Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File: 26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier: JbiHBqGlX4i5hKhzeWZSBZM4+u6LJ8zzGlIy9r+38yk=
Subject key identifier: 39:17:E0:48:80:07:F8:F8:B6:FE:F7:41:24:42:2B:42:85:77:C4:1B
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 019D9B881AE2C9776FC2796F6D3163E2B16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number: 18CE
Signing time: Fri 17 Apr 2026 13:01:21 +0000
Manifest this update: Fri 17 Apr 2026 13:01:21 +0000
Manifest next update: Sat 18 Apr 2026 13:01:21 +0000
Files and hashes: 1: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: ZOzkxTmk9MF+wh8QZBPcV58S8cYUNnS3l3u5th9DdI4=)
2: 4IJKBLLcf574nRPV1X6-t9HD8MM.roa (hash: Wu4e9F97wqMZS5XnRmmcELznemadsbUgvs1t7TmxIxo=)
3: 8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa (hash: tVCSOcfP5D/IltKQq/VCjFNHxuz/aHy6IKMpOAq5EPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:1a:e2:c9:77:6f:c2:79:6f:6d:31:63:e2:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Apr 17 13:01:21 2026 GMT
Not After : Apr 18 13:01:21 2026 GMT
Subject: CN=3917e0488007f8f8b6fef74124422b428577c41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:68:2e:22:78:59:cb:dd:9e:d5:fb:c1:88:
db:e7:77:0c:e3:1f:4d:45:2b:24:2f:a6:72:4d:ec:
04:93:94:10:35:1d:d8:0c:34:03:2b:d5:fb:8f:d6:
da:37:6a:96:5b:7e:13:e5:c4:6f:d7:0d:7c:3a:39:
5c:52:36:1a:31:57:66:35:ae:0f:b4:1a:b1:21:ff:
b3:7d:5b:17:2e:08:e8:9e:3e:af:ee:8c:08:25:1b:
33:bf:88:f2:f0:43:1e:b5:0c:68:3b:ff:70:90:9e:
30:11:23:db:d6:ad:2c:84:d6:e4:d7:64:bf:52:40:
b9:58:8e:b4:37:d9:f4:a6:4b:25:50:41:a4:b0:fa:
50:13:e5:db:5a:b7:1a:60:b4:d3:ff:18:34:c7:4c:
99:66:56:90:ee:72:62:6b:21:d1:43:38:f9:f5:98:
3a:a8:08:0d:eb:b5:ee:fa:45:41:7d:6f:1d:3b:df:
5c:ec:6c:1c:d7:69:a8:1a:ee:00:77:14:8b:73:ad:
f3:cb:b8:d9:be:9f:f3:d4:0c:e9:1e:1b:8e:99:11:
1f:0b:83:23:dd:8b:59:5d:6e:f4:02:e4:80:83:3c:
dc:35:6b:ab:89:57:41:04:75:87:aa:10:6d:30:39:
49:01:12:e3:30:c2:0b:e3:b5:14:a6:0f:53:0c:94:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:E0:48:80:07:F8:F8:B6:FE:F7:41:24:42:2B:42:85:77:C4:1B
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f5:bf:ef:b9:3c:4d:3d:09:d5:97:9d:42:ab:71:97:50:4d:
84:c4:2a:4a:d0:6b:84:3e:b6:bd:da:9c:a6:e3:04:00:c4:a6:
b3:12:bf:ad:1d:d7:a7:84:81:3f:66:5a:52:e6:5b:6b:1e:32:
e1:79:ec:c1:50:ae:7c:a2:88:59:2d:0b:05:61:90:40:ed:4e:
a6:13:6a:1a:d7:f8:67:9c:00:87:43:bf:df:28:64:8a:68:e5:
ad:e3:be:9f:66:26:2f:28:8a:bb:64:68:48:8a:e0:ee:cb:96:
15:7d:5a:9d:9f:12:e8:fc:3c:9a:24:82:5b:b0:07:25:c3:c5:
89:23:6a:48:5d:55:d4:bf:ed:a2:41:af:c5:0d:43:7c:c3:13:
67:27:4a:7d:fd:bf:0c:ff:cf:ee:2a:f2:4c:d5:2a:92:83:4b:
a0:27:0f:bc:5d:b0:c3:0c:18:60:2f:86:b2:d1:9f:69:23:f7:
be:72:8a:8b:61:9c:cf:08:88:6d:31:03:37:68:66:25:61:ab:
4a:9e:de:0d:9a:08:f0:f4:73:18:17:8b:59:d9:81:fa:38:01:
69:4e:37:75:77:a7:1f:6c:a0:37:6d:1d:75:87:8a:fb:40:23:
e4:62:6c:08:65:fa:86:8d:1b:0f:b4:00:36:9a:75:59:f2:0e:
b5:d0:c9:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2biBriyXdvwnlvbTFj4rFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1
NWQ4ZGIwHhcNMjYwNDE3MTMwMTIxWhcNMjYwNDE4MTMwMTIxWjAzMTEwLwYDVQQD
EygzOTE3ZTA0ODgwMDdmOGY4YjZmZWY3NDEyNDQyMmI0Mjg1NzdjNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fxoLiJ4WcvdntX7wYjb53cM4x9N
RSskL6ZyTewEk5QQNR3YDDQDK9X7j9baN2qWW34T5cRv1w18OjlcUjYaMVdmNa4P
tBqxIf+zfVsXLgjonj6v7owIJRszv4jy8EMetQxoO/9wkJ4wESPb1q0shNbk12S/
UkC5WI60N9n0pkslUEGksPpQE+XbWrcaYLTT/xg0x0yZZlaQ7nJiayHRQzj59Zg6
qAgN67Xu+kVBfW8dO99c7Gwc12moGu4AdxSLc63zy7jZvp/z1AzpHhuOmREfC4Mj
3YtZXW70AuSAgzzcNWuriVdBBHWHqhBtMDlJARLjMMIL47UUpg9TDJSadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkX4EiAB/j4tv73QSRCK0KFd8QbMB8GA1UdIwQY
MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt
MTJiMmJjNTgwNTNhLzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh
LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/W/77k8
TT0J1ZedQqtxl1BNhMQqStBrhD62vdqcpuMEAMSmsxK/rR3Xp4SBP2ZaUuZbax4y
4XnswVCufKKIWS0LBWGQQO1OphNqGtf4Z5wAh0O/3yhkimjlreO+n2YmLyiKu2Ro
SIrg7suWFX1anZ8S6Pw8miSCW7AHJcPFiSNqSF1V1L/tokGvxQ1DfMMTZydKff2/
DP/P7iryTNUqkoNLoCcPvF2wwwwYYC+GstGfaSP3vnKKi2GczwiIbTEDN2hmJWGr
Sp7eDZoI8PRzGBeLWdmB+jgBaU43dXenH2ygN20ddYeK+0Aj5GJsCGX6ho0bD7QA
Npp1WfIOtdDJtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:08 2026 by rpki-client