Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier: LC5rULRvGGxshf/aEaSSZEPRlDEHoS+c9EU4EovYgKM=
Subject key identifier: 59:A9:8C:E9:04:96:5F:8A:55:9C:D0:34:F3:EB:28:F9:F5:24:F2:EA
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019D9963077A53C1C83B9F58E20D9403B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number: 11E1
Signing time: Fri 17 Apr 2026 03:01:37 +0000
Manifest this update: Fri 17 Apr 2026 03:01:37 +0000
Manifest next update: Sat 18 Apr 2026 03:01:37 +0000
Files and hashes: 1: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: ByiJvs7uj++MpHEcIScEyhXgvDILRHxGLLuDebwlcWc=)
2: wXYslh9daqxVdpjLENOri_Gkabc.roa (hash: 9LvmPHXeSyF1LLUJyo35Xz9ELuGmAcM1NO5fTifvClg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:07:7a:53:c1:c8:3b:9f:58:e2:0d:94:03:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Apr 17 03:01:37 2026 GMT
Not After : Apr 18 03:01:37 2026 GMT
Subject: CN=59a98ce904965f8a559cd034f3eb28f9f524f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:7f:c0:a1:2e:e5:ae:63:57:03:44:b1:7b:
47:b3:87:bd:a3:95:53:c3:18:5b:cc:c4:92:10:43:
f5:8a:4d:86:72:a6:18:16:28:9e:e9:7e:c0:8e:6e:
dd:84:ab:38:75:ed:7d:7f:84:11:d8:88:38:f0:c1:
28:7b:00:b3:11:d4:4e:4b:5d:c8:72:6f:66:82:47:
1b:00:23:d9:ec:7d:bd:04:e5:f2:7b:b5:0e:a0:73:
0b:73:b5:13:b4:95:fe:d8:da:7b:bd:ef:9c:3d:8c:
23:78:40:d8:71:be:65:2c:af:60:df:55:68:d8:e8:
24:58:04:3c:0d:fc:6c:9d:bd:88:91:d3:1f:40:5c:
38:3d:cc:0a:0c:64:aa:24:6a:48:36:c2:98:10:02:
84:89:5a:e3:e7:02:99:01:ae:6f:c7:a8:d4:91:d2:
be:16:b2:ce:fc:19:b3:44:64:52:8f:10:7c:48:af:
ce:d0:7d:62:3d:85:de:85:06:45:39:8a:b5:69:54:
bd:7b:03:4a:28:e2:a6:82:17:70:bc:2c:12:2b:3a:
06:42:f4:d0:d3:cf:c5:69:dd:30:d6:f2:6b:12:9e:
c0:b3:5c:8c:ce:f8:29:56:8e:06:f1:a1:9d:bd:9f:
e1:43:0f:ac:b5:fd:bb:4c:65:e1:50:4b:65:cd:6c:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:8C:E9:04:96:5F:8A:55:9C:D0:34:F3:EB:28:F9:F5:24:F2:EA
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ab:9a:1c:12:0f:45:a1:85:48:58:c1:3f:42:69:fb:3c:a6:
d9:25:25:d2:f7:39:d7:0b:d8:f7:c1:44:44:b4:ce:ed:d2:cd:
4f:64:a6:be:22:b6:44:9f:36:00:8d:97:51:e9:50:51:b3:76:
6f:0b:06:e5:10:3d:cd:0d:49:da:37:29:14:50:50:30:82:7b:
fb:f1:21:bc:c6:a7:bb:75:db:c9:2e:41:b5:9a:e7:22:0d:3b:
8d:8a:90:af:1f:d0:df:f2:14:a0:d5:69:a9:79:45:7c:ab:f5:
da:3a:7a:12:8f:66:6f:1b:b7:bc:66:1f:bd:f4:30:03:36:a5:
6a:09:30:de:d5:5e:46:f6:f1:f0:48:12:30:55:b9:e4:85:cf:
c3:76:d3:85:f5:cf:fa:62:35:96:cc:9a:50:48:af:18:03:87:
eb:8e:26:8c:11:c9:c3:49:98:22:53:8c:6c:a8:9d:bc:e3:72:
6b:71:8f:3d:b4:59:25:80:f6:0b:0d:0d:b4:87:5c:85:98:c7:
a8:e4:d5:f1:35:0d:08:5a:c0:e2:31:3c:03:65:06:b7:2f:14:
05:27:be:01:1e:90:e0:0d:f4:fa:71:be:79:ff:7c:2b:f5:11:
ae:51:5b:dc:ae:b3:35:5c:19:b9:5f:e2:a9:d6:fe:9a:f3:8a:
5e:81:4e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYwd6U8HIO59Y4g2UA7ggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi
ODViZjMwHhcNMjYwNDE3MDMwMTM3WhcNMjYwNDE4MDMwMTM3WjAzMTEwLwYDVQQD
Eyg1OWE5OGNlOTA0OTY1ZjhhNTU5Y2QwMzRmM2ViMjhmOWY1MjRmMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xh/wKEu5a5jVwNEsXtHs4e9o5VT
wxhbzMSSEEP1ik2GcqYYFiie6X7Ajm7dhKs4de19f4QR2Ig48MEoewCzEdROS13I
cm9mgkcbACPZ7H29BOXye7UOoHMLc7UTtJX+2Np7ve+cPYwjeEDYcb5lLK9g31Vo
2OgkWAQ8Dfxsnb2IkdMfQFw4PcwKDGSqJGpINsKYEAKEiVrj5wKZAa5vx6jUkdK+
FrLO/BmzRGRSjxB8SK/O0H1iPYXehQZFOYq1aVS9ewNKKOKmghdwvCwSKzoGQvTQ
08/Fad0w1vJrEp7As1yMzvgpVo4G8aGdvZ/hQw+stf27TGXhUEtlzWwlCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmpjOkEll+KVZzQNPPrKPn1JPLqMB8GA1UdIwQY
MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt
ODk4OThiMmVkMTVlLzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl
LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKuaHBIP
RaGFSFjBP0Jp+zym2SUl0vc51wvY98FERLTO7dLNT2SmviK2RJ82AI2XUelQUbN2
bwsG5RA9zQ1J2jcpFFBQMIJ7+/EhvManu3XbyS5BtZrnIg07jYqQrx/Q3/IUoNVp
qXlFfKv12jp6Eo9mbxu3vGYfvfQwAzalagkw3tVeRvbx8EgSMFW55IXPw3bThfXP
+mI1lsyaUEivGAOH644mjBHJw0mYIlOMbKidvONya3GPPbRZJYD2Cw0NtIdchZjH
qOTV8TUNCFrA4jE8A2UGty8UBSe+AR6Q4A30+nG+ef98K/URrlFb3K6zNVwZuV/i
qdb+mvOKXoFONg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:35 2026 by rpki-client