Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: aKNqgC9kYYGDvhW730rSZBMszZNqlYZrJ78rXi3m4a0=
Subject key identifier: E9:14:83:39:79:71:D6:92:28:D0:B3:61:19:7D:0C:FB:5B:27:28:FB
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019D98BDDDF12245F0283676CEA60621AEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 07D9
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: QsSMfG7GxNvzKGWJJfjhmhC/abqRPVlKJQSy7HimiBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:dd:f1:22:45:f0:28:36:76:ce:a6:06:21:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=e91483397971d69228d0b361197d0cfb5b2728fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:bb:05:78:6d:90:17:05:06:17:51:3e:7f:
0d:1d:12:a3:7d:21:37:41:77:59:15:1e:26:9c:b4:
d7:d6:82:97:1f:f1:5a:48:2f:a6:6f:29:ea:0d:98:
95:06:3e:3a:05:7a:02:03:4f:6b:40:4d:60:27:8d:
52:d9:a2:db:8a:73:f2:b2:b0:00:a7:c9:38:54:d7:
28:14:d1:95:64:a1:e0:ac:37:ca:ba:47:ba:8b:00:
bd:4c:35:98:21:ed:34:8d:29:53:c8:85:60:14:13:
9a:04:52:eb:e6:63:ab:2f:6a:6e:09:cc:1f:e8:fd:
0e:b8:2c:d5:7d:80:af:2f:3f:18:11:90:8f:09:4f:
bc:f5:14:95:bd:78:05:a2:01:79:ce:ba:ec:ff:15:
49:51:12:6c:1a:16:aa:5b:97:b7:45:8a:52:50:13:
00:ce:94:90:a3:a2:c9:6d:b4:34:94:b7:14:07:7d:
ac:e8:20:e3:96:15:18:f2:ce:57:02:6c:16:7b:0a:
e5:b5:90:21:73:c2:ea:cc:ca:44:20:45:8f:c1:1f:
c4:7c:ac:64:52:7a:0d:50:6f:f8:78:7e:6f:0b:b7:
70:de:df:fd:9c:97:ac:0c:17:24:bf:8f:34:79:b0:
8f:1f:c0:43:9f:fd:82:3c:e3:ab:d7:66:19:23:a2:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:83:39:79:71:D6:92:28:D0:B3:61:19:7D:0C:FB:5B:27:28:FB
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:b7:54:22:01:7b:16:51:ef:fd:82:7c:87:f7:3f:a6:70:
98:e7:c9:2a:c4:44:73:c7:5e:61:5e:c8:2b:36:d2:c3:35:81:
3b:95:66:d4:74:5a:23:59:27:2a:a4:0f:4d:d8:83:ab:12:72:
bc:e2:d6:91:1a:bd:86:53:f6:ef:36:72:87:d1:36:de:10:ad:
80:ba:8e:b8:c2:82:21:f1:e7:82:80:ba:33:8e:cb:63:5f:52:
20:18:fa:42:99:de:82:a2:29:8f:ff:d9:72:84:b2:20:b7:14:
1b:3b:12:1f:6e:78:02:2a:b1:6a:4f:32:19:d1:b2:6b:66:ff:
65:ae:99:d5:ae:9d:da:f1:db:6c:1f:42:b5:52:89:41:5d:31:
b4:f2:d6:5c:ff:74:b0:40:6b:e8:35:7a:ee:1d:61:1d:16:26:
c5:60:ba:40:36:01:7a:3a:d4:c3:26:12:08:83:29:17:03:ff:
19:d1:c3:2b:6f:6e:fd:f9:70:78:f8:86:92:02:50:91:71:1c:
87:c1:ae:dd:97:bb:ec:84:59:df:99:7d:e0:c1:6f:2c:a3:03:
97:70:4f:38:ca:c6:6a:fc:83:ab:66:02:9b:c5:8e:1c:d3:9a:
42:6c:07:a2:76:09:79:05:a1:8b:07:54:36:78:13:50:c2:6f:
75:15:d5:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvd3xIkXwKDZ2zqYGIa6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjYwNDE3MDAwMTEyWhcNMjYwNDE4MDAwMTEyWjAzMTEwLwYDVQQD
EyhlOTE0ODMzOTc5NzFkNjkyMjhkMGIzNjExOTdkMGNmYjViMjcyOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ay7BXhtkBcFBhdRPn8NHRKjfSE3
QXdZFR4mnLTX1oKXH/FaSC+mbynqDZiVBj46BXoCA09rQE1gJ41S2aLbinPysrAA
p8k4VNcoFNGVZKHgrDfKuke6iwC9TDWYIe00jSlTyIVgFBOaBFLr5mOrL2puCcwf
6P0OuCzVfYCvLz8YEZCPCU+89RSVvXgFogF5zrrs/xVJURJsGhaqW5e3RYpSUBMA
zpSQo6LJbbQ0lLcUB32s6CDjlhUY8s5XAmwWewrltZAhc8LqzMpEIEWPwR/EfKxk
UnoNUG/4eH5vC7dw3t/9nJesDBckv480ebCPH8BDn/2CPOOr12YZI6LhnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkUgzl5cdaSKNCzYRl9DPtbJyj7MB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAora3VCIB
exZR7/2CfIf3P6ZwmOfJKsREc8deYV7IKzbSwzWBO5Vm1HRaI1knKqQPTdiDqxJy
vOLWkRq9hlP27zZyh9E23hCtgLqOuMKCIfHngoC6M47LY19SIBj6QpnegqIpj//Z
coSyILcUGzsSH254Aiqxak8yGdGya2b/Za6Z1a6d2vHbbB9CtVKJQV0xtPLWXP90
sEBr6DV67h1hHRYmxWC6QDYBejrUwyYSCIMpFwP/GdHDK29u/flwePiGkgJQkXEc
h8Gu3Ze77IRZ35l94MFvLKMDl3BPOMrGavyDq2YCm8WOHNOaQmwHonYJeQWhiwdU
NngTUMJvdRXVYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:07 2026 by rpki-client