Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: ufhppMI/qLhIxrjE6Xnj/gO2zv1pjfVgEnAFRPLjKzo=
Subject key identifier: F0:78:14:E2:38:47:29:49:21:79:F7:03:2C:19:90:BC:8B:5D:A1:9C
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019D992B0E8E5791B31DB293C63FB5537EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: 35LcHIto9YWWicx9U7KjlZRKbYjN5IOTI7okUO00p8Q=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0e:8e:57:91:b3:1d:b2:93:c6:3f:b5:53:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=f07814e2384729492179f7032c1990bc8b5da19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:42:5e:92:cd:1c:81:4b:cf:0d:86:96:2a:
b3:fd:49:23:67:24:eb:59:66:bc:46:40:32:ec:a6:
0c:0a:86:43:15:fa:38:46:1c:1c:2b:f0:b9:44:76:
a4:65:43:5b:7a:81:32:d1:0d:7e:65:48:f0:24:ac:
bd:73:bb:4d:fd:75:22:6c:62:81:49:de:8b:c8:1d:
a2:a2:ef:da:92:38:9d:c9:b0:96:b9:39:34:d3:b0:
59:80:da:58:68:99:9f:e5:39:03:91:04:52:61:e9:
2e:5c:62:cf:a6:23:a5:1b:3a:22:8c:4f:0a:fb:71:
2e:87:ec:18:ef:d1:11:dd:6a:9a:fc:28:97:f2:c1:
9c:40:7b:1b:b6:f2:bb:5b:b7:e1:65:4c:34:61:fc:
df:e7:e9:e2:61:17:b3:24:78:c7:81:f7:4c:b3:c7:
4b:ba:48:a1:9c:68:33:09:88:9d:c2:9a:f6:48:c8:
08:01:06:b8:d6:ac:f6:12:f1:7b:42:9a:b1:ed:22:
d6:a7:5e:88:a5:8e:71:e4:2a:a0:9c:e4:8e:0a:b2:
93:11:e2:8a:0b:9c:87:0f:93:53:ae:16:cf:e3:b2:
44:a5:9c:92:4a:a8:cc:57:1e:e6:04:1a:68:87:06:
7b:49:69:03:16:e3:64:9b:bf:30:8f:1b:5a:14:66:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:14:E2:38:47:29:49:21:79:F7:03:2C:19:90:BC:8B:5D:A1:9C
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:39:ab:88:c3:62:3b:46:dc:17:fe:ab:8e:d5:e6:d9:78:
97:70:13:59:ae:7b:49:55:f9:2e:d1:1d:ee:91:39:ed:25:d7:
62:7d:eb:b0:b7:9c:20:6f:55:1f:10:4f:d8:96:86:0f:19:80:
93:23:45:85:e2:9f:de:e4:86:b5:b4:e1:60:e7:d9:95:ad:1b:
27:f2:46:18:1b:58:8a:83:68:c3:62:96:ab:48:a1:30:76:aa:
7c:fe:a7:e7:c9:a5:b6:df:4c:b1:55:5d:f6:d5:a0:25:f9:f6:
f4:81:8a:51:c2:98:3a:81:30:94:d5:94:ec:2e:07:c8:84:20:
4f:8b:39:bc:70:b7:67:8b:83:91:46:77:ea:1a:39:8d:62:fe:
d3:d2:48:02:b6:7a:6b:42:b6:ce:cb:19:37:9f:fa:bc:03:fd:
e2:66:78:bc:5a:12:52:83:cc:82:20:2c:22:bf:e4:b9:91:02:
18:22:87:56:0b:10:e8:43:3d:ef:4f:8e:9a:15:32:bb:dc:c3:
c0:64:67:7a:4a:61:2f:79:20:92:09:4d:6b:54:4c:7e:41:66:
40:7f:5e:24:39:7c:a1:28:a1:e6:69:1c:6c:6a:56:db:f5:9f:
8d:a2:46:60:ee:5b:fa:4b:ad:cd:34:ac:76:94:69:26:76:10:
c3:1a:17:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKw6OV5GzHbKTxj+1U36sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw
YTZjYjYwHhcNMjYwNDE3MDIwMDI4WhcNMjYwNDE4MDIwMDI4WjAzMTEwLwYDVQQD
EyhmMDc4MTRlMjM4NDcyOTQ5MjE3OWY3MDMyYzE5OTBiYzhiNWRhMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61tCXpLNHIFLzw2Gliqz/UkjZyTr
WWa8RkAy7KYMCoZDFfo4RhwcK/C5RHakZUNbeoEy0Q1+ZUjwJKy9c7tN/XUibGKB
Sd6LyB2iou/akjidybCWuTk007BZgNpYaJmf5TkDkQRSYekuXGLPpiOlGzoijE8K
+3Euh+wY79ER3Wqa/CiX8sGcQHsbtvK7W7fhZUw0Yfzf5+niYRezJHjHgfdMs8dL
ukihnGgzCYidwpr2SMgIAQa41qz2EvF7Qpqx7SLWp16IpY5x5CqgnOSOCrKTEeKK
C5yHD5NTrhbP47JEpZySSqjMVx7mBBpohwZ7SWkDFuNkm78wjxtaFGYlMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPB4FOI4RylJIXn3AywZkLyLXaGcMB8GA1UdIwQY
MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt
NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz
LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAr05q4jD
YjtG3Bf+q47V5tl4l3ATWa57SVX5LtEd7pE57SXXYn3rsLecIG9VHxBP2JaGDxmA
kyNFheKf3uSGtbThYOfZla0bJ/JGGBtYioNow2KWq0ihMHaqfP6n58mltt9MsVVd
9tWgJfn29IGKUcKYOoEwlNWU7C4HyIQgT4s5vHC3Z4uDkUZ36ho5jWL+09JIArZ6
a0K2zssZN5/6vAP94mZ4vFoSUoPMgiAsIr/kuZECGCKHVgsQ6EM970+OmhUyu9zD
wGRnekphL3kgkglNa1RMfkFmQH9eJDl8oSih5mkcbGpW2/WfjaJGYO5b+kutzTSs
dpRpJnYQwxoXNw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:16 2026 by rpki-client