Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: k/R0G77ooOYqvRbTzdBFINKDx3OzJ4JHn2ioFy+smwI=
Subject key identifier: 73:D4:14:6C:B9:02:8A:67:FA:02:FC:0A:2D:4F:52:35:99:86:01:BB
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019D98BE1C23DEA47EEEA9B1BC2331EF6D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 00:01:29 +0000
Manifest this update: Fri 17 Apr 2026 00:01:29 +0000
Manifest next update: Sat 18 Apr 2026 00:01:29 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: ukF/NI4TxuOQwBk1SNaD71XA4+yTF4wTsPH2TAbLbB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:1c:23:de:a4:7e:ee:a9:b1:bc:23:31:ef:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Apr 17 00:01:29 2026 GMT
Not After : Apr 18 00:01:29 2026 GMT
Subject: CN=73d4146cb9028a67fa02fc0a2d4f5235998601bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:03:c4:6a:9e:fa:b3:cd:c9:44:cd:65:e7:
18:d3:0b:27:78:c2:31:11:f3:d6:ee:1c:29:14:0c:
1e:94:f1:3c:3e:b1:ca:0a:54:43:9b:69:dd:a9:3d:
e2:90:b8:ba:78:68:04:15:44:3f:a3:d2:58:2c:00:
25:61:87:a7:4a:a3:ce:b3:b6:65:21:c4:20:0e:fb:
0c:b8:20:87:00:7e:92:b5:56:f6:d8:fe:1c:fd:8e:
92:bc:fd:60:8a:88:8b:13:94:06:0b:4e:c2:2c:8c:
13:77:b4:1b:31:aa:f1:d4:d7:a8:3c:4a:41:de:b9:
cb:20:fc:cd:68:81:28:2d:60:97:56:99:56:95:8d:
f5:22:d5:87:fb:19:a8:b5:fd:72:95:db:d3:c7:8e:
75:3a:1b:58:57:69:48:9f:ef:b1:d2:17:dc:7a:4a:
05:b6:82:31:4d:35:90:71:33:fd:87:38:8f:9e:48:
62:d8:db:cf:9b:f5:72:65:39:cd:43:66:d3:7a:7a:
e7:6e:39:d8:67:fe:a0:06:1e:09:55:31:44:22:03:
81:3c:32:80:f2:d5:72:e9:ee:ad:52:02:59:34:a1:
8d:c2:4b:79:f3:8d:ff:ea:0f:16:85:68:ea:6a:7d:
a3:63:80:02:c4:da:66:50:b1:a9:8b:68:8d:c2:67:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:14:6C:B9:02:8A:67:FA:02:FC:0A:2D:4F:52:35:99:86:01:BB
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d5:52:de:43:e3:82:dd:da:2a:82:6b:b1:1a:7e:a8:bc:d5:
cb:cb:59:26:0f:77:49:86:44:82:ed:e9:29:2d:c0:cd:53:56:
aa:21:2b:22:e4:9e:c7:40:1d:85:e6:65:41:52:1d:96:3f:ad:
10:de:e7:6d:78:2c:5a:c7:d1:df:b3:4e:17:87:06:a9:82:31:
90:5f:c0:26:96:53:25:8b:4a:3c:57:62:6d:7a:f2:8d:f6:3f:
ec:df:47:cb:99:48:e1:d4:2f:a8:c2:e1:c5:ee:f2:8c:9f:ea:
27:30:99:30:9d:56:1f:7f:62:37:c6:5e:37:83:29:f3:32:52:
8e:fb:96:e4:39:c8:1b:d2:dd:95:78:03:fe:3e:69:22:78:af:
82:03:02:21:f9:f3:7f:b7:dc:e2:af:e1:1f:e7:f7:28:fb:cb:
e4:da:0e:f9:71:f0:08:b0:d5:de:5a:46:62:85:d0:64:14:65:
41:46:e0:7f:c3:bb:93:9f:b1:9e:42:6e:49:85:76:29:fe:23:
30:73:ea:55:d1:65:de:aa:17:e2:03:c5:89:5b:ff:c7:2d:9b:
80:94:c5:dd:be:72:63:cd:78:aa:5d:0c:13:83:59:e6:a4:6a:
53:bb:73:26:a8:ca:0c:b2:46:c1:1c:7f:89:d9:77:5c:16:3f:
bd:98:a9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvhwj3qR+7qmxvCMx721sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx
NmJmNzcwHhcNMjYwNDE3MDAwMTI5WhcNMjYwNDE4MDAwMTI5WjAzMTEwLwYDVQQD
Eyg3M2Q0MTQ2Y2I5MDI4YTY3ZmEwMmZjMGEyZDRmNTIzNTk5ODYwMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1gDxGqe+rPNyUTNZecY0wsneMIx
EfPW7hwpFAwelPE8PrHKClRDm2ndqT3ikLi6eGgEFUQ/o9JYLAAlYYenSqPOs7Zl
IcQgDvsMuCCHAH6StVb22P4c/Y6SvP1gioiLE5QGC07CLIwTd7QbMarx1NeoPEpB
3rnLIPzNaIEoLWCXVplWlY31ItWH+xmotf1yldvTx451OhtYV2lIn++x0hfcekoF
toIxTTWQcTP9hziPnkhi2NvPm/VyZTnNQ2bTenrnbjnYZ/6gBh4JVTFEIgOBPDKA
8tVy6e6tUgJZNKGNwkt5843/6g8WhWjqan2jY4ACxNpmULGpi2iNwmdN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPUFGy5Aopn+gL8Ci1PUjWZhgG7MB8GA1UdIwQY
MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt
ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm
LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltVS3kPj
gt3aKoJrsRp+qLzVy8tZJg93SYZEgu3pKS3AzVNWqiErIuSex0AdheZlQVIdlj+t
EN7nbXgsWsfR37NOF4cGqYIxkF/AJpZTJYtKPFdibXryjfY/7N9Hy5lI4dQvqMLh
xe7yjJ/qJzCZMJ1WH39iN8ZeN4Mp8zJSjvuW5DnIG9LdlXgD/j5pInivggMCIfnz
f7fc4q/hH+f3KPvL5NoO+XHwCLDV3lpGYoXQZBRlQUbgf8O7k5+xnkJuSYV2Kf4j
MHPqVdFl3qoX4gPFiVv/xy2bgJTF3b5yY814ql0ME4NZ5qRqU7tzJqjKDLJGwRx/
idl3XBY/vZipnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:57 2026 by rpki-client