Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json)
Hash identifier: AGalf9vEoDqAzx63sHSrzdtv/17nTExzGNCSUSKfU4c=
Subject key identifier: FC:60:6E:4D:DE:2B:E3:8E:FC:B9:31:F9:B2:6E:6C:6D:19:01:25:51
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 019D9A3E14621BEB7201AC4E693D57AF3EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: 6jv9jlHJmC7k64rvSsealEF_Ys4.roa (hash: crUEU6To7tUPJ210jDOrFjZwtJRVZ4icX9N2S6uxoc0=)
2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: ajr6ouTak4nZph0xrTfl7+u5Ihf+GLXsdsn26FlKkZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:14:62:1b:eb:72:01:ac:4e:69:3d:57:af:3e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=fc606e4dde2be38efcb931f9b26e6c6d19012551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:2d:f0:f0:4a:5d:ca:d9:4a:73:ba:42:5d:
e9:a7:a7:f5:f0:ee:ea:1d:7c:49:fe:c9:c3:53:ef:
a1:22:92:a1:5f:04:40:b7:5c:a7:73:34:ea:c0:7a:
cb:f1:37:c5:08:da:b1:cc:80:5b:ae:37:cb:d0:55:
00:62:d7:68:2e:a1:33:4d:46:01:72:40:3d:86:34:
04:24:48:4f:99:72:6c:50:25:b2:08:8f:c1:ac:04:
10:ba:23:62:e4:ca:e6:6c:8c:5d:8b:6f:96:e5:bf:
68:3c:22:8b:8c:e2:4f:a0:a3:1c:2b:4d:59:a4:db:
9b:32:95:ad:ea:f9:9a:76:ef:d8:b4:8c:47:af:a8:
f9:79:8b:0c:4c:c7:73:cc:72:b5:3c:9a:20:f5:33:
45:13:58:fb:84:ac:9b:3b:88:78:4d:e6:4a:58:a7:
ba:e6:7d:6d:c2:ee:ac:8c:c3:9a:16:11:9e:08:05:
06:2a:fd:c4:52:bc:52:a3:18:c9:78:b8:1b:85:f7:
7c:fb:20:1b:ba:de:da:0b:92:09:db:fe:22:be:59:
79:87:c6:63:64:37:d8:f5:ca:b8:7a:69:34:e7:18:
c7:60:b1:ec:13:cc:8d:3b:67:88:34:3d:a1:d5:ca:
35:68:4b:8a:86:34:24:93:4e:ea:a2:9a:07:3d:97:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:60:6E:4D:DE:2B:E3:8E:FC:B9:31:F9:B2:6E:6C:6D:19:01:25:51
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:3b:68:1c:38:11:0b:eb:10:3e:f8:18:dd:87:38:86:2d:
b6:ad:8a:3a:00:a8:80:1b:eb:22:14:9e:c7:c1:70:34:ae:70:
50:12:dd:2c:e0:07:ab:97:a3:c1:ca:53:47:33:a7:ba:8e:14:
11:b0:96:90:f4:ff:f1:47:3c:13:88:2a:91:2b:79:ee:a0:f3:
80:08:da:3a:d3:69:f3:24:ea:6d:d6:1d:af:34:14:08:91:23:
94:fe:49:70:a3:2c:51:b1:5a:55:89:8b:f2:72:1b:14:67:30:
3b:f1:67:cb:3e:f8:e8:c4:89:4d:ee:fc:bd:71:48:3d:ee:74:
0e:89:88:c8:39:ab:e5:e9:5e:e8:dd:75:17:38:77:9e:e8:95:
2e:5f:32:18:6c:29:93:8a:1f:e5:c0:5d:a5:15:32:97:b1:38:
0b:5c:b5:f4:85:ba:dc:99:42:9b:f2:44:8f:71:2e:05:65:a0:
10:d1:89:6b:82:08:29:fa:5b:38:0e:12:89:67:52:86:db:c0:
5d:36:6f:0c:77:20:5e:f0:29:4c:b6:d9:9f:87:f6:d2:50:6c:
38:0c:51:00:3d:1d:74:01:72:15:c0:41:36:bb:d4:21:12:a8:
8d:e9:46:75:76:26:86:1d:a9:64:26:53:9c:45:2f:68:f8:0a:
ca:a9:d2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhRiG+tyAaxOaT1Xrz7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDliYWEwMjIxOTQyZWRmZTRiM2E5YTU3MDgyOTVjMDQ0
MTZlODAwHhcNMjYwNDE3MDcwMDUyWhcNMjYwNDE4MDcwMDUyWjAzMTEwLwYDVQQD
EyhmYzYwNmU0ZGRlMmJlMzhlZmNiOTMxZjliMjZlNmM2ZDE5MDEyNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk54t8PBKXcrZSnO6Ql3pp6f18O7q
HXxJ/snDU++hIpKhXwRAt1ynczTqwHrL8TfFCNqxzIBbrjfL0FUAYtdoLqEzTUYB
ckA9hjQEJEhPmXJsUCWyCI/BrAQQuiNi5MrmbIxdi2+W5b9oPCKLjOJPoKMcK01Z
pNubMpWt6vmadu/YtIxHr6j5eYsMTMdzzHK1PJog9TNFE1j7hKybO4h4TeZKWKe6
5n1twu6sjMOaFhGeCAUGKv3EUrxSoxjJeLgbhfd8+yAbut7aC5IJ2/4ivll5h8Zj
ZDfY9cq4emk05xjHYLHsE8yNO2eIND2h1co1aEuKhjQkk07qopoHPZdMbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxgbk3eK+OO/Lkx+bJubG0ZASVRMB8GA1UdIwQY
MBaAFHHZuqAiGULt/ks6mlcIKVwEQW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMt
NTA0NzI3YTUwYjhlLzEvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84YzNmYjgtNDBkZi00ZDVkLTkzNjMtNTA0NzI3YTUwYjhl
LzEvY2RtNm9DSVpRdTMtU3pxYVZ3Z3BYQVJCYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmI7aBw4
EQvrED74GN2HOIYttq2KOgCogBvrIhSex8FwNK5wUBLdLOAHq5ejwcpTRzOnuo4U
EbCWkPT/8Uc8E4gqkSt57qDzgAjaOtNp8yTqbdYdrzQUCJEjlP5JcKMsUbFaVYmL
8nIbFGcwO/Fnyz746MSJTe78vXFIPe50DomIyDmr5ele6N11Fzh3nuiVLl8yGGwp
k4of5cBdpRUyl7E4C1y19IW63JlCm/JEj3EuBWWgENGJa4IIKfpbOA4SiWdShtvA
XTZvDHcgXvApTLbZn4f20lBsOAxRAD0ddAFyFcBBNrvUIRKojelGdXYmhh2pZCZT
nEUvaPgKyqnSsg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:54 2026 by rpki-client