Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: KE5dC/MmCQjnKzDPVYISjoAiHmwBWB+RYyB5kLA9KVI=
Subject key identifier: B3:AB:82:E0:0E:64:72:D0:33:1E:BD:19:76:3D:D2:45:D2:23:68:2E
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019DD689D71BFA8E0B8F2348F208E6333D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 18E4
Signing time: Wed 29 Apr 2026 00:00:50 +0000
Manifest this update: Wed 29 Apr 2026 00:00:50 +0000
Manifest next update: Thu 30 Apr 2026 00:00:50 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: LBEG7Ru6WSf1a4NTCV6j5RVmqT22K4r2xca5BtRWPHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:89:d7:1b:fa:8e:0b:8f:23:48:f2:08:e6:33:3d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Apr 29 00:00:50 2026 GMT
Not After : Apr 30 00:00:50 2026 GMT
Subject: CN=b3ab82e00e6472d0331ebd19763dd245d223682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:2f:5a:91:36:16:bc:8b:f8:75:87:29:43:
44:d9:00:8d:67:e9:ab:d8:19:94:79:31:74:a6:0c:
b3:d1:a0:39:b9:5b:c1:fb:a3:b6:44:2a:a4:a3:3b:
fd:54:21:e3:ad:27:f7:38:f9:e6:06:a4:15:3d:94:
7b:7e:8b:e3:2a:71:03:d4:e1:67:cd:38:c8:8d:c4:
4a:9e:9a:d7:df:c4:03:33:3b:60:17:7c:66:11:54:
70:58:04:31:51:c5:3e:31:7b:43:d5:15:b0:a9:e6:
cd:67:36:40:9b:54:39:7f:07:c1:b7:89:5c:12:74:
ec:e8:be:ae:b8:e7:95:b0:41:c6:f9:18:6c:6b:ff:
d0:0c:5d:bd:49:44:87:72:7b:37:72:72:61:1c:d2:
07:22:05:66:57:7f:92:76:77:14:87:75:b6:87:4e:
36:65:46:1f:52:79:c1:31:ec:3a:eb:f3:c9:82:60:
e7:5d:2a:05:2f:fc:a2:c5:d3:f0:f7:e4:2d:2d:89:
73:fd:66:14:94:97:41:47:b9:ba:ed:97:a7:7e:56:
a6:73:fd:08:bd:8a:7c:37:5e:f0:eb:04:c8:79:37:
2c:f4:52:f8:bb:c1:b8:d1:f5:42:78:96:69:41:68:
7a:97:1d:e6:17:20:6c:e9:04:7f:c9:5f:3a:87:d8:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:82:E0:0E:64:72:D0:33:1E:BD:19:76:3D:D2:45:D2:23:68:2E
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:84:47:5e:97:d0:ee:46:c8:79:69:5c:8e:8f:51:b3:1a:
d5:fd:72:ad:fe:bc:6a:e2:0d:93:0f:6c:18:61:81:d8:92:fd:
8f:f1:23:02:45:66:61:26:44:30:b9:c0:b5:26:11:04:69:68:
0c:4d:12:24:a6:49:e4:d7:b5:3d:d2:5d:b8:34:45:47:81:53:
26:0a:8b:fe:c8:b5:c6:f1:64:10:1e:ae:67:50:99:60:6d:17:
d0:da:a3:b2:bc:01:6e:58:00:a5:89:92:6f:7e:68:01:bd:64:
94:32:48:22:e6:8c:b1:7b:65:7f:31:15:a7:58:c2:e2:4b:91:
b1:ee:e8:47:58:85:4a:e6:da:dd:e3:fb:5a:37:d4:51:f5:b2:
27:53:95:37:9c:28:7f:4b:b5:c6:1a:15:c2:48:f1:6d:cd:e4:
31:6b:0f:12:a3:56:61:21:eb:dd:07:29:f2:e8:5b:90:85:af:
6e:b6:3c:bd:fc:37:10:31:c5:59:bc:6c:89:92:df:10:0d:d3:
e0:27:23:85:f5:6b:ea:6c:fd:bf:2c:87:d7:62:81:b1:42:b3:
0d:ae:7e:62:3b:0a:2e:65:7a:0a:c3:eb:93:32:8b:bd:96:cb:
e1:4f:d4:ba:07:1d:78:93:c6:6b:bd:e8:e9:52:4e:d5:58:99:
32:91:63:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Widcb+o4LjyNI8gjmMz2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0
YjUyNDgwHhcNMjYwNDI5MDAwMDUwWhcNMjYwNDMwMDAwMDUwWjAzMTEwLwYDVQQD
EyhiM2FiODJlMDBlNjQ3MmQwMzMxZWJkMTk3NjNkZDI0NWQyMjM2ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszsvWpE2FryL+HWHKUNE2QCNZ+mr
2BmUeTF0pgyz0aA5uVvB+6O2RCqkozv9VCHjrSf3OPnmBqQVPZR7fovjKnED1OFn
zTjIjcRKnprX38QDMztgF3xmEVRwWAQxUcU+MXtD1RWwqebNZzZAm1Q5fwfBt4lc
EnTs6L6uuOeVsEHG+Rhsa//QDF29SUSHcns3cnJhHNIHIgVmV3+SdncUh3W2h042
ZUYfUnnBMew66/PJgmDnXSoFL/yixdPw9+QtLYlz/WYUlJdBR7m67Zenflamc/0I
vYp8N17w6wTIeTcs9FL4u8G40fVCeJZpQWh6lx3mFyBs6QR/yV86h9gcAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOrguAOZHLQMx69GXY90kXSI2guMB8GA1UdIwQY
MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et
N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5
LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnWER16X
0O5GyHlpXI6PUbMa1f1yrf68auINkw9sGGGB2JL9j/EjAkVmYSZEMLnAtSYRBGlo
DE0SJKZJ5Ne1PdJduDRFR4FTJgqL/si1xvFkEB6uZ1CZYG0X0NqjsrwBblgApYmS
b35oAb1klDJIIuaMsXtlfzEVp1jC4kuRse7oR1iFSuba3eP7WjfUUfWyJ1OVN5wo
f0u1xhoVwkjxbc3kMWsPEqNWYSHr3Qcp8uhbkIWvbrY8vfw3EDHFWbxsiZLfEA3T
4CcjhfVr6mz9vyyH12KBsUKzDa5+YjsKLmV6CsPrkzKLvZbL4U/UugcdeJPGa73o
6VJO1ViZMpFjQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 29 06:41:41 2026 by rpki-client