Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: +qqY/H5kjSXT978nKAZgrUGX84r+H13BFmqfh3B5r2o=
Subject key identifier: 4F:BD:8F:1B:77:BD:91:65:A9:DF:DC:F4:56:9A:19:22:BB:9E:2C:D5
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019D9A3EE1F48518FCBB6D81C9F468987567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: rc3+BgzRY/8zCJTxNk5kKQKYn41P2DoQ7vuVajZsXwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e1:f4:85:18:fc:bb:6d:81:c9:f4:68:98:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=4fbd8f1b77bd9165a9dfdcf4569a1922bb9e2cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:58:dd:30:fe:d3:49:aa:05:94:6f:35:43:
93:fa:17:8e:29:ec:6e:af:3e:06:e1:28:23:e6:ce:
1a:e7:9e:8a:50:d5:9c:0f:3c:d0:92:e4:dc:f8:7b:
6a:a5:a3:32:40:b2:e0:23:0d:8c:3e:ff:0d:39:86:
5a:be:1e:45:07:f8:8c:e6:a5:df:25:a2:09:b2:45:
aa:98:0c:40:e2:b8:6d:15:77:32:30:27:fb:02:ef:
b0:12:9b:e2:c1:08:81:3c:85:66:7c:06:59:6c:5e:
8b:b3:a8:90:48:f6:72:52:93:c0:ac:16:45:60:a2:
02:c3:bf:fa:9f:90:97:27:5a:f3:e4:1a:2b:57:98:
42:af:40:17:90:fe:67:3d:e1:25:71:67:e4:0a:a6:
00:1d:40:62:ba:c1:6e:30:87:72:83:93:a2:d7:cb:
45:5f:d7:71:9d:af:74:4e:ac:e7:ab:83:dc:65:fa:
5b:9c:ba:ec:8c:ac:e6:17:0c:db:6e:3f:6e:de:18:
0b:fa:d9:0c:0d:e1:72:81:b5:54:67:14:d6:6f:31:
e5:e3:0e:72:13:b8:b7:a0:49:93:90:f6:de:1c:14:
b8:da:d5:b5:06:90:8b:eb:a4:aa:b9:7f:83:5b:2a:
68:9a:58:eb:c8:e6:65:72:df:c5:bc:92:d4:d7:19:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:8F:1B:77:BD:91:65:A9:DF:DC:F4:56:9A:19:22:BB:9E:2C:D5
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1f:89:09:60:f1:59:82:b3:a1:7d:ee:e0:0d:de:b4:69:a0:
c6:a2:ef:f7:bf:ab:75:88:79:f8:9f:0c:21:1f:fc:14:8d:5a:
00:4b:cf:a0:2f:65:fc:1d:c3:02:45:e1:c8:16:c3:1c:1f:da:
b6:ec:16:dd:ac:75:e5:ba:5f:13:13:b0:d6:d4:b8:4e:24:dc:
d5:a3:0c:e4:81:8d:0f:12:42:b6:85:1b:88:ac:d8:5c:9b:08:
2f:60:06:de:d9:16:64:a1:93:2d:87:e6:22:ef:25:05:85:7a:
84:e5:ce:41:5f:8a:58:96:a9:06:40:75:ae:af:3f:28:49:a3:
02:06:4f:c3:81:e5:1a:e5:72:53:5a:7e:a0:b7:72:0d:2d:bf:
d1:46:cd:71:6e:25:32:a7:5d:1d:47:2e:21:c1:65:ab:74:5f:
08:e6:43:11:76:ff:a6:b7:71:0c:7c:47:10:8f:12:16:58:ab:
c2:7b:49:4d:61:1d:e5:e4:8f:8d:db:e1:31:e2:22:7e:65:e6:
1e:ff:b4:bd:ee:d1:ba:d1:18:0f:83:5c:b8:4a:93:4d:ed:d3:
cd:35:56:22:17:88:7d:63:dd:fb:75:1c:c2:a9:51:d2:ff:bc:
2c:44:8e:a7:9a:e4:91:2b:ff:10:53:4f:10:69:7e:38:34:85:
fd:62:28:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPuH0hRj8u22ByfRomHVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk
ZGI1YWQwHhcNMjYwNDE3MDcwMTQ1WhcNMjYwNDE4MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZmJkOGYxYjc3YmQ5MTY1YTlkZmRjZjQ1NjlhMTkyMmJiOWUyY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kFY3TD+00mqBZRvNUOT+heOKexu
rz4G4Sgj5s4a556KUNWcDzzQkuTc+HtqpaMyQLLgIw2MPv8NOYZavh5FB/iM5qXf
JaIJskWqmAxA4rhtFXcyMCf7Au+wEpviwQiBPIVmfAZZbF6Ls6iQSPZyUpPArBZF
YKICw7/6n5CXJ1rz5BorV5hCr0AXkP5nPeElcWfkCqYAHUBiusFuMIdyg5Oi18tF
X9dxna90Tqznq4PcZfpbnLrsjKzmFwzbbj9u3hgL+tkMDeFygbVUZxTWbzHl4w5y
E7i3oEmTkPbeHBS42tW1BpCL66SquX+DWypomljryOZlct/FvJLU1xncqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+9jxt3vZFlqd/c9FaaGSK7nizVMB8GA1UdIwQY
MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt
ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4
LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx+JCWDx
WYKzoX3u4A3etGmgxqLv97+rdYh5+J8MIR/8FI1aAEvPoC9l/B3DAkXhyBbDHB/a
tuwW3ax15bpfExOw1tS4TiTc1aMM5IGNDxJCtoUbiKzYXJsIL2AG3tkWZKGTLYfm
Iu8lBYV6hOXOQV+KWJapBkB1rq8/KEmjAgZPw4HlGuVyU1p+oLdyDS2/0UbNcW4l
MqddHUcuIcFlq3RfCOZDEXb/prdxDHxHEI8SFlirwntJTWEd5eSPjdvhMeIifmXm
Hv+0ve7RutEYD4NcuEqTTe3TzTVWIheIfWPd+3UcwqlR0v+8LESOp5rkkSv/EFNP
EGl+ODSF/WIouw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:11 2026 by rpki-client