Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: bq0XZmsMmHJ/BxYBLvOcpcs1UGM1AsKA7I9Rhiw51UA=
Subject key identifier: 69:1D:AC:B7:C8:0E:11:66:E9:D2:31:3D:1A:A0:E4:BD:46:FC:AF:2E
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019D9A3E0D24DF84A8CDB13D0DD317D5ECBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: VwzvnJSqGJ+Zv77hiH0Cj50APWfRc+R80mWhT/BhJqc=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0d:24:df:84:a8:cd:b1:3d:0d:d3:17:d5:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=691dacb7c80e1166e9d2313d1aa0e4bd46fcaf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:f8:cb:db:cc:9c:fc:5e:3b:56:0f:6e:c7:
48:0f:4e:8b:f9:a9:19:9d:66:9e:d4:dc:8c:57:de:
1f:c5:4e:17:65:13:4b:37:33:55:17:be:c3:c7:e9:
02:94:66:9e:f6:e3:02:01:ac:b0:32:f3:b3:01:44:
b9:aa:ef:b2:d3:e0:83:1b:74:3e:62:0b:cd:73:6d:
5a:98:df:33:00:e8:40:68:b6:78:1f:8f:5c:83:1d:
1e:0c:ab:c0:4c:ca:13:39:92:db:2a:39:0b:94:e2:
c6:1c:1a:e3:f2:68:e8:1b:f6:6f:61:b5:11:0e:e8:
af:3f:f1:67:0c:5a:45:cc:0b:f4:7b:2f:fe:88:12:
e9:1e:0e:1a:d2:d7:1e:a9:11:27:92:de:34:5b:0a:
c2:85:a2:5a:dc:27:8c:6f:d5:e1:f8:dc:a4:31:91:
f8:36:fb:39:ce:26:42:52:72:22:49:c0:8d:1b:20:
f0:cc:e8:71:72:24:55:91:fb:09:28:02:d5:b2:db:
6b:e0:60:0f:4e:5a:fa:6d:63:d3:cc:41:23:72:cd:
67:65:33:c4:95:48:fd:63:c5:11:0c:82:7f:36:be:
ae:0a:ed:5f:65:40:d7:55:e9:bd:43:1a:92:83:f6:
e5:7e:92:b8:e1:56:e9:f4:08:74:99:98:07:87:10:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1D:AC:B7:C8:0E:11:66:E9:D2:31:3D:1A:A0:E4:BD:46:FC:AF:2E
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:44:2e:d7:12:a0:db:f8:4c:20:4d:41:ee:be:8c:f2:e2:
17:4b:35:df:29:f4:bf:b7:98:2c:85:24:2f:27:5b:00:8c:b0:
db:52:2a:3c:87:c3:f3:be:2d:87:0d:99:55:aa:05:02:c4:85:
45:a2:2a:da:4a:20:ca:1f:5b:c6:0f:b4:57:cb:50:52:a0:18:
ff:f3:61:ac:4e:e0:5f:42:42:26:fe:f4:43:79:31:16:1d:3e:
52:ab:bf:1b:7b:a6:f1:92:06:67:02:4c:c7:66:d1:8a:64:d7:
57:9d:87:e4:1f:bc:6f:07:28:cb:7a:18:0a:96:9f:08:d1:a6:
ee:d9:93:42:14:12:76:00:04:b4:29:41:8b:01:ce:fe:1e:dd:
af:49:9d:63:23:cb:44:f6:84:6e:32:b1:65:81:1c:2c:81:33:
52:17:ff:62:1f:93:52:c3:74:7e:78:c3:b1:41:3a:a6:62:65:
e5:53:bb:3c:b3:8a:14:b5:06:32:20:3e:fe:12:65:a5:c0:75:
29:2d:b5:c6:82:2f:d2:9f:00:33:a2:25:16:4c:f3:4b:ba:04:
c9:f1:2f:4a:0d:1e:6f:e7:71:16:c0:fa:a0:8c:90:83:2b:92:
df:fb:36:a2:d2:97:fd:7c:02:35:af:02:dc:5c:85:1a:ed:b9:
57:d2:ba:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPg0k34SozbE9DdMX1ey6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjYwNDE3MDcwMDUwWhcNMjYwNDE4MDcwMDUwWjAzMTEwLwYDVQQD
Eyg2OTFkYWNiN2M4MGUxMTY2ZTlkMjMxM2QxYWEwZTRiZDQ2ZmNhZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB34y9vMnPxeO1YPbsdID06L+akZ
nWae1NyMV94fxU4XZRNLNzNVF77Dx+kClGae9uMCAaywMvOzAUS5qu+y0+CDG3Q+
YgvNc21amN8zAOhAaLZ4H49cgx0eDKvATMoTOZLbKjkLlOLGHBrj8mjoG/ZvYbUR
DuivP/FnDFpFzAv0ey/+iBLpHg4a0tceqREnkt40WwrChaJa3CeMb9Xh+NykMZH4
Nvs5ziZCUnIiScCNGyDwzOhxciRVkfsJKALVsttr4GAPTlr6bWPTzEEjcs1nZTPE
lUj9Y8URDIJ/Nr6uCu1fZUDXVem9QxqSg/blfpK44Vbp9Ah0mZgHhxDgXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkdrLfIDhFm6dIxPRqg5L1G/K8uMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqtELtcS
oNv4TCBNQe6+jPLiF0s13yn0v7eYLIUkLydbAIyw21IqPIfD874thw2ZVaoFAsSF
RaIq2kogyh9bxg+0V8tQUqAY//NhrE7gX0JCJv70Q3kxFh0+Uqu/G3um8ZIGZwJM
x2bRimTXV52H5B+8bwcoy3oYCpafCNGm7tmTQhQSdgAEtClBiwHO/h7dr0mdYyPL
RPaEbjKxZYEcLIEzUhf/Yh+TUsN0fnjDsUE6pmJl5VO7PLOKFLUGMiA+/hJlpcB1
KS21xoIv0p8AM6IlFkzzS7oEyfEvSg0eb+dxFsD6oIyQgyuS3/s2otKX/XwCNa8C
3FyFGu25V9K6bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:05 2026 by rpki-client