Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: qDQiWMdb8s1Bu8ZkDLxcXoRN6/QEZuHlQvF8rXrZzQA=
Subject key identifier: 33:05:8E:5F:B4:D3:F0:DB:77:59:0A:FB:FA:34:1B:96:10:C8:AD:50
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019D9A073566B6E359DD0D6C620D746AB623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 1184
Signing time: Fri 17 Apr 2026 06:00:56 +0000
Manifest this update: Fri 17 Apr 2026 06:00:56 +0000
Manifest next update: Sat 18 Apr 2026 06:00:56 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: aIWG7G7pc_c2slSSItEuUFBnVoI.roa (hash: S5hey+bOiO9SIrfKh6rWG2aF5cPDqfEVaBcsjW8NswM=)
3: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: DgNmEpW1jLc2zZNGuK6tg5utpr5mcRSwexhYmBDmyXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:35:66:b6:e3:59:dd:0d:6c:62:0d:74:6a:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Apr 17 06:00:56 2026 GMT
Not After : Apr 18 06:00:56 2026 GMT
Subject: CN=33058e5fb4d3f0db77590afbfa341b9610c8ad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:be:96:b9:96:ac:9f:13:80:a0:3c:f6:72:
50:92:4f:d8:1b:84:b5:64:aa:92:36:65:30:80:b0:
a4:f1:77:2f:e2:b6:f5:10:84:5f:d0:5d:bc:10:dd:
a2:65:3a:fc:07:da:b3:7c:3d:e6:cd:77:5f:60:56:
8a:88:ad:e1:8f:85:3b:41:26:b0:2c:03:db:47:5b:
9f:5a:51:e7:c1:6a:b5:2d:32:36:03:a8:73:c9:42:
8d:a9:47:09:4b:2b:c1:be:bc:ac:39:f0:f2:30:8f:
e9:0f:d1:0c:b4:ef:6a:b8:b6:72:e9:c5:17:a1:4d:
1e:ee:df:6c:95:9a:7d:18:70:2c:ae:a6:45:21:e7:
f0:d1:ff:cb:7c:04:bd:6c:75:70:7d:79:41:80:83:
40:4d:0e:db:f6:f1:96:f5:8d:e8:42:8f:f3:46:f0:
01:c2:be:40:e1:02:fb:0d:b6:31:5f:87:7a:5a:44:
5c:bb:d2:68:02:4c:1d:08:be:61:d7:8b:50:ce:66:
bf:d1:ff:5a:b1:71:db:e6:f1:3f:94:91:0e:bd:a4:
e4:73:de:a7:36:92:04:f0:44:7c:47:9b:fd:95:02:
3e:45:72:98:d6:da:af:86:7a:f4:47:f8:3d:3e:9e:
67:e7:5d:73:09:b3:7a:be:9b:f0:e9:c3:e4:ad:4d:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:8E:5F:B4:D3:F0:DB:77:59:0A:FB:FA:34:1B:96:10:C8:AD:50
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b4:ee:1b:52:3d:43:5c:b3:9a:b2:46:0a:c9:55:19:4c:6d:
03:c2:21:69:d1:de:16:f8:4a:3c:c7:a0:08:3d:36:00:bb:96:
0e:da:b3:03:09:73:01:a1:2e:09:4f:56:8e:f4:7a:e6:6e:ed:
a3:e6:ea:31:a4:60:46:9b:99:52:78:fd:34:6f:2b:94:5d:a0:
cc:e7:7f:c2:0c:a9:5b:32:27:4d:ad:3f:a7:d0:0c:82:89:ed:
5a:12:62:47:79:10:a3:70:98:3d:d6:85:3b:01:ee:11:3d:13:
f5:b0:d9:20:2a:c7:6d:9c:41:fa:1b:00:3e:bd:ba:74:5f:4e:
26:66:47:f7:e0:ad:02:11:f4:48:89:14:0f:1c:55:fa:40:d3:
31:71:1f:2f:19:00:3d:f3:b8:38:48:99:89:37:c4:9a:ca:80:
05:3b:4b:63:52:ec:b0:2a:29:5f:12:bc:0d:cf:70:7d:87:ae:
62:83:cf:81:5c:e6:ad:c2:5f:7a:82:d6:d8:49:ea:fc:aa:ef:
20:ba:55:a7:30:7a:7d:94:8b:e7:97:b5:e0:f7:41:88:ab:67:
f4:12:fa:7d:76:39:45:ed:5d:80:c5:99:c2:80:3c:00:c5:01:
5a:a4:89:71:bb:51:d1:23:bc:8e:31:b6:df:36:d1:99:0c:e8:
8d:2b:d3:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBzVmtuNZ3Q1sYg10arYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjYwNDE3MDYwMDU2WhcNMjYwNDE4MDYwMDU2WjAzMTEwLwYDVQQD
EygzMzA1OGU1ZmI0ZDNmMGRiNzc1OTBhZmJmYTM0MWI5NjEwYzhhZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbO+lrmWrJ8TgKA89nJQkk/YG4S1
ZKqSNmUwgLCk8Xcv4rb1EIRf0F28EN2iZTr8B9qzfD3mzXdfYFaKiK3hj4U7QSaw
LAPbR1ufWlHnwWq1LTI2A6hzyUKNqUcJSyvBvrysOfDyMI/pD9EMtO9quLZy6cUX
oU0e7t9slZp9GHAsrqZFIefw0f/LfAS9bHVwfXlBgINATQ7b9vGW9Y3oQo/zRvAB
wr5A4QL7DbYxX4d6WkRcu9JoAkwdCL5h14tQzma/0f9asXHb5vE/lJEOvaTkc96n
NpIE8ER8R5v9lQI+RXKY1tqvhnr0R/g9Pp5n511zCbN6vpvw6cPkrU2VgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMFjl+00/Dbd1kK+/o0G5YQyK1QMB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbTuG1I9
Q1yzmrJGCslVGUxtA8IhadHeFvhKPMegCD02ALuWDtqzAwlzAaEuCU9WjvR65m7t
o+bqMaRgRpuZUnj9NG8rlF2gzOd/wgypWzInTa0/p9AMgontWhJiR3kQo3CYPdaF
OwHuET0T9bDZICrHbZxB+hsAPr26dF9OJmZH9+CtAhH0SIkUDxxV+kDTMXEfLxkA
PfO4OEiZiTfEmsqABTtLY1LssCopXxK8Dc9wfYeuYoPPgVzmrcJfeoLW2Enq/Krv
ILpVpzB6fZSL55e14PdBiKtn9BL6fXY5Re1dgMWZwoA8AMUBWqSJcbtR0SO8jjG2
3zbRmQzojSvTXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:51 2026 by rpki-client