:61:2d:47:57:19:
a2:40:de:30:40:88:48:a0:a9:65:b2:04:b4:35:44:fc:46:ee:
31:31:8b:29:eb:a7:ea:bc:1a:c0:4e:31:55:71:72:e8:6f:3f:
4b:05:00:cd:bd:3a:fa:45:3b:80:be:5d:b8:7c:9b:90:92:d9:
8f:a3:20:dd:44:ea:3e:56:b8:b8:d9:67:70:79:9b:dd:b4:d7:
2d:63:fb:ee:30:ee:39:2c:f2:95:e6:5d:b6:c5:47:60:39:b3:
99:e1:6d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTF2Hmyjd+1fr7ZIVhLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjYwNDE3MDAwMDI4WhcNMjYwNDE4MDAwMDI4WjAzMTEwLwYDVQQD
EyhiYTI4MDc0OGZkYmYxNmFjMWQxM2E3MzNkMTcwN2ZiOTc0MTU3OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC2pIHdqL/ojCA0ed2ImXiUh8gm6
PAiVhCXC4UMvkxsLq8QRRI8ASYd3kGFUTRkvWEJfNHCYx1j8ED5n+4uZ8why0WZu
PAcnCEF2q3oMg9QRwQfOkJ8lXo1aij4xQQ9IrIHsgC7Gj6m6Tar4+nXNVqgVzYqD
Q1RslFUCWC4qqHzui9JDZqHDORShf9G6Dz3w5vEFmClQ81RPL0oxzPo5oCS9DwnR
xpm1Hb8uPQAx+iMd0/g06fq2JSIJPiKcTXLjglGaaU+4h+PFk5V0iSgZtT+3ovCe
1l/CXbPqi5pUzmA4mHqAO6vSpaq+20qfSkPKVGAOgz9L9dYiR7DhIW6x6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLooB0j9vxasHROnM9Fwf7l0FXj3MB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfXKvBZX
0E/1rf2YgJMxKW0gCO388on321zOsRurXaYxJ/cgG8BGZxoZj8souwWSAZCt8wyR
39Y0Z3novRtqOkTIio3c9syjGNryBTXr3hfHqJZMZolPd/l2A/wEfxQFzLNf7Wxl
ZrDLHeP01GtNqLpw45tLVwhN27BcPscqv6WtOXSjRskNLY6Q74mXCSb87AbV6UPc
bWwwMOAjEGEtR1cZokDeMECISKCpZbIEtDVE/EbuMTGLKeun6rwawE4xVXFy6G8/
SwUAzb06+kU7gL5duHybkJLZj6Mg3UTqPla4uNlncHmb3bTXLWP77jDuOSzyleZd
tsVHYDmzmeFtOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:57 2026 by rpki-client