Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: iGN2Esy58W9AW2X8ULN4PLSkKGbC8AYnhaLxq9AMD/I=
Subject key identifier: D4:0C:AA:1C:1F:B6:12:2B:E9:DA:CD:29:8A:18:FC:3A:CA:CD:A9:35
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019DCF0812231BE7BFFC749F2585A3A7E008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 13:01:45 +0000
Manifest this update: Mon 27 Apr 2026 13:01:45 +0000
Manifest next update: Tue 28 Apr 2026 13:01:45 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: eT5Z25dnf3b6tbEDW6m8GNKRQtSh5AZfKnNjr6EZSo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:12:23:1b:e7:bf:fc:74:9f:25:85:a3:a7:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Apr 27 13:01:45 2026 GMT
Not After : Apr 28 13:01:45 2026 GMT
Subject: CN=d40caa1c1fb6122be9dacd298a18fc3acacda935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:9a:f2:e6:d7:da:cd:16:56:71:aa:37:f0:
d2:0d:e2:ba:36:cb:50:0f:fa:c4:bc:d0:60:71:a0:
b4:b5:2b:d2:b2:4d:05:8c:c4:7a:99:ae:88:1d:3b:
43:56:13:7b:07:38:d6:5a:83:6d:57:67:90:c3:37:
80:bd:5e:64:63:09:8e:66:c2:f0:6b:b7:03:0e:b8:
3f:24:4b:b3:2a:6f:79:37:01:63:42:5f:31:2d:f9:
e7:c9:64:c1:e3:04:5e:4d:4a:ce:0c:36:ce:de:e2:
ec:f3:1e:55:9a:9d:35:e3:cb:df:39:c9:33:14:71:
33:a9:84:a6:28:39:01:0d:22:14:ba:c4:4a:99:42:
07:83:f3:70:f3:2b:b8:15:9b:81:ae:e0:33:03:80:
bb:2d:a1:69:6f:4e:8f:19:86:dc:4e:be:ed:4f:ce:
58:57:5d:1e:5b:59:45:08:8e:6c:e9:5f:33:f4:d7:
1d:bb:41:04:8d:e9:3e:73:5e:5d:09:9a:99:77:c1:
95:07:61:6c:99:66:7a:f4:a1:65:76:d6:20:aa:08:
01:31:c7:a1:26:48:91:43:c1:4d:8a:c5:bb:82:26:
c0:43:df:9d:f4:4b:a3:66:e1:41:91:bd:1c:46:0c:
67:0a:d3:63:f4:52:2c:4f:4d:3d:2f:4e:4e:79:8e:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:AA:1C:1F:B6:12:2B:E9:DA:CD:29:8A:18:FC:3A:CA:CD:A9:35
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:8e:1e:59:37:d1:20:bc:f6:75:c9:59:a9:82:1d:69:f9:
85:a9:14:42:3b:f4:d4:00:91:c7:28:a4:f7:e8:5d:58:a8:46:
9a:87:16:dd:61:5f:37:c3:35:d0:08:be:e4:31:36:03:39:0a:
9b:61:c2:da:ac:aa:cc:a0:b7:fc:a2:3b:2c:73:ba:71:b4:53:
ce:0f:3c:1b:66:1a:92:5f:17:68:d8:1c:5a:d0:39:fa:00:96:
3a:88:2b:c2:fa:ed:1c:1b:3b:a5:fe:ea:19:bf:9c:15:25:77:
07:e6:c4:55:e4:f6:51:2e:af:4d:11:e1:b8:86:9d:f6:d0:71:
4f:70:4d:c9:15:b1:af:c6:95:91:38:0f:ce:f5:6e:2f:07:a1:
dd:81:2f:d9:a8:2d:22:13:40:1f:ac:1f:8f:1e:1a:9a:44:4f:
e4:d7:b5:96:c2:dc:e2:3a:d3:73:9e:49:07:5a:9b:8e:c5:0b:
cb:45:e4:17:fe:a6:40:a1:0b:aa:40:12:f5:52:c0:5e:40:52:
57:b7:fd:27:3c:05:b8:67:1b:2d:7e:d6:b7:17:d0:47:93:8d:
eb:c5:d4:e4:d6:0d:1f:49:b8:f6:1e:df:24:c8:c1:e1:96:a7:
66:4d:7f:82:7a:82:15:88:9e:71:c1:1c:73:ff:27:d1:c3:83:
ed:bb:34:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PCBIjG+e//HSfJYWjp+AIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjYwNDI3MTMwMTQ1WhcNMjYwNDI4MTMwMTQ1WjAzMTEwLwYDVQQD
EyhkNDBjYWExYzFmYjYxMjJiZTlkYWNkMjk4YTE4ZmMzYWNhY2RhOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gya8ubX2s0WVnGqN/DSDeK6NstQ
D/rEvNBgcaC0tSvSsk0FjMR6ma6IHTtDVhN7BzjWWoNtV2eQwzeAvV5kYwmOZsLw
a7cDDrg/JEuzKm95NwFjQl8xLfnnyWTB4wReTUrODDbO3uLs8x5Vmp0148vfOckz
FHEzqYSmKDkBDSIUusRKmUIHg/Nw8yu4FZuBruAzA4C7LaFpb06PGYbcTr7tT85Y
V10eW1lFCI5s6V8z9Ncdu0EEjek+c15dCZqZd8GVB2FsmWZ69KFldtYgqggBMceh
JkiRQ8FNisW7gibAQ9+d9EujZuFBkb0cRgxnCtNj9FIsT009L05OeY6gqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQMqhwfthIr6drNKYoY/DrKzak1MB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHeOHlk3
0SC89nXJWamCHWn5hakUQjv01ACRxyik9+hdWKhGmocW3WFfN8M10Ai+5DE2AzkK
m2HC2qyqzKC3/KI7LHO6cbRTzg88G2Yakl8XaNgcWtA5+gCWOogrwvrtHBs7pf7q
Gb+cFSV3B+bEVeT2US6vTRHhuIad9tBxT3BNyRWxr8aVkTgPzvVuLweh3YEv2agt
IhNAH6wfjx4amkRP5Ne1lsLc4jrTc55JB1qbjsULy0XkF/6mQKELqkAS9VLAXkBS
V7f9JzwFuGcbLX7WtxfQR5ON68XU5NYNH0m49h7fJMjB4ZanZk1/gnqCFYieccEc
c/8n0cOD7bs0/w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:49:30 2026 by rpki-client