Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: 9/brCXCB6TUoWEFAj/0GRdNrxissUUdKl57lTOkqzYM=
Subject key identifier: E1:66:69:8C:A2:BE:68:FE:3B:C3:03:B6:65:E2:B4:61:EE:65:18:70
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019D9A74ACE15FC5007EAC2D89963A04CCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0449
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: 3AKV0u3WSxtyrBn5vr3IyCaz8CY.roa (hash: eMq4UCU2DpJceG3vsiv0qnCLBJvV82fA2hJ3CQNxIsw=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: nJD1CDxMGPVy80YBIrbWTzXLEVuPK4JPGvF7P6oaLtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ac:e1:5f:c5:00:7e:ac:2d:89:96:3a:04:cc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=e166698ca2be68fe3bc303b665e2b461ee651870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:6b:b0:c0:14:2d:6c:2a:ef:db:ef:f4:f9:
f9:e9:45:89:3e:da:55:90:83:d4:51:5b:50:00:fc:
7d:20:21:ed:0c:5a:c5:99:a6:a5:ed:d0:46:7d:17:
ee:ef:a9:75:02:bb:e0:0d:66:96:22:4f:8d:88:c3:
01:3d:cf:0c:8a:28:19:ac:f0:90:54:e5:3c:d3:42:
80:20:61:78:32:36:75:2d:44:25:bf:38:aa:14:40:
ea:49:c0:59:39:5f:3e:cc:97:92:b9:b5:08:fe:b8:
1d:b7:2b:bc:e5:59:d1:e9:cb:f2:58:fa:ac:15:f4:
be:25:53:c7:45:47:cb:33:49:21:8e:7d:05:12:ef:
1c:e3:85:9e:5b:e9:f8:5d:a9:1d:f3:ab:c4:7a:c3:
53:23:4f:15:93:47:d6:e8:a2:3d:7e:84:6a:5f:c0:
22:c3:1d:4b:51:7e:0a:a8:5e:7c:84:55:2b:2b:32:
f6:85:ff:ea:8f:be:f0:6e:c5:8a:93:91:2c:18:75:
b1:9b:dc:6a:80:db:ba:d2:91:53:5d:ed:91:88:d7:
b5:d3:2c:f4:e9:b4:e5:d6:7f:11:bc:91:51:d0:db:
db:ce:b4:bc:3c:ca:4e:f8:d1:f9:34:10:d8:79:f4:
c1:bb:f2:de:6c:fc:a8:5b:90:04:cb:02:d4:cc:55:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:69:8C:A2:BE:68:FE:3B:C3:03:B6:65:E2:B4:61:EE:65:18:70
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:b7:e5:21:96:6f:ca:6d:eb:8b:5b:68:f1:aa:44:ed:92:
8a:10:70:f3:2b:33:8c:e7:26:15:05:84:e3:f4:7c:b0:79:c9:
ed:a3:96:b0:d7:bb:26:1f:09:ad:8e:14:f3:64:e8:88:ca:ac:
9b:68:c1:5e:0d:f6:17:4d:76:a2:52:6c:3b:49:94:7a:79:bb:
85:21:b5:da:00:3b:42:28:62:5d:38:47:71:81:88:0a:83:3d:
d3:5f:04:16:17:1a:54:3c:69:a0:5b:16:28:df:f2:f3:74:c9:
db:70:b1:71:09:91:90:f6:b1:4b:d9:12:7e:f5:d5:03:1d:ea:
db:d0:50:b2:7b:80:13:90:70:2b:c6:c3:93:69:54:e8:aa:26:
78:6f:7e:f0:28:a3:01:51:e7:87:65:f5:5e:6b:c9:e5:d9:ce:
f0:2b:7c:fa:4d:6a:67:15:46:a6:41:a5:8e:9c:b0:d3:82:76:
35:b6:cf:a0:02:d2:35:a8:2c:ea:f2:bb:cb:5f:4f:73:6d:93:
64:5d:c2:01:09:5f:65:a3:91:e7:d6:d8:6d:50:ab:96:6c:0f:
c7:63:ae:4c:63:e8:0b:4a:39:c6:2e:22:2c:27:32:b4:c2:b0:
e1:ac:d2:7c:e0:b1:23:43:c1:15:5e:c7:20:70:09:d6:8d:90:
1a:08:cb:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKzhX8UAfqwtiZY6BMzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3
Y2ViNDYwHhcNMjYwNDE3MDgwMDMwWhcNMjYwNDE4MDgwMDMwWjAzMTEwLwYDVQQD
EyhlMTY2Njk4Y2EyYmU2OGZlM2JjMzAzYjY2NWUyYjQ2MWVlNjUxODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNxrsMAULWwq79vv9Pn56UWJPtpV
kIPUUVtQAPx9ICHtDFrFmaal7dBGfRfu76l1ArvgDWaWIk+NiMMBPc8MiigZrPCQ
VOU800KAIGF4MjZ1LUQlvziqFEDqScBZOV8+zJeSubUI/rgdtyu85VnR6cvyWPqs
FfS+JVPHRUfLM0khjn0FEu8c44WeW+n4Xakd86vEesNTI08Vk0fW6KI9foRqX8Ai
wx1LUX4KqF58hFUrKzL2hf/qj77wbsWKk5EsGHWxm9xqgNu60pFTXe2RiNe10yz0
6bTl1n8RvJFR0NvbzrS8PMpO+NH5NBDYefTBu/LebPyoW5AEywLUzFUtpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFmaYyivmj+O8MDtmXitGHuZRhwMB8GA1UdIwQY
MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt
NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0
LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGj635SGW
b8pt64tbaPGqRO2SihBw8yszjOcmFQWE4/R8sHnJ7aOWsNe7Jh8JrY4U82ToiMqs
m2jBXg32F012olJsO0mUenm7hSG12gA7QihiXThHcYGICoM9018EFhcaVDxpoFsW
KN/y83TJ23CxcQmRkPaxS9kSfvXVAx3q29BQsnuAE5BwK8bDk2lU6KomeG9+8Cij
AVHnh2X1XmvJ5dnO8Ct8+k1qZxVGpkGljpyw04J2NbbPoALSNags6vK7y19Pc22T
ZF3CAQlfZaOR59bYbVCrlmwPx2OuTGPoC0o5xi4iLCcytMKw4azSfOCxI0PBFV7H
IHAJ1o2QGgjLmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:40 2026 by rpki-client