Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: IirpVay0D9A85Fyt3D7zEIXcWwcuviCRniI9Nq5kqXQ=
Subject key identifier: F0:49:CF:D3:80:56:0D:D4:FE:3C:7A:50:A3:40:DA:C8:1D:76:86:F4
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 019D9BF528C2EEAF6BA68E788F5DC8B49AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 15:00:28 +0000
Manifest this update: Fri 17 Apr 2026 15:00:28 +0000
Manifest next update: Sat 18 Apr 2026 15:00:28 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: zo8GjOnKbet+UQo+2Gi/Z7NJVEQIe7yNLokf1s7roEk=)
2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:28:c2:ee:af:6b:a6:8e:78:8f:5d:c8:b4:9a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Apr 17 15:00:28 2026 GMT
Not After : Apr 18 15:00:28 2026 GMT
Subject: CN=f049cfd380560dd4fe3c7a50a340dac81d7686f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:88:54:42:8d:8b:d4:20:07:ed:e9:33:4e:
c3:ec:f1:0b:72:53:f9:7a:14:fa:0e:33:0b:2d:fa:
bb:fb:bd:17:34:8b:6a:56:8b:5f:b2:27:63:7f:de:
f1:77:42:2f:7b:cb:70:85:ac:9e:a9:94:47:35:b8:
8d:c9:b5:28:9d:60:26:15:7c:c4:3b:95:98:17:fa:
8c:cf:7a:00:3b:94:6b:5e:ab:d7:12:28:a2:5d:cb:
bf:c5:6a:b1:8e:56:f5:70:bb:b5:66:17:ab:09:4c:
6a:80:3e:01:ce:36:49:57:11:56:49:74:18:f1:ce:
60:06:bd:51:d8:ea:c6:21:40:bb:be:11:b6:f4:30:
7a:6d:06:b6:85:8f:26:72:14:d2:03:d0:23:62:eb:
97:d8:6e:48:7c:87:1b:c2:5f:30:46:80:b7:6d:50:
68:1b:b2:e4:4c:c3:ef:2a:a0:b1:21:96:79:28:8f:
5c:19:b5:7f:cc:bf:1a:b7:6c:41:a1:69:00:bc:c0:
76:5e:07:cb:09:cb:e0:44:5d:fb:ef:45:bd:f1:22:
5f:ba:7c:6e:08:ff:3e:63:c7:f8:8c:80:55:99:f0:
e0:20:65:67:87:eb:db:46:ad:40:62:4d:3e:49:75:
df:3a:4a:8d:af:15:05:3f:fc:2b:9c:6d:9b:bb:80:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:49:CF:D3:80:56:0D:D4:FE:3C:7A:50:A3:40:DA:C8:1D:76:86:F4
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2e:cf:83:86:e8:71:84:52:05:2c:01:7c:1f:a4:33:92:1a:
2e:98:7c:ae:90:5a:d5:9d:93:07:99:ae:b3:d8:ff:04:db:c9:
d2:c5:db:88:9f:18:1a:62:cc:14:6e:4c:9d:94:f0:3f:eb:8b:
94:44:2e:8f:67:dd:5b:39:19:54:3d:e8:b1:47:49:05:e9:d7:
f2:2e:4c:a9:1f:bf:00:00:58:1e:ce:49:21:77:17:b8:43:4b:
be:37:19:b7:e2:c4:22:26:a0:be:c9:02:f7:d2:f1:71:d9:7b:
ab:bf:1f:05:44:71:81:b1:24:c5:52:7d:f5:fd:1c:60:9f:f8:
0d:af:de:45:ec:b1:d8:23:46:56:91:f5:71:2c:cc:74:58:16:
3b:63:21:5b:c4:7f:fe:6d:3b:44:98:c0:eb:eb:9e:d5:ab:66:
21:6d:69:97:b1:1e:9d:ef:d8:b6:ff:c6:a3:c1:20:69:ea:95:
56:80:aa:79:50:27:4f:36:96:a9:4a:c5:be:18:77:92:26:ca:
e8:bd:58:93:3e:77:97:eb:b2:7d:40:e8:6c:87:74:ef:48:de:
5f:eb:60:31:dc:ea:d3:84:8c:59:79:36:94:82:3e:a3:08:0e:
fc:38:53:e3:0e:ce:e4:40:d0:44:3b:38:9e:11:72:94:8b:12:
fd:96:01:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9SjC7q9rpo54j13ItJrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTZjYzU2YTk5NTUwN2I0ZmE4N2M2NDkwNDQyZjA2YjYx
ODY2ODcwHhcNMjYwNDE3MTUwMDI4WhcNMjYwNDE4MTUwMDI4WjAzMTEwLwYDVQQD
EyhmMDQ5Y2ZkMzgwNTYwZGQ0ZmUzYzdhNTBhMzQwZGFjODFkNzY4NmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowmIVEKNi9QgB+3pM07D7PELclP5
ehT6DjMLLfq7+70XNItqVotfsidjf97xd0Ive8twhayeqZRHNbiNybUonWAmFXzE
O5WYF/qMz3oAO5RrXqvXEiiiXcu/xWqxjlb1cLu1ZherCUxqgD4BzjZJVxFWSXQY
8c5gBr1R2OrGIUC7vhG29DB6bQa2hY8mchTSA9AjYuuX2G5IfIcbwl8wRoC3bVBo
G7LkTMPvKqCxIZZ5KI9cGbV/zL8at2xBoWkAvMB2XgfLCcvgRF3770W98SJfunxu
CP8+Y8f4jIBVmfDgIGVnh+vbRq1AYk0+SXXfOkqNrxUFP/wrnG2bu4CXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBJz9OAVg3U/jx6UKNA2sgddob0MB8GA1UdIwQY
MBaAFNAWzFaplVB7T6h8ZJBELwa2GGaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDAzMDAtNzRlZS00Njc3LWFkNjIt
YzI0YjdkYjIwZGU3LzEvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wZDAzMDAtNzRlZS00Njc3LWFkNjItYzI0YjdkYjIwZGU3
LzEvMEJiTVZxbVZVSHRQcUh4a2tFUXZCcllZWm9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmC7Pg4bo
cYRSBSwBfB+kM5IaLph8rpBa1Z2TB5mus9j/BNvJ0sXbiJ8YGmLMFG5MnZTwP+uL
lEQuj2fdWzkZVD3osUdJBenX8i5MqR+/AABYHs5JIXcXuENLvjcZt+LEIiagvskC
99Lxcdl7q78fBURxgbEkxVJ99f0cYJ/4Da/eReyx2CNGVpH1cSzMdFgWO2MhW8R/
/m07RJjA6+ue1atmIW1pl7Eene/Ytv/Go8EgaeqVVoCqeVAnTzaWqUrFvhh3kibK
6L1Ykz53l+uyfUDobId070jeX+tgMdzq04SMWXk2lII+owgO/DhT4w7O5EDQRDs4
nhFylIsS/ZYBrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:53 2026 by rpki-client