Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: OB083PFCvkpDb7dPaNbewwKJj42wStcXanWe20aTkbk=
Subject key identifier: 21:9B:A6:AD:01:85:6A:3C:FF:8C:1A:C5:E2:73:9F:30:FC:5F:0B:64
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019DD088181F030DFD87FA85560A094AABE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1067
Signing time: Mon 27 Apr 2026 20:01:13 +0000
Manifest this update: Mon 27 Apr 2026 20:01:13 +0000
Manifest next update: Tue 28 Apr 2026 20:01:13 +0000
Files and hashes: 1: SjJvOiPzDGPe0Whv6-xyHHEqt1Y.roa (hash: yyvaLwhEXYqJXCBDxhSsYvPJM7BLJdn2ZmB113iWxyA=)
2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=)
3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: JtHx6k+uZSiwIjhmr2vHMdO7PB9zC/cs9yDrrrCkL98=)
4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=)
5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=)
6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:88:18:1f:03:0d:fd:87:fa:85:56:0a:09:4a:ab:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Apr 27 20:01:13 2026 GMT
Not After : Apr 28 20:01:13 2026 GMT
Subject: CN=219ba6ad01856a3cff8c1ac5e2739f30fc5f0b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:7a:ce:2d:0e:c5:0e:7f:19:0b:02:a4:c3:
f6:a4:b0:f0:1a:e3:7d:c7:7b:84:14:39:9d:8f:4d:
eb:bd:5b:69:a8:89:b0:1a:de:85:73:e2:0a:fa:69:
d4:ef:ec:c7:49:83:68:1a:d0:e6:43:8d:4f:0f:96:
37:8e:1b:d4:f3:44:cb:cd:54:24:f0:bc:3f:dd:bc:
3a:1d:45:0a:fd:38:ca:b4:b4:c5:9a:d5:c9:fd:b8:
2c:83:22:1d:9b:01:80:8b:ef:3a:13:f9:a3:c0:bb:
2d:ec:6f:eb:3e:18:99:07:87:e2:e9:fc:b3:6c:39:
7f:f7:f4:e2:2d:02:99:00:e5:d8:23:5f:54:69:91:
8e:74:c8:21:55:52:bc:35:c6:05:a4:2b:14:b6:09:
26:6e:83:99:1e:91:e8:7c:7a:6f:d6:d9:09:5d:06:
ef:c0:35:e2:e0:0e:2f:68:cd:3b:42:df:9f:8f:f0:
1a:9e:53:12:d3:f5:c0:15:4b:c7:6f:d8:0d:6f:a3:
e9:c3:52:14:e8:1e:a0:bd:9c:47:1b:67:d9:c4:77:
82:f8:7c:78:02:a3:4a:31:63:c4:67:43:29:19:41:
69:bb:1a:49:df:f7:78:6a:c4:9f:f3:d0:f1:a1:32:
d0:4b:b9:b9:ac:39:05:f3:af:56:55:f0:fa:c9:9e:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:A6:AD:01:85:6A:3C:FF:8C:1A:C5:E2:73:9F:30:FC:5F:0B:64
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:83:ef:75:e5:ab:8b:b2:88:ed:b7:4f:bf:ec:bd:e4:dd:
6c:73:11:71:a7:2b:e3:89:41:0b:9f:a6:e6:6c:11:e3:da:65:
2d:40:ff:cf:7d:aa:0b:dd:54:10:06:53:58:7c:2a:25:ef:3e:
4c:5e:21:5b:24:8e:5b:af:67:05:c0:6b:a9:ea:03:0a:5f:63:
aa:df:32:ed:bc:46:33:f1:0a:b9:aa:fe:df:03:64:05:5c:32:
58:c4:ed:12:74:2a:78:71:4e:88:5f:7b:f1:0f:67:fe:8b:46:
fc:e2:4f:dc:5f:d1:a7:e8:fe:52:9c:1f:55:0e:7e:fc:39:a8:
e7:ba:21:82:55:3c:94:28:a2:db:8f:f1:d0:5e:27:7a:4f:36:
89:4a:08:54:9b:fe:11:2c:17:7e:d0:4a:77:2f:0f:51:bd:c7:
2e:04:ec:b3:f5:e7:81:3c:dc:e5:c9:fc:85:3b:22:4e:00:87:
56:34:cd:cc:b7:d4:3e:35:5d:0c:59:1c:90:dd:51:24:c8:41:
1f:99:b4:31:f1:c4:cf:fd:21:f1:1e:71:0b:cb:71:60:a5:e4:
ff:45:5b:66:b7:f2:02:34:9c:b9:82:5f:d5:44:13:d3:0a:a9:
77:17:38:43:d6:3c:d3:9f:90:d7:a7:ad:cf:36:3d:a8:9b:66:
98:6f:36:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QiBgfAw39h/qFVgoJSqvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwNDI3MjAwMTEzWhcNMjYwNDI4MjAwMTEzWjAzMTEwLwYDVQQD
EygyMTliYTZhZDAxODU2YTNjZmY4YzFhYzVlMjczOWYzMGZjNWYwYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJp6zi0OxQ5/GQsCpMP2pLDwGuN9
x3uEFDmdj03rvVtpqImwGt6Fc+IK+mnU7+zHSYNoGtDmQ41PD5Y3jhvU80TLzVQk
8Lw/3bw6HUUK/TjKtLTFmtXJ/bgsgyIdmwGAi+86E/mjwLst7G/rPhiZB4fi6fyz
bDl/9/TiLQKZAOXYI19UaZGOdMghVVK8NcYFpCsUtgkmboOZHpHofHpv1tkJXQbv
wDXi4A4vaM07Qt+fj/AanlMS0/XAFUvHb9gNb6Ppw1IU6B6gvZxHG2fZxHeC+Hx4
AqNKMWPEZ0MpGUFpuxpJ3/d4asSf89DxoTLQS7m5rDkF869WVfD6yZ5luQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGbpq0BhWo8/4waxeJznzD8XwtkMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrSD73Xl
q4uyiO23T7/sveTdbHMRcacr44lBC5+m5mwR49plLUD/z32qC91UEAZTWHwqJe8+
TF4hWySOW69nBcBrqeoDCl9jqt8y7bxGM/EKuar+3wNkBVwyWMTtEnQqeHFOiF97
8Q9n/otG/OJP3F/Rp+j+UpwfVQ5+/Dmo57ohglU8lCii24/x0F4nek82iUoIVJv+
ESwXftBKdy8PUb3HLgTss/XngTzc5cn8hTsiTgCHVjTNzLfUPjVdDFkckN1RJMhB
H5m0MfHEz/0h8R5xC8txYKXk/0VbZrfyAjScuYJf1UQT0wqpdxc4Q9Y805+Q16et
zzY9qJtmmG82Sg==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:11:12 2026 by rpki-client