Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: qwsSSzsBKGXPvSc1B0TiQr/UxaZFuNa7o2PvM7GG0+8=
Subject key identifier: 0C:73:ED:D4:C0:F8:21:A3:50:6E:CC:31:E6:EA:E2:5F:E1:8A:CC:D0
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019DDD9EB9E06FDAAE36FFA3B03D9A608B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 18E7
Signing time: Thu 30 Apr 2026 09:01:00 +0000
Manifest this update: Thu 30 Apr 2026 09:01:00 +0000
Manifest next update: Fri 01 May 2026 09:01:00 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: fIaVzU8Z7jjYzl517fxcNivkXo0covMd/7KoG3h+IrE=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:b9:e0:6f:da:ae:36:ff:a3:b0:3d:9a:60:8b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Apr 30 09:01:00 2026 GMT
Not After : May 1 09:01:00 2026 GMT
Subject: CN=0c73edd4c0f821a3506ecc31e6eae25fe18accd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:4a:94:68:c6:62:65:54:5f:22:58:59:b8:
38:46:b6:3c:fe:e3:67:da:b8:10:92:27:d9:0d:43:
d7:c4:d6:0f:d9:a0:0e:ae:ac:85:80:f9:52:59:aa:
d5:49:f0:1e:38:6d:d4:34:5a:f2:0c:61:29:78:67:
27:b5:36:19:c8:ad:b2:53:59:2c:20:bd:4e:78:d2:
19:7b:0d:62:cf:ec:95:a6:0d:1a:63:76:a5:e7:b5:
09:75:f2:59:5d:dd:85:83:fb:22:a3:63:81:68:25:
17:de:30:8f:b0:ef:41:02:2c:3e:9a:77:62:c8:2c:
4c:5b:39:bf:90:04:92:8e:7e:27:65:d2:ce:8c:8f:
1e:f5:80:17:9f:01:29:46:da:a6:77:2b:3c:a9:63:
de:82:d7:f0:ac:62:10:6a:85:6b:8d:df:c6:a1:32:
68:9e:9b:a9:eb:7a:18:79:b6:55:16:87:b4:ee:ef:
31:ff:b2:2b:ad:b1:61:60:f0:8b:35:8b:ac:2d:52:
54:7c:18:6c:f4:99:d9:72:88:80:d1:4e:85:bf:93:
dd:2c:28:aa:0d:69:43:80:5c:93:75:37:3e:51:32:
a3:4f:41:da:b9:cf:6f:f6:dd:41:d7:f7:1b:36:5a:
3b:59:fa:ad:e4:89:bc:da:ae:84:29:ff:3d:da:c7:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:ED:D4:C0:F8:21:A3:50:6E:CC:31:E6:EA:E2:5F:E1:8A:CC:D0
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:3f:3b:f1:88:88:29:72:da:fc:4c:f3:6f:61:71:84:fb:
b4:42:c1:c4:12:48:5a:51:a6:19:45:da:25:7b:b2:a2:0d:83:
9e:59:66:34:5b:f7:03:63:3d:4a:2d:f8:96:d6:0d:83:72:27:
29:2f:8b:73:f2:0b:23:a9:39:df:08:1e:29:0d:c7:c4:4f:ea:
b3:d2:5b:30:02:2e:5e:86:ac:a8:26:22:58:cb:f7:bf:8d:6f:
cc:d0:53:07:d5:a2:67:a6:b5:16:04:98:c0:7f:87:7d:3d:05:
f9:f6:2d:a8:72:d5:64:8e:7d:91:c8:10:3e:0e:e1:82:bd:b2:
d2:03:7c:a6:8a:fa:c4:93:39:60:1c:42:ff:3d:ad:4d:af:4f:
e6:99:0c:5d:6d:b7:90:81:c0:a1:94:ee:69:08:79:17:6c:c5:
4d:22:07:ff:e6:44:c2:c9:ea:7e:21:71:43:a3:66:41:66:10:
a6:a7:4f:a7:fc:25:cb:69:b7:e3:cb:a9:9c:3d:eb:db:3b:6c:
e6:82:00:9e:d2:31:ff:10:a8:96:00:0d:48:75:7d:e2:ad:f4:
22:a6:4d:ba:ea:e6:43:c5:39:4c:9d:c6:a8:87:46:e1:43:85:
3e:3c:1c:71:b4:69:e6:a7:1f:8b:65:7f:2b:e5:d2:ec:9e:dc:
3e:4a:51:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dnrngb9quNv+jsD2aYItTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjYwNDMwMDkwMTAwWhcNMjYwNTAxMDkwMTAwWjAzMTEwLwYDVQQD
EygwYzczZWRkNGMwZjgyMWEzNTA2ZWNjMzFlNmVhZTI1ZmUxOGFjY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJKlGjGYmVUXyJYWbg4RrY8/uNn
2rgQkifZDUPXxNYP2aAOrqyFgPlSWarVSfAeOG3UNFryDGEpeGcntTYZyK2yU1ks
IL1OeNIZew1iz+yVpg0aY3al57UJdfJZXd2Fg/sio2OBaCUX3jCPsO9BAiw+mndi
yCxMWzm/kASSjn4nZdLOjI8e9YAXnwEpRtqmdys8qWPegtfwrGIQaoVrjd/GoTJo
npup63oYebZVFoe07u8x/7IrrbFhYPCLNYusLVJUfBhs9JnZcoiA0U6Fv5PdLCiq
DWlDgFyTdTc+UTKjT0Hauc9v9t1B1/cbNlo7Wfqt5Im82q6EKf892seiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxz7dTA+CGjUG7MMebq4l/hiszQMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFW4/O/GI
iCly2vxM829hcYT7tELBxBJIWlGmGUXaJXuyog2DnllmNFv3A2M9Si34ltYNg3In
KS+Lc/ILI6k53wgeKQ3HxE/qs9JbMAIuXoasqCYiWMv3v41vzNBTB9WiZ6a1FgSY
wH+HfT0F+fYtqHLVZI59kcgQPg7hgr2y0gN8por6xJM5YBxC/z2tTa9P5pkMXW23
kIHAoZTuaQh5F2zFTSIH/+ZEwsnqfiFxQ6NmQWYQpqdPp/wly2m348upnD3r2zts
5oIAntIx/xColgANSHV94q30IqZNuurmQ8U5TJ3GqIdG4UOFPjwccbRp5qcfi2V/
K+XS7J7cPkpRCA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:21 2026 by rpki-client