Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: /yxOt4rJ4ToahaX98yZJwWBKaHcQb3jtWX60Xqj8skA=
Subject key identifier: 4E:18:C7:F9:15:B7:5B:68:C0:2E:6A:AD:5A:0C:00:68:64:70:64:66
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019D99CFF859D9E848E93C5DA0C7C93B5435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0AAD
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: wx3Ef8wxT9toNjYGDcTFwxN8CwHGfXhppbDU6E8CK54=)
2: Z15aMKSwaav6tVruPDM8dqX-OrU.roa (hash: T5sFynuOqb9ftXUvpV0JfIR7RY1qYAplZnnlFh9SU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f8:59:d9:e8:48:e9:3c:5d:a0:c7:c9:3b:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=4e18c7f915b75b68c02e6aad5a0c006864706466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:76:fe:57:8b:89:52:53:ba:6b:7c:7e:f5:
39:2e:cf:94:db:3a:40:fb:0e:1b:8b:76:d7:ad:c5:
d5:a0:82:29:2e:72:be:b1:41:6d:d2:45:17:b9:03:
94:46:72:0f:ba:d6:0f:26:58:b8:51:7c:7c:62:d7:
bf:97:d7:d1:f5:c3:6e:83:a3:8f:52:43:93:1b:a1:
9c:fa:6b:5c:04:36:23:95:86:b9:e0:e2:6a:0b:c9:
a0:b3:52:2a:b2:3a:7c:91:26:94:7f:97:80:fc:13:
66:c1:2d:37:81:19:74:bf:aa:2a:b0:dc:1e:53:a2:
5c:32:b6:df:e6:60:01:4c:b1:97:27:ec:6f:77:38:
48:27:fe:51:4d:8d:3c:b9:44:d5:4e:3c:93:d0:f9:
f5:ef:62:e6:39:87:b7:f3:c0:f4:88:df:b2:cf:8b:
3c:0d:0f:11:6a:5d:3d:2a:01:57:3a:cb:3d:0a:72:
cf:84:fb:22:13:c2:e9:8b:b1:1c:f8:2d:20:b8:4e:
b0:9c:d0:97:cd:f2:a1:4f:23:80:6e:18:57:ad:70:
3a:eb:cd:83:0b:46:2f:ee:9d:d3:da:7e:69:d7:0c:
b3:bb:ff:6e:24:a7:a7:65:12:cb:d7:5c:c0:c7:d7:
ec:71:27:11:ad:df:39:c3:52:0d:35:ed:0b:08:7a:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:C7:F9:15:B7:5B:68:C0:2E:6A:AD:5A:0C:00:68:64:70:64:66
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:82:9d:81:3b:84:69:c4:8c:57:d5:ab:71:39:15:12:33:
9a:0a:39:e4:09:44:7f:68:06:71:2d:67:e4:d3:58:04:98:7b:
37:9c:e6:fd:8d:2c:49:0f:50:32:d7:07:19:d2:bf:1b:42:af:
d8:74:b4:f0:ee:5c:76:81:03:2b:98:bb:92:28:3e:e5:6a:c0:
09:36:8c:ab:78:f7:39:a1:7e:85:61:f5:66:b8:b7:21:7f:b3:
ab:7e:17:7e:83:aa:95:9b:6d:52:f0:c7:41:0f:35:48:7c:3c:
2e:2b:b1:e9:01:cb:5c:7d:21:11:c7:f1:8d:bb:d2:d2:62:29:
11:83:42:01:1a:95:b8:92:e3:98:b3:98:2c:02:1d:8d:b2:b8:
0d:86:a7:31:97:3c:60:d5:08:e0:73:25:d5:17:7d:2e:d3:99:
b3:d2:06:af:2f:9f:f1:94:cd:fd:79:23:08:b0:05:4f:0c:c9:
f9:b5:36:6c:be:70:3f:5f:09:ad:eb:55:d8:3d:36:3e:e2:e4:
fd:90:34:ba:39:01:00:ba:a6:ec:13:31:f6:d3:f5:0b:f4:35:
40:50:19:82:06:ae:54:ec:49:8e:1b:f5:28:1d:e6:5a:4f:08:
e5:b1:b1:37:75:ce:a3:f9:35:ac:60:4c:bb:8f:8f:dd:af:fa:
a6:1a:33:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/hZ2ehI6TxdoMfJO1Q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz
ODkxY2MwHhcNMjYwNDE3MDUwMDM2WhcNMjYwNDE4MDUwMDM2WjAzMTEwLwYDVQQD
Eyg0ZTE4YzdmOTE1Yjc1YjY4YzAyZTZhYWQ1YTBjMDA2ODY0NzA2NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVp2/leLiVJTumt8fvU5Ls+U2zpA
+w4bi3bXrcXVoIIpLnK+sUFt0kUXuQOURnIPutYPJli4UXx8Yte/l9fR9cNug6OP
UkOTG6Gc+mtcBDYjlYa54OJqC8mgs1Iqsjp8kSaUf5eA/BNmwS03gRl0v6oqsNwe
U6JcMrbf5mABTLGXJ+xvdzhIJ/5RTY08uUTVTjyT0Pn172LmOYe388D0iN+yz4s8
DQ8Ral09KgFXOss9CnLPhPsiE8Lpi7Ec+C0guE6wnNCXzfKhTyOAbhhXrXA6682D
C0Yv7p3T2n5p1wyzu/9uJKenZRLL11zAx9fscScRrd85w1INNe0LCHo0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4Yx/kVt1towC5qrVoMAGhkcGRmMB8GA1UdIwQY
MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt
YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj
LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8iCnYE7
hGnEjFfVq3E5FRIzmgo55AlEf2gGcS1n5NNYBJh7N5zm/Y0sSQ9QMtcHGdK/G0Kv
2HS08O5cdoEDK5i7kig+5WrACTaMq3j3OaF+hWH1Zri3IX+zq34XfoOqlZttUvDH
QQ81SHw8Liux6QHLXH0hEcfxjbvS0mIpEYNCARqVuJLjmLOYLAIdjbK4DYanMZc8
YNUI4HMl1Rd9LtOZs9IGry+f8ZTN/XkjCLAFTwzJ+bU2bL5wP18JretV2D02PuLk
/ZA0ujkBALqm7BMx9tP1C/Q1QFAZggauVOxJjhv1KB3mWk8I5bGxN3XOo/k1rGBM
u4+P3a/6phozvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:26 2026 by rpki-client