Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: nmS2Wz/QyX37HOocvNkHOE+Otk5crlUdH+fbSMD7E5k=
Subject key identifier: 4B:8D:53:8A:1E:F8:FE:FF:16:06:42:6A:A9:4B:50:79:8A:FD:1D:DF
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019D99990174FD2918FA395CE0B749472190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0D96
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: gfS/9V319oXShTtoHWakhxPOsqz3gXy+6RB8728W+7o=)
2: PnfxL11O3EjH9h0EH3Rg7luqnAM.roa (hash: i4lQXSpeif5iY7JiCTfcDMb/7WzWvaV3TLIqruxq13Q=)
3: x6wY1hh1UMR03dRTbKZ1rvUylzo.roa (hash: jSu5cUSFLGmQIwJTQdJ25XCFgFKf8LZSMzXzmSmg5w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:01:74:fd:29:18:fa:39:5c:e0:b7:49:47:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=4b8d538a1ef8feff1606426aa94b50798afd1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:25:1a:11:fd:ee:4f:6b:e1:71:f2:1a:8a:
0c:9b:de:bc:68:a3:59:fa:35:40:a2:7e:b3:2d:93:
51:f0:45:65:46:6c:c6:06:c5:51:d0:fb:5f:23:da:
65:0b:29:fa:70:d6:5e:0d:b7:80:64:28:0e:dc:6f:
6b:78:50:86:59:4c:16:83:da:94:27:a5:98:2d:5e:
59:cf:55:b5:af:7c:06:3c:17:56:fe:f8:bf:d4:92:
2a:f0:bf:f7:ae:f9:09:3b:bc:19:5d:48:44:c1:2c:
97:2b:f2:0a:84:df:8a:2f:81:d2:0f:49:17:ee:46:
c9:42:fc:4f:33:93:a8:49:1a:0b:bb:24:1f:0d:8e:
e5:18:db:f4:7e:e4:8d:46:f3:10:63:2b:52:5b:d1:
8a:20:7e:f8:38:9e:cf:22:cd:b6:02:31:21:62:9b:
93:a4:95:db:3a:44:7f:9e:82:ca:fd:e3:3e:ed:2d:
75:0c:21:2f:ea:10:32:5e:95:34:2f:ec:7e:74:11:
de:69:8c:b0:6e:b6:9f:27:f7:cd:f7:80:8f:21:a8:
e6:ad:6d:3b:3d:a5:77:bb:96:42:c1:5f:63:61:6a:
ae:03:b2:59:16:56:fb:92:20:2a:ce:a1:6d:40:71:
d0:e9:cd:0b:d6:a0:31:0b:eb:a8:22:f0:eb:c9:76:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:53:8A:1E:F8:FE:FF:16:06:42:6A:A9:4B:50:79:8A:FD:1D:DF
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:78:c4:69:ad:0f:ba:1b:55:98:dd:d7:a6:9e:71:eb:a4:
7c:9c:ef:14:c1:32:ef:bd:cd:99:39:2e:a3:88:b5:c5:44:d5:
96:78:91:c9:59:52:fd:3d:1f:db:15:4b:27:8a:b0:3d:12:b1:
02:30:e4:4f:42:fa:fc:17:16:11:82:8d:97:70:a3:7b:09:f9:
26:3b:8d:cc:88:25:ec:ab:bb:c4:b3:8c:88:f6:3d:e4:85:fc:
72:df:7e:68:e5:52:6c:44:9f:e3:a9:b9:da:11:79:fd:f7:fc:
2c:d4:22:10:63:b1:23:51:1a:62:7e:a2:7a:1b:a7:98:07:73:
18:13:83:92:a6:a8:03:e2:8d:1b:32:17:1e:39:a5:06:fc:64:
f9:c0:9f:1c:1f:71:c8:7d:06:2a:06:49:e1:93:b3:42:21:da:
f2:ee:21:11:07:31:72:6d:13:0f:bc:7c:a5:be:c5:77:fd:f2:
c9:56:69:a6:b9:e4:62:1a:fb:ca:03:1e:f2:32:28:f9:d4:f6:
c2:c2:3f:d4:c0:e7:c4:84:a5:49:66:07:6c:11:e3:54:34:e6:
65:34:f3:25:25:d8:fa:fe:b9:90:68:82:5f:e4:5e:73:30:0c:
cb:f6:b3:d9:8c:b9:c4:3d:b2:2a:a7:84:5a:d7:6d:1a:b0:3a:
2d:de:c2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQF0/SkY+jlc4LdJRyGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjYwNDE3MDQwMDM0WhcNMjYwNDE4MDQwMDM0WjAzMTEwLwYDVQQD
Eyg0YjhkNTM4YTFlZjhmZWZmMTYwNjQyNmFhOTRiNTA3OThhZmQxZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA8lGhH97k9r4XHyGooMm968aKNZ
+jVAon6zLZNR8EVlRmzGBsVR0PtfI9plCyn6cNZeDbeAZCgO3G9reFCGWUwWg9qU
J6WYLV5Zz1W1r3wGPBdW/vi/1JIq8L/3rvkJO7wZXUhEwSyXK/IKhN+KL4HSD0kX
7kbJQvxPM5OoSRoLuyQfDY7lGNv0fuSNRvMQYytSW9GKIH74OJ7PIs22AjEhYpuT
pJXbOkR/noLK/eM+7S11DCEv6hAyXpU0L+x+dBHeaYywbrafJ/fN94CPIajmrW07
PaV3u5ZCwV9jYWquA7JZFlb7kiAqzqFtQHHQ6c0L1qAxC+uoIvDryXbrFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNU4oe+P7/FgZCaqlLUHmK/R3fMB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1F4xGmt
D7obVZjd16aeceukfJzvFMEy773NmTkuo4i1xUTVlniRyVlS/T0f2xVLJ4qwPRKx
AjDkT0L6/BcWEYKNl3Cjewn5JjuNzIgl7Ku7xLOMiPY95IX8ct9+aOVSbESf46m5
2hF5/ff8LNQiEGOxI1EaYn6iehunmAdzGBODkqaoA+KNGzIXHjmlBvxk+cCfHB9x
yH0GKgZJ4ZOzQiHa8u4hEQcxcm0TD7x8pb7Fd/3yyVZpprnkYhr7ygMe8jIo+dT2
wsI/1MDnxISlSWYHbBHjVDTmZTTzJSXY+v65kGiCX+ReczAMy/az2Yy5xD2yKqeE
WtdtGrA6Ld7CGw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:15:07 2026 by rpki-client