Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: nfPfSxMszJF9yx25WwdTorSy1awJe8A3IWm859qRreI=
Subject key identifier: F2:D4:6E:CA:CB:4A:A7:07:30:02:F1:A0:2A:C0:06:A8:55:5F:D2:D3
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019DA453D8906A52B8DC6D1D4428AEF5E268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0D69
Signing time: Sun 19 Apr 2026 06:00:51 +0000
Manifest this update: Sun 19 Apr 2026 06:00:51 +0000
Manifest next update: Mon 20 Apr 2026 06:00:51 +0000
Files and hashes: 1: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: 5nKl8Udue7qOqNhB0nreKzqVRvEEgIeCCqWWsFCwZLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:d8:90:6a:52:b8:dc:6d:1d:44:28:ae:f5:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Apr 19 06:00:51 2026 GMT
Not After : Apr 20 06:00:51 2026 GMT
Subject: CN=f2d46ecacb4aa7073002f1a02ac006a8555fd2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:a5:83:a3:a9:e1:5f:1d:dd:32:ea:dd:9e:
c9:9d:d1:de:3b:7c:56:06:86:29:b6:26:08:35:53:
6a:42:3f:b8:9b:22:da:8e:5b:15:28:0a:e9:ca:dc:
4d:92:7c:39:e1:79:c3:42:1f:ee:5f:1b:48:87:7d:
13:a6:b0:c5:2d:4f:1a:a3:6a:89:34:92:aa:c0:ac:
6f:9e:0f:ec:a6:4d:7e:fb:dd:09:4d:f4:1e:1e:c6:
e5:cf:c8:64:b0:7d:69:1d:ac:f5:c1:4e:f3:62:c5:
a7:c1:59:f6:eb:c0:e1:b1:32:28:a5:85:12:32:ea:
a0:bd:a0:3c:b5:2c:2d:b6:8e:15:98:c5:70:ae:ab:
15:e8:da:b0:51:54:7a:07:66:a8:9b:4c:97:c8:03:
17:63:fb:fe:43:7d:b4:bd:3c:29:14:67:83:eb:86:
77:2b:ae:7d:1d:45:14:fb:42:bd:e9:ae:f2:9c:8b:
80:e9:f1:8f:b7:81:c8:c6:e1:00:ea:cd:3e:6c:49:
21:16:a1:26:c6:c7:92:bb:8f:a5:7f:44:87:34:95:
ba:52:85:87:00:0c:de:d0:a5:3a:cc:98:1e:5a:d4:
6e:a2:78:dd:78:71:a9:97:20:3f:40:05:50:86:19:
6a:5e:7d:9d:53:1b:7f:98:a9:5c:2c:f7:2f:46:aa:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:6E:CA:CB:4A:A7:07:30:02:F1:A0:2A:C0:06:A8:55:5F:D2:D3
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:94:55:6c:49:fc:49:d8:ec:5e:3a:f3:04:40:f8:b1:cc:
b1:90:c8:27:0e:e1:eb:da:b7:7c:92:dd:1e:98:5e:53:7b:3c:
d6:39:62:12:be:9c:1d:01:31:3d:f1:85:b9:80:7a:83:9d:a4:
14:e7:62:08:21:ed:e3:65:24:2f:2f:43:dc:f9:c4:54:19:03:
72:39:89:0d:11:9f:50:ac:0e:b8:54:af:9e:fd:82:44:47:fd:
ef:53:91:45:2a:29:3f:a0:21:57:62:2f:9e:1f:fa:79:19:0a:
ac:e3:cb:30:ad:a7:12:1f:9e:bd:ec:ef:a5:e4:55:f0:7e:df:
e9:43:22:e4:fb:0b:d5:72:43:ec:fc:eb:96:ac:8f:ec:c6:8f:
12:9d:72:ab:19:ad:ee:52:7f:9f:44:38:7c:67:0e:49:56:5c:
62:7e:09:57:cf:f8:b1:f8:5c:64:60:4d:23:c0:2e:5b:21:dd:
d7:22:1c:02:3b:ed:2e:27:76:e8:09:35:29:25:11:15:b8:b3:
e3:01:b7:88:df:8c:2b:db:ba:0d:f0:74:ad:58:6e:56:f7:dd:
98:1e:27:a6:d4:88:b6:5b:09:21:a8:7f:a0:c1:ff:82:9e:15:
ec:11:b6:d9:c2:f7:d4:52:87:e9:b7:a7:ea:41:03:ed:c9:d4:
5f:34:26:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU9iQalK43G0dRCiu9eJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl
NWU4YWIwHhcNMjYwNDE5MDYwMDUxWhcNMjYwNDIwMDYwMDUxWjAzMTEwLwYDVQQD
EyhmMmQ0NmVjYWNiNGFhNzA3MzAwMmYxYTAyYWMwMDZhODU1NWZkMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZelg6Op4V8d3TLq3Z7JndHeO3xW
BoYptiYINVNqQj+4myLajlsVKArpytxNknw54XnDQh/uXxtIh30TprDFLU8ao2qJ
NJKqwKxvng/spk1++90JTfQeHsblz8hksH1pHaz1wU7zYsWnwVn268DhsTIopYUS
MuqgvaA8tSwtto4VmMVwrqsV6NqwUVR6B2aom0yXyAMXY/v+Q320vTwpFGeD64Z3
K659HUUU+0K96a7ynIuA6fGPt4HIxuEA6s0+bEkhFqEmxseSu4+lf0SHNJW6UoWH
AAze0KU6zJgeWtRuonjdeHGplyA/QAVQhhlqXn2dUxt/mKlcLPcvRqpkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLUbsrLSqcHMALxoCrABqhVX9LTMB8GA1UdIwQY
MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt
NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw
LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAOUVWxJ
/EnY7F468wRA+LHMsZDIJw7h69q3fJLdHpheU3s81jliEr6cHQExPfGFuYB6g52k
FOdiCCHt42UkLy9D3PnEVBkDcjmJDRGfUKwOuFSvnv2CREf971ORRSopP6AhV2Iv
nh/6eRkKrOPLMK2nEh+evezvpeRV8H7f6UMi5PsL1XJD7PzrlqyP7MaPEp1yqxmt
7lJ/n0Q4fGcOSVZcYn4JV8/4sfhcZGBNI8AuWyHd1yIcAjvtLid26Ak1KSURFbiz
4wG3iN+MK9u6DfB0rVhuVvfdmB4nptSItlsJIah/oMH/gp4V7BG22cL31FKH6ben
6kED7cnUXzQmZw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:30 2026 by rpki-client