Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: hO6LcpXHCwSf9VEPMeB+xnSB3s+szztRrmrS8bEuzjY=
Subject key identifier: 5D:BB:77:38:45:6D:13:2C:2B:7D:F5:3C:C6:89:9E:EA:08:58:55:AB
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 019D9850A68C105157B5FAE273CE47E44C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:55 +0000
Manifest this update: Thu 16 Apr 2026 22:01:55 +0000
Manifest next update: Fri 17 Apr 2026 22:01:55 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: sftyIlWXigAvm6dbiUlqPuHpf5M481S5ix6dA3tP7uQ=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a6:8c:10:51:57:b5:fa:e2:73:ce:47:e4:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Apr 16 22:01:55 2026 GMT
Not After : Apr 17 22:01:55 2026 GMT
Subject: CN=5dbb7738456d132c2b7df53cc6899eea085855ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:35:77:78:7a:ce:fd:85:95:19:85:b7:ba:
fe:a7:89:33:42:d4:5d:32:c1:e3:84:a1:1e:89:92:
42:53:70:14:df:6d:8e:be:21:bb:75:f0:47:09:3a:
47:aa:30:79:5e:25:c1:4b:0f:76:f7:97:68:0e:a4:
e2:46:7b:3f:6f:fb:7d:5b:12:8c:b7:42:28:bf:2e:
44:3c:c8:23:ed:e4:43:09:71:74:e8:3d:b6:98:28:
13:0d:4e:f9:82:7f:57:c0:04:69:ab:d1:3a:1d:f6:
1a:d4:80:c3:23:ab:0c:20:18:44:64:94:d8:79:c3:
e0:92:e9:e2:f4:ec:a1:a5:0d:2c:3e:99:5d:82:5d:
88:ae:cd:ca:d7:ac:ac:65:cf:17:fa:a7:26:aa:38:
b2:2f:cc:dc:90:43:99:b6:e1:6e:b3:9c:3e:e0:7f:
58:8f:4d:b1:ec:18:98:c9:1f:cd:3d:bf:95:ae:9d:
12:57:24:a2:bc:2c:9d:53:b4:a0:bf:4b:15:ec:e1:
33:b9:a6:97:55:dc:c0:b1:5e:57:75:ce:6d:45:11:
d9:2d:7e:36:90:2d:8c:1c:83:31:55:3f:d1:ba:e3:
e8:5e:8f:44:b3:4d:f6:05:b1:18:e8:3f:64:f1:91:
c0:05:20:e9:cc:52:82:67:50:19:0e:90:dc:41:22:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:77:38:45:6D:13:2C:2B:7D:F5:3C:C6:89:9E:EA:08:58:55:AB
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1e:ea:73:29:7c:bb:55:34:ed:f9:82:aa:2c:d5:89:7d:6f:
a6:10:3b:a7:46:77:b4:3d:29:5f:99:06:a7:71:6e:75:43:fd:
02:7e:93:52:a1:71:23:01:4c:ee:ca:99:57:d2:0e:90:87:ee:
b8:b3:9a:f8:7e:92:0b:f6:67:b6:fd:ff:93:85:67:d8:ec:b4:
68:7e:e8:1a:5c:0f:3f:55:8b:a1:5a:a3:e8:b6:5a:d4:0c:97:
42:85:55:c5:62:8d:ed:00:fe:24:6e:d0:40:93:8c:3f:e8:91:
ed:15:8f:a3:1e:05:29:2a:4f:9a:a8:80:c7:65:2b:e2:a2:fa:
2a:05:aa:a6:85:56:bc:a6:3f:e8:85:7e:84:aa:a2:5a:95:35:
4f:45:c3:ed:36:01:36:14:09:e1:ba:da:b3:7c:c5:97:08:f4:
58:d9:50:db:c4:d9:86:f9:ff:14:cc:9e:f5:90:c6:c4:ec:b4:
39:df:10:a2:70:f0:8a:b0:95:cc:8f:f9:7e:38:3e:4c:f1:be:
13:01:37:61:4a:ea:63:01:59:46:4f:96:dd:fd:98:8f:1b:15:
96:b3:81:7f:a0:50:81:65:08:0a:b7:fc:cc:54:c6:f4:74:b9:
d3:4a:80:84:39:3e:82:16:8e:9d:74:a9:6a:a3:f4:9a:8e:15:
e7:78:df:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUKaMEFFXtfric85H5EwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0
YTQ5MGQwHhcNMjYwNDE2MjIwMTU1WhcNMjYwNDE3MjIwMTU1WjAzMTEwLwYDVQQD
Eyg1ZGJiNzczODQ1NmQxMzJjMmI3ZGY1M2NjNjg5OWVlYTA4NTg1NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDs1d3h6zv2FlRmFt7r+p4kzQtRd
MsHjhKEeiZJCU3AU322OviG7dfBHCTpHqjB5XiXBSw9295doDqTiRns/b/t9WxKM
t0Iovy5EPMgj7eRDCXF06D22mCgTDU75gn9XwARpq9E6HfYa1IDDI6sMIBhEZJTY
ecPgkuni9OyhpQ0sPpldgl2Irs3K16ysZc8X+qcmqjiyL8zckEOZtuFus5w+4H9Y
j02x7BiYyR/NPb+Vrp0SVySivCydU7Sgv0sV7OEzuaaXVdzAsV5Xdc5tRRHZLX42
kC2MHIMxVT/RuuPoXo9Es032BbEY6D9k8ZHABSDpzFKCZ1AZDpDcQSJ/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF27dzhFbRMsK331PMaJnuoIWFWrMB8GA1UdIwQY
MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt
Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh
LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB7qcyl8
u1U07fmCqizViX1vphA7p0Z3tD0pX5kGp3FudUP9An6TUqFxIwFM7sqZV9IOkIfu
uLOa+H6SC/Zntv3/k4Vn2Oy0aH7oGlwPP1WLoVqj6LZa1AyXQoVVxWKN7QD+JG7Q
QJOMP+iR7RWPox4FKSpPmqiAx2Ur4qL6KgWqpoVWvKY/6IV+hKqiWpU1T0XD7TYB
NhQJ4bras3zFlwj0WNlQ28TZhvn/FMye9ZDGxOy0Od8QonDwirCVzI/5fjg+TPG+
EwE3YUrqYwFZRk+W3f2YjxsVlrOBf6BQgWUICrf8zFTG9HS500qAhDk+ghaOnXSp
aqP0mo4V53jf8w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:34 2026 by rpki-client