Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: K1BIFe8MbYRoYpt1xP+pz/Cbpht9z+by8/6KrjAhzlc=
Subject key identifier: 3B:2B:CA:13:22:D5:C1:21:64:07:1B:F9:CB:BF:46:D8:91:97:C3:77
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 019D9962DFABFB9D1F6A9AE81F4FCFE2D657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 03:01:26 +0000
Manifest this update: Fri 17 Apr 2026 03:01:26 +0000
Manifest next update: Sat 18 Apr 2026 03:01:26 +0000
Files and hashes: 1: PEm6S54U13MaQ71v1Rl3kDHGSuw.roa (hash: XFZVOEjHeDyAPzFdAiODpavr6Nt9yGr3hDVGBJwU18s=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: reXA5CozY0oJ8JzbbIHLt5FwTDm6KM7B58l1OTjt1Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:df:ab:fb:9d:1f:6a:9a:e8:1f:4f:cf:e2:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Apr 17 03:01:26 2026 GMT
Not After : Apr 18 03:01:26 2026 GMT
Subject: CN=3b2bca1322d5c12164071bf9cbbf46d89197c377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:5a:d9:c5:ff:06:62:6f:79:59:1f:ac:46:
57:d5:d5:4e:e3:e8:fb:33:18:26:7a:13:ab:8b:95:
8f:66:7a:fb:9f:70:d6:57:54:e3:12:4f:55:f8:ce:
09:31:98:80:3c:6f:95:f9:54:48:34:53:e3:8c:02:
fd:e3:5d:77:d2:93:df:70:13:a5:fb:e9:07:63:c9:
2e:18:ec:ea:79:4c:10:6d:5d:64:4e:b3:d2:98:e8:
0f:6d:fe:6a:7e:6c:d7:fc:d9:3f:35:7f:b1:86:09:
af:58:5c:36:01:be:61:bd:be:5f:7c:04:5d:97:5a:
89:ee:dc:01:37:35:cf:8f:d5:a3:0d:8d:b3:ee:a6:
5e:1d:9f:7f:79:18:aa:bf:74:0e:a7:b7:79:24:75:
4c:d3:fe:9b:c8:86:98:7e:1e:2d:a6:80:6e:f5:d4:
04:83:99:f6:f0:f4:0c:3e:16:15:56:6b:4e:65:aa:
ba:7e:29:9e:8c:54:aa:d0:0f:6c:14:ba:46:ca:67:
f3:45:1d:77:67:a3:09:86:e8:10:84:ee:c9:d4:24:
11:5a:1f:54:e2:c1:4a:43:0a:9e:e9:55:a5:5f:90:
5e:12:64:60:87:4c:67:67:0c:74:ac:c7:e0:ed:9d:
5a:b2:32:db:e8:79:c4:20:9d:17:55:7a:01:70:26:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2B:CA:13:22:D5:C1:21:64:07:1B:F9:CB:BF:46:D8:91:97:C3:77
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c1:a5:42:95:e4:7e:8b:09:d5:a7:14:e2:e5:0a:24:6e:46:
0b:e2:d7:f8:60:39:65:7d:20:a0:00:99:23:bc:10:49:b7:fd:
ff:6e:65:ed:39:64:c2:17:d7:26:10:8b:c2:0b:5d:38:d4:d9:
8e:e5:e5:56:83:38:47:59:f3:4d:76:d6:da:eb:7e:61:82:0e:
46:27:ab:56:a7:c0:d0:e5:91:75:33:65:7f:52:a4:90:f2:a0:
fe:dc:2a:26:a0:7b:1d:d4:cf:86:9b:b8:f0:a5:d0:86:94:7d:
b4:f2:c0:dc:f5:f0:1a:b0:4b:5e:c8:17:b2:51:6f:b2:08:a2:
ba:60:24:15:88:b0:a8:09:96:4b:69:a8:b6:69:22:8d:09:9d:
3f:e7:16:a9:93:94:33:6e:c3:47:1a:d8:b7:78:54:84:d5:28:
23:e1:57:26:3e:ca:14:2e:ea:0b:30:17:e2:bc:9e:a5:62:c0:
d5:c3:7b:f7:36:82:44:e4:ee:ba:ef:9f:17:0c:e9:17:2e:69:
c5:68:36:1a:76:7c:81:03:c9:18:f7:9b:7d:3d:fd:90:21:2b:
27:09:55:68:e2:eb:e0:e6:99:f8:f5:e9:0c:f3:2d:b9:7f:0f:
18:81:1c:2a:c6:e3:c5:71:ae:e3:d5:02:6f:3f:d9:c4:75:e4:
86:3d:ed:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYt+r+50faproH0/P4tZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3
NTQ3MDQwHhcNMjYwNDE3MDMwMTI2WhcNMjYwNDE4MDMwMTI2WjAzMTEwLwYDVQQD
EygzYjJiY2ExMzIyZDVjMTIxNjQwNzFiZjljYmJmNDZkODkxOTdjMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFa2cX/BmJveVkfrEZX1dVO4+j7
MxgmehOri5WPZnr7n3DWV1TjEk9V+M4JMZiAPG+V+VRINFPjjAL941130pPfcBOl
++kHY8kuGOzqeUwQbV1kTrPSmOgPbf5qfmzX/Nk/NX+xhgmvWFw2Ab5hvb5ffARd
l1qJ7twBNzXPj9WjDY2z7qZeHZ9/eRiqv3QOp7d5JHVM0/6byIaYfh4tpoBu9dQE
g5n28PQMPhYVVmtOZaq6fimejFSq0A9sFLpGymfzRR13Z6MJhugQhO7J1CQRWh9U
4sFKQwqe6VWlX5BeEmRgh0xnZwx0rMfg7Z1asjLb6HnEIJ0XVXoBcCYKoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsryhMi1cEhZAcb+cu/RtiRl8N3MB8GA1UdIwQY
MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt
YzljOGFiMTg4ODUzLzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz
LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4MGlQpXk
fosJ1acU4uUKJG5GC+LX+GA5ZX0goACZI7wQSbf9/25l7TlkwhfXJhCLwgtdONTZ
juXlVoM4R1nzTXbW2ut+YYIORierVqfA0OWRdTNlf1KkkPKg/twqJqB7HdTPhpu4
8KXQhpR9tPLA3PXwGrBLXsgXslFvsgiiumAkFYiwqAmWS2motmkijQmdP+cWqZOU
M27DRxrYt3hUhNUoI+FXJj7KFC7qCzAX4ryepWLA1cN79zaCROTuuu+fFwzpFy5p
xWg2GnZ8gQPJGPebfT39kCErJwlVaOLr4OaZ+PXpDPMtuX8PGIEcKsbjxXGu49UC
bz/ZxHXkhj3tXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:12 2026 by rpki-client