Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: /nLPepsz20Zb1ToV22rOYsb8r9BknvMS0O8hB5M8eWY=
Subject key identifier: 50:42:CE:B8:66:AE:E3:81:F8:7D:4C:E2:C2:FF:A7:39:1F:30:C1:CC
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019DCFE38907EBC69DC8403425283A2DE003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 17:01:28 +0000
Manifest this update: Mon 27 Apr 2026 17:01:28 +0000
Manifest next update: Tue 28 Apr 2026 17:01:28 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: 8uVwdnevvki6pmkaGPutRGGx2jaVwIq8qscJ9TjwFUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:89:07:eb:c6:9d:c8:40:34:25:28:3a:2d:e0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Apr 27 17:01:28 2026 GMT
Not After : Apr 28 17:01:28 2026 GMT
Subject: CN=5042ceb866aee381f87d4ce2c2ffa7391f30c1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:df:44:65:a8:68:6f:d0:15:0b:bc:22:7d:
f5:ec:a7:4d:43:cc:f6:8f:6c:d3:f1:9a:0f:14:54:
26:cc:05:50:28:44:a1:fe:de:47:cc:8a:67:18:b8:
f2:08:36:c0:bf:00:0e:c5:39:c6:17:5d:d3:9d:54:
e3:ae:10:de:2c:fd:d5:9f:97:0c:e6:31:19:9e:3a:
62:8c:84:67:7b:dd:a6:d4:2f:78:93:fa:0e:e1:c8:
5c:8a:3f:b5:30:a6:30:f2:ac:0f:55:b0:1b:05:c5:
12:90:1b:a3:a3:30:51:12:01:29:00:33:e7:68:73:
b1:4a:40:2e:43:07:9d:c7:57:6b:8b:9e:ca:87:15:
37:5c:12:cc:da:a7:bc:ca:b8:d0:b9:77:8b:8f:70:
eb:6e:cb:23:c5:cb:28:2e:67:a5:6d:84:7a:7e:09:
84:21:9d:a0:9d:1e:a1:88:de:50:46:0f:d3:8a:50:
20:7b:1b:71:80:04:1d:f3:24:18:bd:d0:5c:57:0c:
d4:11:82:4f:53:1e:4b:22:57:1c:1a:94:42:da:30:
a6:a6:1c:86:f1:a4:8f:13:08:28:60:33:ea:fd:e0:
0b:76:af:22:a1:83:81:95:bb:7d:b9:cd:a9:92:61:
3e:a3:33:df:48:4e:52:7d:92:bc:18:5b:e7:8d:1a:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:CE:B8:66:AE:E3:81:F8:7D:4C:E2:C2:FF:A7:39:1F:30:C1:CC
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:73:d6:cb:4c:4f:d0:11:da:3c:fb:5d:d9:59:78:5d:3f:78:
99:03:28:54:08:9a:72:e7:40:8f:6f:14:95:6b:af:22:f2:ca:
8d:d8:43:c8:3e:c2:2c:fe:76:bb:eb:87:d5:c5:e6:f0:a3:74:
b8:44:9d:42:b6:21:95:fc:39:d6:d7:15:13:87:6a:ec:5c:83:
e8:f1:5a:99:ab:5b:18:0f:14:0b:cf:af:fa:cb:f7:43:69:f4:
f9:2f:e0:0d:67:f6:12:3e:3e:70:22:c1:ca:08:f0:92:b1:0d:
24:ee:88:a3:51:af:15:f7:b6:1f:fd:a6:3c:0f:a7:4c:4a:25:
9f:ba:1a:35:b0:d5:df:8f:99:97:dc:7b:51:2c:bb:bb:f6:b6:
2c:db:34:7c:11:36:cd:31:61:37:41:a0:85:f5:88:8e:65:fc:
8f:29:4c:4c:34:cc:b5:d4:ba:b4:4b:7d:56:07:ab:44:c0:4f:
f6:1e:ec:b2:d5:76:59:0b:e8:ce:82:57:4e:39:5d:99:ee:e2:
d8:81:e3:45:89:8f:32:23:c3:5f:14:70:6f:f7:0e:ad:07:63:
db:16:a7:6e:b1:c5:86:68:c2:f4:44:74:c5:78:db:5d:6f:ce:
d0:b0:51:d7:00:26:f4:07:02:13:16:f5:fc:1a:63:06:75:7c:
c4:65:1e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P44kH68adyEA0JSg6LeADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi
ZDk5ZTkwHhcNMjYwNDI3MTcwMTI4WhcNMjYwNDI4MTcwMTI4WjAzMTEwLwYDVQQD
Eyg1MDQyY2ViODY2YWVlMzgxZjg3ZDRjZTJjMmZmYTczOTFmMzBjMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIzfRGWoaG/QFQu8In317KdNQ8z2
j2zT8ZoPFFQmzAVQKESh/t5HzIpnGLjyCDbAvwAOxTnGF13TnVTjrhDeLP3Vn5cM
5jEZnjpijIRne92m1C94k/oO4chcij+1MKYw8qwPVbAbBcUSkBujozBREgEpADPn
aHOxSkAuQwedx1dri57KhxU3XBLM2qe8yrjQuXeLj3DrbssjxcsoLmelbYR6fgmE
IZ2gnR6hiN5QRg/TilAgextxgAQd8yQYvdBcVwzUEYJPUx5LIlccGpRC2jCmphyG
8aSPEwgoYDPq/eALdq8ioYOBlbt9uc2pkmE+ozPfSE5SfZK8GFvnjRrXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBCzrhmruOB+H1M4sL/pzkfMMHMMB8GA1UdIwQY
MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It
NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl
LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHPWy0xP
0BHaPPtd2Vl4XT94mQMoVAiacudAj28UlWuvIvLKjdhDyD7CLP52u+uH1cXm8KN0
uESdQrYhlfw51tcVE4dq7FyD6PFamatbGA8UC8+v+sv3Q2n0+S/gDWf2Ej4+cCLB
ygjwkrENJO6Io1GvFfe2H/2mPA+nTEoln7oaNbDV34+Zl9x7USy7u/a2LNs0fBE2
zTFhN0GghfWIjmX8jylMTDTMtdS6tEt9VgerRMBP9h7sstV2WQvozoJXTjldme7i
2IHjRYmPMiPDXxRwb/cOrQdj2xanbrHFhmjC9ER0xXjbXW/O0LBR1wAm9AcCExb1
/BpjBnV8xGUe3w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:28:38 2026 by rpki-client