Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: Yl6ZczWftU8fyzVRqfWStV8yEuY7PhOQi5wTZqujrwo=
Subject key identifier: BF:F3:90:19:F5:50:E6:85:F4:E7:28:BF:D7:54:DF:FF:F4:CE:6C:69
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 019D9998FBDE89D40C1AE9CE1A0C856717F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 08B2
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: an1akAGwYqq1wlNpXxarZflk8OtNiylSuaX/ELhQ58Y=)
2: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (hash: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fb:de:89:d4:0c:1a:e9:ce:1a:0c:85:67:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=bff39019f550e685f4e728bfd754dffff4ce6c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:f7:ab:95:20:28:78:3b:4d:82:d3:88:24:
08:74:68:fe:1a:14:b7:31:74:6a:fc:d4:bd:57:de:
3e:89:f4:18:3c:09:f8:1e:30:a3:09:6c:05:81:a0:
15:67:4c:23:35:b8:2c:d4:27:86:8e:fc:d9:25:26:
42:1c:7c:df:42:b8:5c:32:52:67:b7:60:d4:45:77:
a0:9c:3c:36:e9:db:1d:bc:70:f1:9a:73:90:4d:2c:
9b:8e:36:54:90:60:7b:9e:f0:6c:81:ae:72:e3:bb:
88:0c:34:92:ac:bd:86:28:27:6c:b3:12:6e:ac:d2:
fa:d6:c7:ed:47:5b:2f:c4:a6:4e:4b:17:4a:d7:dc:
62:d2:8f:ea:37:39:97:c3:93:6b:90:1d:24:d9:47:
6a:7b:8e:97:69:b7:fe:fc:dc:f0:67:69:ed:2e:ec:
ef:c4:4e:fe:0d:3a:b6:5a:30:b7:b0:02:96:2c:69:
c2:94:99:72:6b:23:d6:81:ba:40:a4:3e:86:81:df:
1c:5e:bb:08:16:d8:ae:da:0a:db:1e:ce:e1:58:f7:
6e:b9:6b:e3:5b:ff:a4:53:3a:ac:8b:76:3b:e4:24:
14:ee:13:b8:dc:5a:c5:94:6c:f6:55:43:8b:23:64:
75:f1:5f:0f:99:b4:5d:8e:60:ba:44:55:5f:8c:32:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:90:19:F5:50:E6:85:F4:E7:28:BF:D7:54:DF:FF:F4:CE:6C:69
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b6:f0:b7:43:8c:52:8c:49:d1:f6:a2:1a:00:da:4d:1b:1c:
2e:c3:5c:8c:69:49:ec:e8:33:9e:dd:d5:69:60:24:bb:c9:dc:
4d:53:e6:5f:5d:cc:ad:7b:e2:ef:cb:d2:f9:c3:37:a5:22:28:
96:ef:b1:ad:30:8f:26:8b:05:ef:ee:9e:23:0c:8e:07:f2:3a:
f9:ee:84:36:e0:b3:ad:b2:a7:67:a0:74:c5:fe:7c:fb:a6:aa:
c7:f8:e6:36:fe:f8:bf:21:5b:35:a7:3d:cc:ed:a5:62:b0:75:
07:fa:0d:64:7e:e3:c9:fc:17:5d:8a:1d:64:fa:4f:23:31:d3:
f6:92:b6:c9:37:35:f6:ac:0a:94:cd:ff:87:88:7b:88:c4:10:
80:2c:bd:48:89:82:67:8c:13:4e:8c:ad:51:18:ba:98:58:02:
7f:74:2f:0a:77:52:48:cf:09:e4:41:d0:f2:38:0c:cc:af:58:
cc:d7:49:3d:0c:63:5a:c5:8c:e1:fd:b3:9c:ae:a5:c9:af:bc:
52:10:cc:b9:e4:84:85:3d:da:66:bb:87:f6:d8:18:84:42:e9:
ab:fe:07:b7:2c:b6:e3:9a:8c:22:e1:fb:22:96:da:c6:dc:a9:
c6:31:e7:d4:17:68:58:3b:d6:5e:f2:6f:8f:b2:fa:8c:7d:6a:
8d:e6:0d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmPveidQMGunOGgyFZxf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGQxYzBkYjVhYTE4ODBkNzc0N2UyMmYxZGJmNDcxNmQz
MTAxYTkwHhcNMjYwNDE3MDQwMDMzWhcNMjYwNDE4MDQwMDMzWjAzMTEwLwYDVQQD
EyhiZmYzOTAxOWY1NTBlNjg1ZjRlNzI4YmZkNzU0ZGZmZmY0Y2U2YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GT3q5UgKHg7TYLTiCQIdGj+GhS3
MXRq/NS9V94+ifQYPAn4HjCjCWwFgaAVZ0wjNbgs1CeGjvzZJSZCHHzfQrhcMlJn
t2DURXegnDw26dsdvHDxmnOQTSybjjZUkGB7nvBsga5y47uIDDSSrL2GKCdssxJu
rNL61sftR1svxKZOSxdK19xi0o/qNzmXw5NrkB0k2Udqe46Xabf+/NzwZ2ntLuzv
xE7+DTq2WjC3sAKWLGnClJlyayPWgbpApD6Ggd8cXrsIFtiu2grbHs7hWPduuWvj
W/+kUzqsi3Y75CQU7hO43FrFlGz2VUOLI2R18V8PmbRdjmC6RFVfjDIoMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/zkBn1UOaF9Ocov9dU3//0zmxpMB8GA1UdIwQY
MBaAFCENHA21qhiA13R+IvHb9HFtMQGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUt
ZDcxMTMwYzZjMGY5LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUtZDcxMTMwYzZjMGY5
LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7bwt0OM
UoxJ0faiGgDaTRscLsNcjGlJ7Ogznt3VaWAku8ncTVPmX13MrXvi78vS+cM3pSIo
lu+xrTCPJosF7+6eIwyOB/I6+e6ENuCzrbKnZ6B0xf58+6aqx/jmNv74vyFbNac9
zO2lYrB1B/oNZH7jyfwXXYodZPpPIzHT9pK2yTc19qwKlM3/h4h7iMQQgCy9SImC
Z4wTToytURi6mFgCf3QvCndSSM8J5EHQ8jgMzK9YzNdJPQxjWsWM4f2znK6lya+8
UhDMueSEhT3aZruH9tgYhELpq/4Htyy245qMIuH7IpbaxtypxjHn1BdoWDvWXvJv
j7L6jH1qjeYNuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:12 2026 by rpki-client