Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: 7RyH3EhfKZQ33Bxr/ope6OUfKrqeZiTua00Ti0TsnYo=
Subject key identifier: D5:A1:D1:4C:36:6C:EF:E1:4F:66:F3:66:75:6A:D9:2D:28:A9:08:2B
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 019D9C630C50029F1B57DFF0C2DA57D1BE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: DB
Signing time: Fri 17 Apr 2026 17:00:30 +0000
Manifest this update: Fri 17 Apr 2026 17:00:30 +0000
Manifest next update: Sat 18 Apr 2026 17:00:30 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: dCoDR2wKaSo5yF7l5mmYdQMIoaVmLvOXMzwhbhMniTg=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:0c:50:02:9f:1b:57:df:f0:c2:da:57:d1:be:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Apr 17 17:00:30 2026 GMT
Not After : Apr 18 17:00:30 2026 GMT
Subject: CN=d5a1d14c366cefe14f66f366756ad92d28a9082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:70:22:13:ae:75:8c:f2:09:c6:4d:97:ca:
43:0e:3c:9c:b9:4a:c6:b5:0f:45:22:07:3b:b3:3f:
3c:1c:37:7a:fa:ba:45:d8:ab:ad:69:cc:f5:87:7c:
5f:07:f7:7c:e1:08:8e:d3:17:1a:e3:57:eb:8a:91:
da:79:eb:7b:a9:df:64:95:06:83:b0:15:80:2f:bf:
ac:5b:f6:03:c7:5b:30:34:ff:b6:d2:ea:36:44:af:
ad:f4:94:b8:c0:54:be:04:1c:5e:00:1a:76:67:d2:
9a:c2:0b:9c:17:f8:ab:37:f7:fa:88:2a:94:3d:76:
51:e1:97:a4:70:26:9e:47:ee:26:fa:23:84:8f:e9:
ed:11:35:9b:30:a9:cc:90:2b:84:01:a1:c2:c7:cf:
36:7d:22:8e:9d:74:07:f6:c7:5d:7e:d7:27:0f:43:
9c:bb:34:d2:40:07:58:20:df:27:0b:37:b3:42:5a:
bf:48:f0:5a:54:ef:d7:0c:75:a1:35:39:e6:29:e9:
8f:f4:c0:df:d3:72:93:21:e8:1b:fb:f1:5c:31:8b:
6b:e1:f3:b8:5d:16:06:42:a6:28:08:0f:50:d6:ad:
4b:42:9c:eb:28:28:b2:d0:21:95:c2:65:37:fb:48:
9a:06:a4:e5:ce:80:97:48:25:4e:17:b8:52:59:de:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:D1:4C:36:6C:EF:E1:4F:66:F3:66:75:6A:D9:2D:28:A9:08:2B
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:d9:de:bb:25:63:49:cb:f1:45:7a:f1:e0:81:01:ae:bf:
14:6b:cd:0f:7e:06:1f:b4:f4:b7:50:14:52:b2:19:79:fd:40:
5d:81:ee:02:04:0f:59:72:2f:c3:0b:2e:1f:51:38:af:6f:6d:
14:1d:34:a3:15:3b:dc:00:5d:ff:37:1c:4c:d7:7c:b1:c1:0a:
5a:20:63:a5:96:ca:01:cc:e4:15:66:93:3d:eb:89:1a:7b:e3:
c7:57:2d:8e:20:9a:0e:b0:34:4d:54:85:08:b6:2f:0b:28:8b:
8f:c0:e5:d8:6c:af:32:93:53:7e:9a:9a:d3:98:29:37:4f:34:
8c:89:97:49:80:f9:2a:fe:e0:a3:04:c3:e4:17:02:a9:13:32:
a1:25:72:a4:27:3f:29:61:98:a4:10:dc:db:34:ae:9e:14:91:
62:bd:c0:db:41:a5:22:bb:41:ab:43:07:f1:3c:f2:a0:7d:7f:
2d:f0:31:37:65:f2:be:92:ec:12:85:4e:ea:47:0e:fd:29:28:
ed:9e:8f:7c:89:61:e3:40:6c:d2:83:fb:a4:88:a7:31:0e:06:
e3:c1:2a:8e:1a:bf:af:ba:b7:3d:e9:4b:b5:dd:6f:79:60:a5:
4a:77:a3:66:9a:b6:95:f5:49:04:60:18:fb:bf:42:ee:a8:67:
27:2a:38:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYwxQAp8bV9/wwtpX0b48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZGRmNzMzYTVmNmQ3MzVhYmYyN2U4OTJhZTBlNTAwZDU3
MjdkZjMwHhcNMjYwNDE3MTcwMDMwWhcNMjYwNDE4MTcwMDMwWjAzMTEwLwYDVQQD
EyhkNWExZDE0YzM2NmNlZmUxNGY2NmYzNjY3NTZhZDkyZDI4YTkwODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnhwIhOudYzyCcZNl8pDDjycuUrG
tQ9FIgc7sz88HDd6+rpF2Kutacz1h3xfB/d84QiO0xca41fripHaeet7qd9klQaD
sBWAL7+sW/YDx1swNP+20uo2RK+t9JS4wFS+BBxeABp2Z9KawgucF/irN/f6iCqU
PXZR4ZekcCaeR+4m+iOEj+ntETWbMKnMkCuEAaHCx882fSKOnXQH9sddftcnD0Oc
uzTSQAdYIN8nCzezQlq/SPBaVO/XDHWhNTnmKemP9MDf03KTIegb+/FcMYtr4fO4
XRYGQqYoCA9Q1q1LQpzrKCiy0CGVwmU3+0iaBqTlzoCXSCVOF7hSWd5f3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWh0Uw2bO/hT2bzZnVq2S0oqQgrMB8GA1UdIwQY
MBaAFNTd9zOl9tc1q/J+iSrg5QDVcn3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYt
ZWZlNTk5YmY1ZDg3LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYtZWZlNTk5YmY1ZDg3
LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/fZ3rsl
Y0nL8UV68eCBAa6/FGvND34GH7T0t1AUUrIZef1AXYHuAgQPWXIvwwsuH1E4r29t
FB00oxU73ABd/zccTNd8scEKWiBjpZbKAczkFWaTPeuJGnvjx1ctjiCaDrA0TVSF
CLYvCyiLj8Dl2GyvMpNTfpqa05gpN080jImXSYD5Kv7gowTD5BcCqRMyoSVypCc/
KWGYpBDc2zSunhSRYr3A20GlIrtBq0MH8TzyoH1/LfAxN2XyvpLsEoVO6kcO/Sko
7Z6PfIlh40Bs0oP7pIinMQ4G48Eqjhq/r7q3PelLtd1veWClSnejZpq2lfVJBGAY
+79C7qhnJyo4lA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:25:46 2026 by rpki-client