Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: w4SZ+mPpgw6TCUSjJqMju9pzVPYFJ21Q1GpduPRkWvs=
Subject key identifier: B8:A4:3F:CE:B7:56:C4:25:A1:3F:7D:78:EA:20:4F:D1:80:85:40:56
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019DD01A38C393B5B455354C026AA4A5DECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0C16
Signing time: Mon 27 Apr 2026 18:01:12 +0000
Manifest this update: Mon 27 Apr 2026 18:01:12 +0000
Manifest next update: Tue 28 Apr 2026 18:01:12 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: S2f12MdNmoL95bqwIpJ/Mz5Hu6wvlr5beiZRBkN0OFM=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:38:c3:93:b5:b4:55:35:4c:02:6a:a4:a5:de:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Apr 27 18:01:12 2026 GMT
Not After : Apr 28 18:01:12 2026 GMT
Subject: CN=b8a43fceb756c425a13f7d78ea204fd180854056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:48:ba:da:b7:b7:27:cd:07:8c:7a:4d:75:
f9:f7:0b:ae:e9:2f:3a:92:0c:1e:2f:8b:70:2b:76:
e6:0e:ea:d3:ba:f8:3b:b0:e1:9f:90:71:b9:99:c9:
3f:e4:b6:92:29:39:b4:19:7a:33:1a:e0:88:71:f2:
87:89:a9:14:52:8e:d5:cf:d0:38:56:41:22:a1:87:
d8:53:66:6c:74:a5:95:20:69:bf:97:5e:29:82:50:
fa:e1:6d:76:45:c5:53:9f:cd:36:8f:5d:a4:37:41:
83:a3:70:ed:0c:47:ed:d3:8b:d7:99:1f:26:ac:59:
1f:af:45:65:c5:43:49:3e:b9:4e:1d:89:8e:ed:51:
1d:53:0d:e7:63:ef:b3:01:92:2e:11:5a:a5:4f:56:
5e:f4:91:c8:05:d2:5f:9c:01:1b:6a:54:5c:7d:a4:
7f:d3:b9:c1:01:02:93:a4:75:1c:8c:f0:52:cc:2a:
bf:63:6c:07:c2:fc:12:93:80:b5:9c:39:30:bd:a1:
4e:7b:44:80:e1:ff:cb:78:4d:fb:9e:94:1e:5a:82:
3b:5b:55:9e:31:c2:99:0a:df:aa:47:e2:9c:c4:72:
22:16:ca:99:ac:cd:e2:a0:77:b6:43:ea:ed:d3:10:
9f:71:99:a7:25:2f:1f:f6:03:fb:47:05:8d:c5:c3:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A4:3F:CE:B7:56:C4:25:A1:3F:7D:78:EA:20:4F:D1:80:85:40:56
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:74:d7:d9:72:67:c3:7a:ae:e8:41:76:65:da:f9:17:cf:15:
8b:4d:29:0c:3e:ac:77:af:ef:03:c7:9d:d8:2c:0d:b3:d3:e9:
f7:36:70:bd:b5:4e:12:31:1a:93:b2:ae:a3:ed:ad:90:3c:05:
c2:51:43:60:22:4f:77:09:99:54:72:e1:1f:1b:cb:f0:dc:e8:
3b:55:75:e2:0f:b4:bf:24:cf:4b:30:99:e1:9e:48:f0:03:3d:
b1:1c:a4:d2:03:bf:0b:74:04:13:8c:d7:f5:4b:2c:cb:4f:6b:
26:af:cf:64:8c:f8:48:d3:f0:e5:dd:78:bf:8d:7b:32:9d:0e:
1a:8f:ab:fa:39:e8:5e:a7:6d:c2:2b:36:e7:b1:bc:d5:08:f3:
6b:c7:24:15:a9:4d:b2:ca:15:df:7c:0c:48:e7:c1:a5:38:87:
57:6a:8d:0b:85:3d:17:ce:dd:0e:fc:6c:ec:79:68:72:2f:7a:
bd:50:33:cf:22:47:87:f2:6c:5c:a3:82:a3:b0:a8:b7:84:35:
6b:24:2a:23:10:61:cc:90:4f:4f:7a:75:97:27:24:04:46:b9:
eb:f0:60:cd:9e:f7:6c:31:a1:5e:b8:e7:3b:d5:85:ab:07:6c:
8d:3d:61:e7:8d:af:4e:06:d1:33:69:16:fb:91:7c:e9:28:2d:
56:c5:66:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGjjDk7W0VTVMAmqkpd7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTBiNWFjYTczMWVhNzFmMjZkNjNkMjNjMjJjMTIzYjJi
YjEyMGYwHhcNMjYwNDI3MTgwMTEyWhcNMjYwNDI4MTgwMTEyWjAzMTEwLwYDVQQD
EyhiOGE0M2ZjZWI3NTZjNDI1YTEzZjdkNzhlYTIwNGZkMTgwODU0MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FIutq3tyfNB4x6TXX59wuu6S86
kgweL4twK3bmDurTuvg7sOGfkHG5mck/5LaSKTm0GXozGuCIcfKHiakUUo7Vz9A4
VkEioYfYU2ZsdKWVIGm/l14pglD64W12RcVTn802j12kN0GDo3DtDEft04vXmR8m
rFkfr0VlxUNJPrlOHYmO7VEdUw3nY++zAZIuEVqlT1Ze9JHIBdJfnAEbalRcfaR/
07nBAQKTpHUcjPBSzCq/Y2wHwvwSk4C1nDkwvaFOe0SA4f/LeE37npQeWoI7W1We
McKZCt+qR+KcxHIiFsqZrM3ioHe2Q+rt0xCfcZmnJS8f9gP7RwWNxcMitQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLikP863VsQloT99eOogT9GAhUBWMB8GA1UdIwQY
MBaAFHCgtaynMepx8m1j0jwiwSOyuxIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAt
NDNlMzE4MDBkZjBjLzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAtNDNlMzE4MDBkZjBj
LzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHTX2XJn
w3qu6EF2Zdr5F88Vi00pDD6sd6/vA8ed2CwNs9Pp9zZwvbVOEjEak7Kuo+2tkDwF
wlFDYCJPdwmZVHLhHxvL8NzoO1V14g+0vyTPSzCZ4Z5I8AM9sRyk0gO/C3QEE4zX
9Ussy09rJq/PZIz4SNPw5d14v417Mp0OGo+r+jnoXqdtwis257G81Qjza8ckFalN
ssoV33wMSOfBpTiHV2qNC4U9F87dDvxs7Hloci96vVAzzyJHh/JsXKOCo7Cot4Q1
ayQqIxBhzJBPT3p1lyckBEa56/BgzZ73bDGhXrjnO9WFqwdsjT1h542vTgbRM2kW
+5F86SgtVsVmJA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:39 2026 by rpki-client