Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier: q6jPmGm8jpJQx6D+PFmTaNLW+iK8TbV0hyo+du9z6cQ=
Subject key identifier: B6:8C:8C:64:56:5C:FC:5B:6F:C5:A7:EB:12:7E:89:5B:68:8C:3E:4B
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 019D9B875CDD30BE83F62FD36E84B6FE78C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number: 17D9
Signing time: Fri 17 Apr 2026 13:00:32 +0000
Manifest this update: Fri 17 Apr 2026 13:00:32 +0000
Manifest next update: Sat 18 Apr 2026 13:00:32 +0000
Files and hashes: 1: 832xdcyaMQ6PQMu-wsVkkpXVYxo.roa (hash: nHOliUKQ6iyBnB9SWzQjh04ItWv0KdS+AY354/7+P9s=)
2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: YskO4i07oVTY+subNs/1UosgRYNBVTUVgjFRiNgrNew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:5c:dd:30:be:83:f6:2f:d3:6e:84:b6:fe:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Apr 17 13:00:32 2026 GMT
Not After : Apr 18 13:00:32 2026 GMT
Subject: CN=b68c8c64565cfc5b6fc5a7eb127e895b688c3e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:d6:24:17:13:0b:27:30:52:16:52:c8:c3:
42:a2:ba:16:c2:3c:dd:da:cb:c4:56:d5:4a:28:41:
50:e8:04:25:b1:5a:43:9a:3a:f1:90:98:d6:60:bc:
25:24:a5:ff:12:2b:68:fe:74:e3:d0:0b:17:36:b5:
c6:4c:b4:62:a0:88:31:f9:08:b1:39:1c:52:4f:3f:
39:ef:92:53:3e:71:dd:85:96:6e:ee:9e:11:34:13:
25:fb:b1:a5:9e:bf:5e:b7:7d:0b:72:c1:6c:25:72:
49:f6:af:54:b6:6c:9d:72:eb:a4:5a:a4:43:09:a7:
f1:1e:64:b5:37:59:72:7e:ed:be:0f:f2:ec:f0:96:
8d:70:f0:85:13:79:7c:47:d1:01:e9:58:36:1c:62:
43:04:59:97:7f:ad:3d:6d:0c:31:73:97:1b:c5:e9:
3c:af:cc:77:b8:31:f4:0d:e3:6c:56:2d:b3:c8:73:
00:a8:ff:c2:da:38:16:a9:37:37:9b:92:f2:5f:c7:
6b:1e:28:04:2b:97:90:28:2c:fb:7e:5a:a5:aa:3c:
8b:a3:db:34:ce:52:79:b3:f5:51:e5:52:90:3c:db:
9d:ac:5b:4e:cd:0d:8a:32:69:7e:25:39:c1:49:4b:
c6:b4:b6:1c:6b:3c:d8:7c:eb:0e:c7:00:37:e1:69:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:8C:64:56:5C:FC:5B:6F:C5:A7:EB:12:7E:89:5B:68:8C:3E:4B
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9d:63:ca:8d:0a:0d:01:19:35:11:a1:c8:2f:e0:db:3a:4a:
9f:1e:3e:20:26:e6:c9:c0:3b:96:6b:91:71:a6:30:6e:96:6c:
68:f7:b1:39:3d:f5:15:df:33:af:4c:b4:7e:15:ac:08:33:33:
b0:62:0b:39:30:86:dc:46:19:08:00:28:b7:d6:f4:d7:5f:cf:
8d:6b:bf:a6:f5:32:50:9c:b4:c9:a6:df:90:9b:7d:b7:53:f5:
7c:c7:5c:36:f8:5e:c9:3c:d8:86:1f:23:50:33:aa:2c:e7:e3:
48:e9:1b:da:1f:17:4b:67:62:d1:54:cd:d2:5c:02:a4:f4:79:
06:43:6f:52:5f:f9:f7:63:67:cd:c8:19:5d:26:ae:fb:6e:92:
0d:4b:80:08:7e:a3:39:36:3b:24:20:d1:af:e1:f9:dd:74:cb:
36:72:8a:e9:63:b2:0d:7c:0c:76:60:e0:e0:b6:13:83:e5:91:
8f:2a:a9:ae:49:44:ff:da:02:9c:7c:ff:cf:74:ef:c2:a4:10:
40:59:ac:a3:8d:81:95:ca:55:1c:28:22:d1:18:28:e1:18:98:
3b:dc:06:12:36:d7:95:d6:1d:ef:f0:f1:54:98:3d:f6:e4:24:
bb:32:2c:4c:7d:51:08:66:4b:6f:c7:02:cc:6e:4a:c3:21:89:
3c:c5:71:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh1zdML6D9i/TboS2/njIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWVmMmFiM2YyZTlkOWFjMDFmNzI3ZjczMGFmN2RmMWQw
NDE4MGYwHhcNMjYwNDE3MTMwMDMyWhcNMjYwNDE4MTMwMDMyWjAzMTEwLwYDVQQD
EyhiNjhjOGM2NDU2NWNmYzViNmZjNWE3ZWIxMjdlODk1YjY4OGMzZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jXWJBcTCycwUhZSyMNCoroWwjzd
2svEVtVKKEFQ6AQlsVpDmjrxkJjWYLwlJKX/Eito/nTj0AsXNrXGTLRioIgx+Qix
ORxSTz8575JTPnHdhZZu7p4RNBMl+7Glnr9et30LcsFsJXJJ9q9UtmydcuukWqRD
CafxHmS1N1lyfu2+D/Ls8JaNcPCFE3l8R9EB6Vg2HGJDBFmXf609bQwxc5cbxek8
r8x3uDH0DeNsVi2zyHMAqP/C2jgWqTc3m5LyX8drHigEK5eQKCz7flqlqjyLo9s0
zlJ5s/VR5VKQPNudrFtOzQ2KMml+JTnBSUvGtLYcazzYfOsOxwA34WmugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaMjGRWXPxbb8Wn6xJ+iVtojD5LMB8GA1UdIwQY
MBaAFMeu8qs/Lp2awB9yf3MK998dBBgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAt
OTJlZDJhMDAwZjFmLzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAtOTJlZDJhMDAwZjFm
LzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAup1jyo0K
DQEZNRGhyC/g2zpKnx4+ICbmycA7lmuRcaYwbpZsaPexOT31Fd8zr0y0fhWsCDMz
sGILOTCG3EYZCAAot9b011/PjWu/pvUyUJy0yabfkJt9t1P1fMdcNvheyTzYhh8j
UDOqLOfjSOkb2h8XS2di0VTN0lwCpPR5BkNvUl/592NnzcgZXSau+26SDUuACH6j
OTY7JCDRr+H53XTLNnKK6WOyDXwMdmDg4LYTg+WRjyqprklE/9oCnHz/z3TvwqQQ
QFmso42BlcpVHCgi0Rgo4RiYO9wGEjbXldYd7/DxVJg99uQkuzIsTH1RCGZLb8cC
zG5KwyGJPMVxnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:38 2026 by rpki-client