Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: 3roadGmwMkDASIR5aQlqwFwkGGu1D9JnT+e5ymYqnPo=
Subject key identifier: CD:F4:2A:CC:C1:5E:87:C9:25:FB:34:04:55:B1:2F:E2:C3:F6:FE:45
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019D9BF58635E82DD777A0E4CEF5DF4D18BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: byRzPzylfAGiLrsx5JWXbJT1CRPDLx1p5YjkT863wDk=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:86:35:e8:2d:d7:77:a0:e4:ce:f5:df:4d:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=cdf42accc15e87c925fb340455b12fe2c3f6fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:dc:f5:a0:b3:0f:ab:31:33:07:9e:16:9b:
1f:5b:ae:2c:bb:bf:23:5e:0a:4e:6a:ae:bf:ff:bb:
45:ce:31:f2:2d:e7:49:c4:29:e9:0e:46:a5:17:e9:
78:1f:6e:c0:10:6e:6f:99:e9:58:28:7e:b5:c0:d8:
ef:29:6b:ca:60:b2:4b:aa:f0:06:16:24:a4:8e:dc:
e2:a5:b9:99:e2:b5:39:8b:48:99:59:73:0d:9a:e8:
17:14:2f:50:9d:8c:af:57:5b:7e:92:91:dc:a5:a8:
08:c5:62:35:aa:a1:73:7c:05:89:97:c7:1c:1a:89:
f7:c6:5f:7d:32:13:bd:cd:d6:31:6c:d4:fb:f7:59:
12:11:e4:8f:a5:6e:6a:8a:3c:7d:8e:15:52:8a:23:
13:40:f7:91:95:74:46:17:5e:1a:21:49:ff:f2:60:
be:f2:37:99:27:30:17:71:e3:30:ee:e1:5d:9c:d5:
80:5d:d7:9c:52:62:97:c2:cd:f3:ff:8a:13:5e:94:
33:88:5a:ce:ac:d1:a1:75:28:15:ab:1c:1d:6e:d2:
43:42:1e:4a:16:87:0d:eb:2c:f6:46:7b:d0:66:c7:
e6:21:42:52:26:9a:f4:c7:ac:b9:88:fa:8e:ac:17:
90:e6:e0:f1:ce:e0:8a:3e:07:00:9e:3e:23:e0:01:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:2A:CC:C1:5E:87:C9:25:FB:34:04:55:B1:2F:E2:C3:F6:FE:45
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:3c:3a:05:2a:0c:33:83:58:72:09:8d:cb:06:48:31:78:
cf:f9:bf:44:69:03:21:8e:30:df:80:46:5d:33:73:c0:52:97:
d5:22:88:5c:d9:91:61:30:f1:14:84:2b:08:8c:f4:58:9d:d0:
71:db:d7:f8:c5:4c:9e:6e:f7:30:c4:ef:e0:54:87:65:ba:fa:
eb:4d:e8:da:51:50:ee:d7:d9:aa:65:a6:9f:de:78:60:97:a4:
25:6f:21:2f:80:81:3a:eb:3c:19:74:32:72:1c:fc:e8:d3:60:
97:c4:9d:88:82:1d:2c:1d:3f:33:75:76:d7:5e:0a:e9:7c:6d:
8c:fc:33:c2:15:ed:27:d7:65:2b:e2:42:81:07:68:3e:66:eb:
9e:b8:bf:7c:0a:2a:df:23:9a:61:34:e7:c2:e9:bd:1f:9e:8e:
d9:57:61:1a:ad:18:a4:9d:7d:18:e1:6e:a0:a9:3b:09:40:c1:
1a:58:23:55:da:73:f0:88:18:67:5e:1a:77:1e:fa:8a:09:3f:
cd:de:50:4a:86:c3:d1:02:89:90:a5:72:58:f3:ad:53:90:ce:
87:8e:2b:a3:07:0c:82:e3:44:a2:39:59:e6:74:6a:3d:92:23:
c2:be:07:e3:81:dc:3b:81:a1:3d:10:67:3b:5a:01:ca:57:cb:
36:73:0e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9YY16C3Xd6DkzvXfTRi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5
NDM1NTgwHhcNMjYwNDE3MTUwMDUyWhcNMjYwNDE4MTUwMDUyWjAzMTEwLwYDVQQD
EyhjZGY0MmFjY2MxNWU4N2M5MjVmYjM0MDQ1NWIxMmZlMmMzZjZmZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZfc9aCzD6sxMweeFpsfW64su78j
XgpOaq6//7tFzjHyLedJxCnpDkalF+l4H27AEG5vmelYKH61wNjvKWvKYLJLqvAG
FiSkjtzipbmZ4rU5i0iZWXMNmugXFC9QnYyvV1t+kpHcpagIxWI1qqFzfAWJl8cc
Gon3xl99MhO9zdYxbNT791kSEeSPpW5qijx9jhVSiiMTQPeRlXRGF14aIUn/8mC+
8jeZJzAXceMw7uFdnNWAXdecUmKXws3z/4oTXpQziFrOrNGhdSgVqxwdbtJDQh5K
FocN6yz2RnvQZsfmIUJSJpr0x6y5iPqOrBeQ5uDxzuCKPgcAnj4j4AEtKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM30KszBXofJJfs0BFWxL+LD9v5FMB8GA1UdIwQY
MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt
MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw
LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0c8OgUq
DDODWHIJjcsGSDF4z/m/RGkDIY4w34BGXTNzwFKX1SKIXNmRYTDxFIQrCIz0WJ3Q
cdvX+MVMnm73MMTv4FSHZbr6603o2lFQ7tfZqmWmn954YJekJW8hL4CBOus8GXQy
chz86NNgl8SdiIIdLB0/M3V2114K6XxtjPwzwhXtJ9dlK+JCgQdoPmbrnri/fAoq
3yOaYTTnwum9H56O2VdhGq0YpJ19GOFuoKk7CUDBGlgjVdpz8IgYZ14adx76igk/
zd5QSobD0QKJkKVyWPOtU5DOh44rowcMguNEojlZ5nRqPZIjwr4H44HcO4GhPRBn
O1oBylfLNnMObw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:02 2026 by rpki-client