Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: nTdpyfSZGExpjXNdoNBYKYoSudJNWJ51hIEunLYLdB8=
Subject key identifier: 47:A8:17:33:0F:BA:1F:A1:BA:EE:36:AB:A4:70:47:4A:14:17:B6:42
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019D9AABAF1443C1606E65799E6845DD5179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 15E9
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: sPcUWXZgWtcom/niYMbUzX0pVzt3PRS4NG+raJO6ayU=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:af:14:43:c1:60:6e:65:79:9e:68:45:dd:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=47a817330fba1fa1baee36aba470474a1417b642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:3b:3d:81:69:3f:a8:5f:2b:39:66:4b:50:
71:e5:0b:9b:f5:7f:d7:58:82:5a:42:45:6d:87:c7:
81:ac:27:a3:c7:5e:9f:86:3c:1b:1d:5e:ef:4d:57:
fe:f6:3b:fe:6d:ea:cc:59:52:62:02:eb:9b:25:b5:
86:83:2d:c4:a3:1c:e6:e9:62:bc:3f:81:6f:02:56:
3c:16:12:37:7b:f9:0c:c8:34:6c:54:5c:aa:39:4e:
60:e1:63:9b:0c:6e:5a:b2:ba:8c:05:2b:1c:37:da:
9c:5f:e7:aa:7f:38:00:9c:49:c9:d2:26:fe:be:a3:
e9:ba:31:9c:e2:6d:84:48:98:4f:78:d0:fb:42:46:
6f:55:e7:29:ab:4a:e3:28:ae:71:90:94:4b:e1:8f:
4b:ae:4d:49:47:3d:3e:fc:2f:fa:a7:ae:4a:d3:23:
52:a1:90:d8:50:21:c1:ba:ac:ee:1c:ca:c3:04:9e:
e1:bb:c8:f6:39:97:91:d2:b2:83:94:ef:68:bc:b4:
44:ae:d2:3c:3a:31:39:43:e1:a3:1b:23:4c:a8:dc:
43:84:94:f0:c8:d9:b6:1d:19:07:06:73:60:91:d8:
01:b4:1a:ef:79:40:f1:da:13:97:5f:8e:19:77:a9:
38:75:3c:cf:62:54:8a:ec:ac:46:0a:55:31:43:fe:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:17:33:0F:BA:1F:A1:BA:EE:36:AB:A4:70:47:4A:14:17:B6:42
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:e2:36:a4:4a:d8:fb:f2:c3:2d:89:0c:37:71:3c:67:41:
60:98:20:34:bb:58:80:db:5c:91:98:b0:8d:5e:a1:99:08:66:
3d:86:9a:43:12:88:2d:bb:42:15:05:63:36:85:b9:f0:fb:b5:
03:19:b4:a1:72:a3:82:88:32:70:18:5b:d3:ea:5a:42:26:6a:
9f:09:25:84:f9:0e:32:00:ca:60:ea:6a:ff:72:e8:dc:64:29:
16:6b:7c:e3:87:18:bb:dc:70:01:6e:a5:6f:39:f8:2a:23:3a:
fd:6d:f6:75:a8:d0:b1:14:93:00:b8:81:ef:49:2c:4f:7c:e0:
5b:b2:f3:ea:36:38:ec:de:cb:0f:9a:3c:9a:43:d4:fd:a6:e8:
34:30:4d:23:3c:2f:8c:aa:c6:5f:fe:24:f0:6c:f6:ef:22:1f:
d7:54:b1:33:40:74:cd:46:0f:5c:72:fd:11:b1:02:3a:b1:63:
1e:0e:d6:ff:7a:92:c5:81:1c:82:84:37:b0:72:1e:d5:1d:94:
38:bd:6c:15:f0:15:45:bd:2b:ee:ce:a4:eb:6c:cd:88:8d:f9:
72:ca:54:2a:d0:f5:23:30:8c:72:24:3e:34:0e:a2:05:92:51:
53:29:7e:9a:75:de:e7:aa:c9:64:1d:b3:5c:29:fa:24:a0:8c:
b2:72:c4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq68UQ8FgbmV5nmhF3VF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzU2NThiNThiNzE0MTk2ZWVmMzcxYmQ5NjdjMGM1ZTJj
YWJkNjYwHhcNMjYwNDE3MDkwMDM1WhcNMjYwNDE4MDkwMDM1WjAzMTEwLwYDVQQD
Eyg0N2E4MTczMzBmYmExZmExYmFlZTM2YWJhNDcwNDc0YTE0MTdiNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ms7PYFpP6hfKzlmS1Bx5Qub9X/X
WIJaQkVth8eBrCejx16fhjwbHV7vTVf+9jv+berMWVJiAuubJbWGgy3Eoxzm6WK8
P4FvAlY8FhI3e/kMyDRsVFyqOU5g4WObDG5asrqMBSscN9qcX+eqfzgAnEnJ0ib+
vqPpujGc4m2ESJhPeND7QkZvVecpq0rjKK5xkJRL4Y9Lrk1JRz0+/C/6p65K0yNS
oZDYUCHBuqzuHMrDBJ7hu8j2OZeR0rKDlO9ovLRErtI8OjE5Q+GjGyNMqNxDhJTw
yNm2HRkHBnNgkdgBtBrveUDx2hOXX44Zd6k4dTzPYlSK7KxGClUxQ/579wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeoFzMPuh+huu42q6RwR0oUF7ZCMB8GA1UdIwQY
MBaAFNQ1ZYtYtxQZbu83G9lnwMXiyr1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQt
NDA1YjBiZGEyYzI2LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85MWY4ZjktZmMzZi00YmI4LTg0NTQtNDA1YjBiZGEyYzI2
LzEvMURWbGkxaTNGQmx1N3pjYjJXZkF4ZUxLdldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSniNqRK
2Pvywy2JDDdxPGdBYJggNLtYgNtckZiwjV6hmQhmPYaaQxKILbtCFQVjNoW58Pu1
Axm0oXKjgogycBhb0+paQiZqnwklhPkOMgDKYOpq/3Lo3GQpFmt844cYu9xwAW6l
bzn4KiM6/W32dajQsRSTALiB70ksT3zgW7Lz6jY47N7LD5o8mkPU/aboNDBNIzwv
jKrGX/4k8Gz27yIf11SxM0B0zUYPXHL9EbECOrFjHg7W/3qSxYEcgoQ3sHIe1R2U
OL1sFfAVRb0r7s6k62zNiI35cspUKtD1IzCMciQ+NA6iBZJRUyl+mnXe56rJZB2z
XCn6JKCMsnLEhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:55 2026 by rpki-client