Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: QKV6f7k/j/tA1xUfVwPPdNEnOQIKvHHYl93T7OQLUHU=
Subject key identifier: D0:2E:6E:D0:22:04:5C:D9:88:0F:3A:4F:75:DA:BE:AB:3B:A1:50:F5
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019DD087D60FAF0AC641A82B329B653140FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 20:00:56 +0000
Manifest this update: Mon 27 Apr 2026 20:00:56 +0000
Manifest next update: Tue 28 Apr 2026 20:00:56 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: /jwnR55hihwyykjkOWFpGCrQ6SyyI+fEuAO2OJkquCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:d6:0f:af:0a:c6:41:a8:2b:32:9b:65:31:40:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Apr 27 20:00:56 2026 GMT
Not After : Apr 28 20:00:56 2026 GMT
Subject: CN=d02e6ed022045cd9880f3a4f75dabeab3ba150f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:e8:96:6b:d0:40:b9:d9:dd:0c:e0:2d:d5:
99:d8:86:a5:28:56:6d:65:bc:94:2e:c5:e9:fd:41:
33:f8:48:2e:f1:f4:b2:ed:fd:5d:17:27:40:e9:e9:
a7:93:6f:46:d4:2a:4b:fb:2f:f1:3b:ed:66:30:5b:
0f:d8:45:3d:2e:c0:e5:7d:96:4a:52:03:58:97:84:
85:c4:0e:3d:4e:36:9e:43:67:ff:21:ef:d8:27:a9:
94:d2:cb:06:ca:24:05:08:b1:bd:d1:51:08:ca:4f:
71:68:be:34:7e:fb:b9:26:cc:8d:ee:25:76:26:e4:
35:a2:f0:a2:e8:8d:8e:ab:8c:87:bc:30:dd:5c:03:
8a:1d:b5:65:af:bf:79:3b:e2:94:eb:0f:8d:8e:dc:
e1:f7:96:36:d1:bd:5d:dd:8a:0f:cb:19:d7:6f:5b:
43:52:a0:63:e0:84:00:03:e1:f3:55:a2:b9:99:b6:
dd:05:8d:c7:d8:85:52:4a:30:1e:90:25:bf:08:01:
0b:6e:11:aa:18:8e:17:fd:ad:16:5c:6c:09:3d:9f:
40:e3:20:74:24:23:d0:f6:32:c7:85:59:4e:67:4f:
36:58:e5:94:7d:88:ac:de:c0:57:b6:c5:17:a1:1b:
6c:fa:f2:9e:96:ac:a2:05:5a:2e:55:6c:44:2a:60:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:6E:D0:22:04:5C:D9:88:0F:3A:4F:75:DA:BE:AB:3B:A1:50:F5
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:1a:a0:40:2c:5f:ce:3a:62:94:e5:6c:0b:58:93:a0:9f:
9e:5d:a2:5c:33:dd:2b:f3:e6:97:3f:fb:78:93:02:05:ae:75:
0a:7a:d8:cd:9a:5f:ee:b9:d8:0e:09:f6:2f:f7:76:98:5f:80:
0d:f6:18:2a:68:64:95:93:05:72:de:d4:8a:ba:9e:b5:18:0b:
f4:35:8c:c3:2f:dd:07:47:71:61:1d:4b:3c:ab:06:45:e7:83:
2e:80:f5:e3:42:b6:09:db:a0:b2:5d:46:7a:37:88:cd:92:4c:
b1:a0:ac:ee:6d:ca:19:e5:3a:ef:7b:da:92:b8:22:ed:27:3c:
af:5b:a2:5c:b9:25:89:d5:5e:2d:8b:cf:92:a1:e2:70:5e:a1:
45:20:cb:65:2b:3a:f1:2b:4f:f6:16:e9:a4:c9:bc:38:53:82:
cd:2d:70:7b:f1:e5:aa:3a:ab:7d:35:a4:4e:d0:e7:1c:d3:2e:
19:77:5a:6d:2b:c4:e9:66:9d:dc:2d:b4:61:3c:64:73:5d:86:
52:90:4a:6a:6a:91:d8:58:f2:7f:d7:9f:09:27:ee:28:4e:a0:
bd:93:6c:ae:2b:02:ec:9e:19:58:30:13:6f:18:3a:3b:30:cc:
8a:04:c6:12:63:4a:0f:b9:84:7f:a6:f6:7c:8f:3d:3c:1a:ef:
1d:50:99:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qh9YPrwrGQagrMptlMUD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjYwNDI3MjAwMDU2WhcNMjYwNDI4MjAwMDU2WjAzMTEwLwYDVQQD
EyhkMDJlNmVkMDIyMDQ1Y2Q5ODgwZjNhNGY3NWRhYmVhYjNiYTE1MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHbolmvQQLnZ3QzgLdWZ2IalKFZt
ZbyULsXp/UEz+Egu8fSy7f1dFydA6emnk29G1CpL+y/xO+1mMFsP2EU9LsDlfZZK
UgNYl4SFxA49TjaeQ2f/Ie/YJ6mU0ssGyiQFCLG90VEIyk9xaL40fvu5JsyN7iV2
JuQ1ovCi6I2Oq4yHvDDdXAOKHbVlr795O+KU6w+Njtzh95Y20b1d3YoPyxnXb1tD
UqBj4IQAA+HzVaK5mbbdBY3H2IVSSjAekCW/CAELbhGqGI4X/a0WXGwJPZ9A4yB0
JCPQ9jLHhVlOZ082WOWUfYis3sBXtsUXoRts+vKelqyiBVouVWxEKmBluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAubtAiBFzZiA86T3Xavqs7oVD1MB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKk0aoEAs
X846YpTlbAtYk6Cfnl2iXDPdK/Pmlz/7eJMCBa51CnrYzZpf7rnYDgn2L/d2mF+A
DfYYKmhklZMFct7UirqetRgL9DWMwy/dB0dxYR1LPKsGReeDLoD140K2Cdugsl1G
ejeIzZJMsaCs7m3KGeU673vakrgi7Sc8r1uiXLklidVeLYvPkqHicF6hRSDLZSs6
8StP9hbppMm8OFOCzS1we/HlqjqrfTWkTtDnHNMuGXdabSvE6Wad3C20YTxkc12G
UpBKamqR2Fjyf9efCSfuKE6gvZNsrisC7J4ZWDATbxg6OzDMigTGEmNKD7mEf6b2
fI89PBrvHVCZsw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:27 2026 by rpki-client