Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: teNjS4a0T64l1KFEqlz937kRkj1VY7y7w9+6VgE6+gU=
Subject key identifier: 33:7B:6D:8F:61:FB:76:3E:D2:C2:6F:5B:A2:8F:0B:E6:E7:38:67:24
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 019D98BDBBCA95368CDA0435FA25C421FEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0637
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: G3BLzbIUcipqQpJY5GmsXFz3bjJMa9hqA2pyoIjRpLg=)
2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bb:ca:95:36:8c:da:04:35:fa:25:c4:21:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=337b6d8f61fb763ed2c26f5ba28f0be6e7386724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:7e:a7:c3:b6:26:10:69:47:e6:c1:2c:d6:
66:50:99:4c:5b:46:b1:fc:3b:f8:9a:d2:61:7c:bc:
35:6c:46:a2:7a:80:e8:09:d0:dd:5a:23:05:58:db:
52:24:3c:dc:70:f3:68:cb:a5:a1:a8:77:23:ac:9d:
ec:b8:57:cd:01:23:a1:6f:4a:64:76:0f:d2:e3:bc:
ce:87:04:68:b2:7b:47:b3:5b:63:4c:e8:9f:20:19:
43:ba:6b:4a:a4:7a:ec:52:27:62:91:89:3d:34:ec:
68:dc:e0:51:d9:9d:d4:84:d4:db:dc:b3:c6:a1:76:
4a:50:84:7c:3f:48:7e:fa:4b:a1:9c:2f:7f:f9:66:
e9:01:c0:e8:a3:cc:1c:cc:b5:c0:4f:d1:74:a5:ac:
f7:43:01:33:9f:df:97:f0:7b:9d:c2:07:a9:11:e8:
5c:2f:c3:a5:b4:f2:34:dd:8f:5f:c9:61:1e:27:d4:
29:75:51:27:f8:7a:9a:35:d1:0c:b0:a4:34:5c:8d:
f1:3c:4e:5e:60:53:26:3c:cf:17:25:07:9f:ac:ba:
c3:94:a4:8e:97:71:21:97:8d:7a:0e:bb:5b:41:e8:
bb:12:d9:2e:15:64:40:7a:dd:ef:f0:1d:0b:83:26:
e6:d9:b9:19:e5:0d:5b:c4:03:79:7c:43:af:41:e4:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:6D:8F:61:FB:76:3E:D2:C2:6F:5B:A2:8F:0B:E6:E7:38:67:24
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1d:0a:2d:24:93:ec:cd:6f:25:da:01:7b:f0:00:b4:41:0b:
fb:f6:6e:11:df:42:98:85:b4:d6:fb:f5:a9:0a:94:48:a8:97:
e0:43:4f:b0:da:01:8c:10:cd:d4:0c:5a:27:ee:c5:96:ce:35:
d6:65:ef:8f:46:64:81:1a:70:49:3a:71:9c:e2:a5:9b:a1:7d:
81:18:ee:4f:17:ce:62:f1:f2:7f:f1:dd:15:53:82:4c:63:e6:
fa:e4:7a:35:65:2b:66:ec:9d:73:64:1f:e2:6e:cf:7d:25:a1:
69:cd:5e:4a:1f:ae:ea:00:74:e9:a6:40:39:a0:98:22:c5:27:
c5:51:b1:55:7e:3e:c0:21:80:36:31:5c:6e:c6:e3:73:37:e2:
ad:97:4a:3b:c4:fb:ff:d7:63:65:4a:94:92:d7:3f:73:3e:09:
04:96:f4:6c:a3:84:36:4e:46:89:d6:7c:9b:8b:ae:e0:61:d7:
af:1e:d8:b8:c6:ab:a6:5b:c4:86:b9:ac:91:4e:82:e5:66:97:
a1:a0:08:93:b3:1c:98:c7:d2:93:be:5d:b6:94:72:82:a1:0a:
d8:43:d7:75:eb:54:0e:25:79:ea:a6:ef:b9:38:b3:45:ff:a3:
20:38:e5:bd:70:54:1c:05:3f:97:da:ad:a2:47:b7:16:2f:8e:
1f:ad:a7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvbvKlTaM2gQ1+iXEIf7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz
MTFkOGMwHhcNMjYwNDE3MDAwMTA0WhcNMjYwNDE4MDAwMTA0WjAzMTEwLwYDVQQD
EygzMzdiNmQ4ZjYxZmI3NjNlZDJjMjZmNWJhMjhmMGJlNmU3Mzg2NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUB+p8O2JhBpR+bBLNZmUJlMW0ax
/Dv4mtJhfLw1bEaieoDoCdDdWiMFWNtSJDzccPNoy6WhqHcjrJ3suFfNASOhb0pk
dg/S47zOhwRosntHs1tjTOifIBlDumtKpHrsUidikYk9NOxo3OBR2Z3UhNTb3LPG
oXZKUIR8P0h++kuhnC9/+WbpAcDoo8wczLXAT9F0paz3QwEzn9+X8HudwgepEehc
L8OltPI03Y9fyWEeJ9QpdVEn+HqaNdEMsKQ0XI3xPE5eYFMmPM8XJQefrLrDlKSO
l3Ehl416DrtbQei7EtkuFWRAet3v8B0Lgybm2bkZ5Q1bxAN5fEOvQeR+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN7bY9h+3Y+0sJvW6KPC+bnOGckMB8GA1UdIwQY
MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt
MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx
LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR0KLSST
7M1vJdoBe/AAtEEL+/ZuEd9CmIW01vv1qQqUSKiX4ENPsNoBjBDN1AxaJ+7Fls41
1mXvj0ZkgRpwSTpxnOKlm6F9gRjuTxfOYvHyf/HdFVOCTGPm+uR6NWUrZuydc2Qf
4m7PfSWhac1eSh+u6gB06aZAOaCYIsUnxVGxVX4+wCGANjFcbsbjczfirZdKO8T7
/9djZUqUktc/cz4JBJb0bKOENk5GidZ8m4uu4GHXrx7YuMarplvEhrmskU6C5WaX
oaAIk7McmMfSk75dtpRygqEK2EPXdetUDiV56qbvuTizRf+jIDjlvXBUHAU/l9qt
oke3Fi+OH62nNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:36 2026 by rpki-client