Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: PWzl4vTTpsqqL3B+uImuqWxkDmkIx/Gub39w/yPhNxg=
Subject key identifier: F8:96:D4:50:88:4F:17:40:9C:76:69:29:46:04:74:5E:DF:98:73:FB
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 019D99CFF1BDDB685C1999EAB83384CD1E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 15C1
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa (hash: srt7eXLyW2rW7dmcsFP38hUiNjRVW1d3X72WjScYtng=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: x6KViBoCYtkpJxhw5vCgKIub1c4NT55XkSveuuECEqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f1:bd:db:68:5c:19:99:ea:b8:33:84:cd:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=f896d450884f17409c7669294604745edf9873fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:e0:47:36:aa:37:c1:e5:05:ed:fb:a6:2f:
84:64:8a:b6:95:44:af:fd:94:8d:4f:a5:5e:dd:fe:
80:74:fc:7d:c3:59:d2:c1:9a:20:8e:83:2e:4e:3e:
6b:32:15:48:f3:61:42:c8:a3:27:ae:8d:ce:8b:1c:
8d:77:27:04:f1:ea:b4:58:e2:3f:12:90:04:b2:73:
ef:a5:a8:5e:7f:2d:89:98:b2:fc:5a:d8:9b:eb:dd:
c1:34:7e:3f:c6:7a:b1:be:ec:d7:c4:10:73:f3:69:
c4:e6:e6:64:16:80:c9:a5:d1:61:7c:bb:25:6f:fe:
b1:e4:8d:bd:a6:b3:2d:07:62:12:80:f7:33:e5:79:
4f:f8:2a:3e:fc:d0:71:8e:02:ec:b8:65:c7:bc:a4:
02:fe:f9:18:b0:0a:06:93:06:e8:ee:5b:40:74:0c:
8e:bc:42:c1:43:96:87:d3:ec:9d:bf:0c:e5:60:bb:
f5:30:06:8c:8d:dc:fa:e0:99:ea:4f:b0:3e:65:4e:
94:63:e5:ee:09:d1:9b:a5:81:e2:07:43:5e:1c:c6:
c8:bd:dd:d8:7f:88:57:bd:f3:ff:4f:d2:f0:9d:e7:
f0:c6:33:8b:e4:96:a7:29:2e:c8:82:25:89:45:d5:
75:28:ff:42:ec:df:14:a4:d8:72:8b:38:ec:86:1e:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:D4:50:88:4F:17:40:9C:76:69:29:46:04:74:5E:DF:98:73:FB
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:2f:d1:98:ac:d2:38:47:96:b3:f0:16:58:e0:1f:ca:e7:
e4:2a:3d:09:d4:83:c9:ba:9e:dc:a5:70:70:4e:ca:d8:74:c9:
7a:ea:86:32:58:9b:a3:3e:83:20:67:1f:bf:7a:99:26:9b:03:
40:3f:30:ba:e9:1d:af:3c:b4:b5:0c:8c:f7:dd:d2:de:df:02:
5f:b1:04:03:42:c1:5b:79:ff:cd:04:87:7f:99:36:6e:b1:39:
65:11:ba:53:57:7b:2c:bc:0a:4f:e2:c9:06:97:07:c0:fb:d8:
53:89:fe:f5:84:bd:09:3d:0e:f7:2c:d3:62:b1:29:3a:d7:22:
c0:d3:19:fa:15:c7:dd:a3:75:05:51:65:3c:bf:03:3c:be:83:
4b:15:44:8a:1f:52:c4:74:05:18:dc:c6:cd:c7:ed:35:b8:22:
ab:83:fd:f2:44:64:c2:ac:51:21:aa:71:fb:73:cd:b7:57:61:
18:4f:19:8e:2e:6d:c9:83:12:2c:28:60:bf:8f:60:be:d5:d1:
53:8b:bc:f5:48:4b:5b:dc:ca:7c:e2:8a:b6:eb:b4:db:a8:99:
21:1d:cc:59:54:8d:40:c6:d7:b2:28:2d:4e:c4:82:6d:19:40:
84:20:af:cc:89:05:69:82:01:7f:f0:fb:b3:61:de:c9:57:ad:
c6:40:c3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/G922hcGZnquDOEzR5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx
MDc4YjYwHhcNMjYwNDE3MDUwMDM1WhcNMjYwNDE4MDUwMDM1WjAzMTEwLwYDVQQD
EyhmODk2ZDQ1MDg4NGYxNzQwOWM3NjY5Mjk0NjA0NzQ1ZWRmOTg3M2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxijgRzaqN8HlBe37pi+EZIq2lUSv
/ZSNT6Ve3f6AdPx9w1nSwZogjoMuTj5rMhVI82FCyKMnro3OixyNdycE8eq0WOI/
EpAEsnPvpahefy2JmLL8Wtib693BNH4/xnqxvuzXxBBz82nE5uZkFoDJpdFhfLsl
b/6x5I29prMtB2ISgPcz5XlP+Co+/NBxjgLsuGXHvKQC/vkYsAoGkwbo7ltAdAyO
vELBQ5aH0+ydvwzlYLv1MAaMjdz64JnqT7A+ZU6UY+XuCdGbpYHiB0NeHMbIvd3Y
f4hXvfP/T9LwnefwxjOL5JanKS7IgiWJRdV1KP9C7N8UpNhyizjshh52jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiW1FCITxdAnHZpKUYEdF7fmHP7MB8GA1UdIwQY
MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt
MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0
LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEov0Zis
0jhHlrPwFljgH8rn5Co9CdSDybqe3KVwcE7K2HTJeuqGMliboz6DIGcfv3qZJpsD
QD8wuukdrzy0tQyM993S3t8CX7EEA0LBW3n/zQSHf5k2brE5ZRG6U1d7LLwKT+LJ
BpcHwPvYU4n+9YS9CT0O9yzTYrEpOtciwNMZ+hXH3aN1BVFlPL8DPL6DSxVEih9S
xHQFGNzGzcftNbgiq4P98kRkwqxRIapx+3PNt1dhGE8Zji5tyYMSLChgv49gvtXR
U4u89UhLW9zKfOKKtuu026iZIR3MWVSNQMbXsigtTsSCbRlAhCCvzIkFaYIBf/D7
s2HeyVetxkDDug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:26 2026 by rpki-client