Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: K+Nj1qsfbn5xYEdddT5HXU/vc9IV1IzAecT113gzU1g=
Subject key identifier: 49:62:00:0B:DC:C4:66:AA:1B:BE:69:E1:0B:61:83:E0:6E:16:F1:F9
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019D9BBE532458E9183CBCEA395C69D52CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0E88
Signing time: Fri 17 Apr 2026 14:00:34 +0000
Manifest this update: Fri 17 Apr 2026 14:00:34 +0000
Manifest next update: Sat 18 Apr 2026 14:00:34 +0000
Files and hashes: 1: CCbPnsaraqAntkcEPLIKeh2owBA.roa (hash: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: dvn1T8eH09LuxoTqGR8ZGTmglQhGyxM+zOgtTjb6J4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:53:24:58:e9:18:3c:bc:ea:39:5c:69:d5:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Apr 17 14:00:34 2026 GMT
Not After : Apr 18 14:00:34 2026 GMT
Subject: CN=4962000bdcc466aa1bbe69e10b6183e06e16f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:6c:a8:33:17:8d:97:f0:bb:ea:28:1c:7b:
a2:61:5e:42:9e:b8:19:fd:04:a9:68:a4:35:91:0e:
a1:88:e4:38:85:a6:c6:4c:d0:13:38:55:50:ed:04:
69:b0:41:17:7f:01:10:da:c6:27:4b:3a:c6:aa:92:
78:29:1e:59:ca:fc:1d:13:0d:4c:0d:08:25:6c:89:
d4:fc:b6:5d:e7:be:37:48:4d:3b:70:ef:c7:23:99:
3a:3b:a3:06:79:27:39:47:9e:fa:78:a6:3c:05:6e:
85:d1:0d:8b:25:c8:0b:b1:c1:f2:b8:5f:f5:7f:32:
a9:b2:c4:aa:30:52:de:a5:b3:b7:5d:23:c7:85:af:
25:7e:cb:13:e4:6a:0e:b2:63:de:ab:75:1b:3e:65:
c8:e4:68:c1:18:cb:57:8a:29:cb:bd:0c:ce:74:47:
4e:3e:8e:66:2f:e3:fc:77:c6:f8:12:5a:e9:a5:58:
30:2c:69:d9:e4:a4:a8:38:56:8d:bf:52:30:e8:b3:
af:5b:ff:fb:d8:8f:15:9b:01:b3:85:11:7b:e9:f7:
34:a2:4c:fb:c4:b6:66:ad:f6:2d:a4:7f:f2:5f:58:
28:cf:de:5f:07:58:5f:1c:87:31:bb:24:81:e3:27:
3a:91:46:6c:1c:f0:ae:c0:68:38:6d:e7:fc:bd:94:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:00:0B:DC:C4:66:AA:1B:BE:69:E1:0B:61:83:E0:6E:16:F1:F9
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:89:27:c0:86:4d:47:af:03:f5:48:c6:f3:e7:57:60:a9:
2a:12:8c:76:2b:ae:ed:a3:a7:c4:09:90:68:9c:2c:23:b9:2c:
01:f9:02:ff:67:01:9c:00:4c:1e:23:e7:5a:03:99:de:10:4a:
02:0d:95:00:56:25:0b:71:66:9c:f6:95:ed:a8:62:e5:1a:0a:
e1:31:4e:63:ac:d5:e5:7c:fd:58:fd:84:16:f2:45:ab:75:a7:
75:a5:f7:33:f0:cd:e4:a7:de:83:cb:f9:ac:2d:95:4b:f5:01:
72:9d:57:4b:37:4d:c4:51:a9:34:47:ac:92:da:25:7d:63:1c:
b7:21:31:0f:07:73:be:43:2b:5c:04:22:27:96:e0:63:79:ab:
7a:2d:f9:4a:74:e4:7e:1b:53:c9:92:26:6c:b2:61:3b:55:e6:
35:64:98:a2:f6:ea:a1:24:89:69:8c:c6:b1:1e:dc:5e:0f:3a:
3e:bd:1d:5a:00:fb:bb:65:98:d4:db:ef:fd:ee:aa:70:b2:e7:
62:8d:85:34:e3:6f:71:40:3a:bc:af:a3:6d:3d:c4:f4:8a:c9:
17:0f:dc:09:4a:1d:09:df:eb:17:62:92:ac:44:b2:90:20:55:
4c:7b:81:d4:8d:0e:91:48:9b:7b:d2:2f:a9:d6:23:e6:b7:6a:
4c:b0:32:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvlMkWOkYPLzqOVxp1Sz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjE3YTg0ZjcxNWVhNDhlNWNjMzc4M2IxMzhjZThjN2U3
MDM5OGMwHhcNMjYwNDE3MTQwMDM0WhcNMjYwNDE4MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0OTYyMDAwYmRjYzQ2NmFhMWJiZTY5ZTEwYjYxODNlMDZlMTZmMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIVsqDMXjZfwu+ooHHuiYV5CnrgZ
/QSpaKQ1kQ6hiOQ4habGTNATOFVQ7QRpsEEXfwEQ2sYnSzrGqpJ4KR5ZyvwdEw1M
DQglbInU/LZd5743SE07cO/HI5k6O6MGeSc5R576eKY8BW6F0Q2LJcgLscHyuF/1
fzKpssSqMFLepbO3XSPHha8lfssT5GoOsmPeq3UbPmXI5GjBGMtXiinLvQzOdEdO
Po5mL+P8d8b4ElrppVgwLGnZ5KSoOFaNv1Iw6LOvW//72I8VmwGzhRF76fc0okz7
xLZmrfYtpH/yX1goz95fB1hfHIcxuySB4yc6kUZsHPCuwGg4bef8vZTIqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEliAAvcxGaqG75p4Qthg+BuFvH5MB8GA1UdIwQY
MBaAFLUheoT3FepI5cw3g7E4zox+cDmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEt
ODcwODI4ODA4Zjg4LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jN2JiMTgtZGYwYi00NTBiLWJkMTEtODcwODI4ODA4Zjg4
LzEvdFNGNmhQY1Y2a2psekRlRHNUak9qSDV3T1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqluJJ8CG
TUevA/VIxvPnV2CpKhKMdiuu7aOnxAmQaJwsI7ksAfkC/2cBnABMHiPnWgOZ3hBK
Ag2VAFYlC3FmnPaV7ahi5RoK4TFOY6zV5Xz9WP2EFvJFq3WndaX3M/DN5Kfeg8v5
rC2VS/UBcp1XSzdNxFGpNEesktolfWMctyExDwdzvkMrXAQiJ5bgY3mrei35SnTk
fhtTyZImbLJhO1XmNWSYovbqoSSJaYzGsR7cXg86Pr0dWgD7u2WY1Nvv/e6qcLLn
Yo2FNONvcUA6vK+jbT3E9IrJFw/cCUodCd/rF2KSrESykCBVTHuB1I0OkUibe9Iv
qdYj5rdqTLAyFA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:23 2026 by rpki-client