Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: QGzuv9+uuN6lHbSgBTTLzrSAlA98gZm+2i31faOon7w=
Subject key identifier: 59:AA:0B:31:20:4B:91:00:55:DF:BE:70:1B:43:E9:39:68:3A:94:8E
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019DDD68A4A4DAB96E6892858C982497536E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 18F1
Signing time: Thu 30 Apr 2026 08:01:55 +0000
Manifest this update: Thu 30 Apr 2026 08:01:55 +0000
Manifest next update: Fri 01 May 2026 08:01:55 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: xnWxmXR6B6H90ZzrAixrokO0zNmnr61t8bm1/E9wJuA=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: fmcwhaidzArdA6kvh0y-Aej9y88.roa (hash: bKNi3L38o7bRnB56dZw/HCV46FJZnj7F35iWZ5QhbjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:a4:a4:da:b9:6e:68:92:85:8c:98:24:97:53:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Apr 30 08:01:55 2026 GMT
Not After : May 1 08:01:55 2026 GMT
Subject: CN=59aa0b31204b910055dfbe701b43e939683a948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:0e:93:ea:5b:ba:79:3a:5c:81:28:ea:14:
82:f9:c4:64:8d:a7:4a:1f:d5:aa:ee:e5:f1:8b:7b:
0d:2e:3b:da:ad:ee:27:09:62:31:18:c0:06:2a:4d:
45:74:38:33:a3:dd:6f:34:7f:50:89:6e:9b:e7:71:
3c:bb:bd:29:7c:8d:ba:35:3e:c9:d3:4e:7d:af:d7:
26:eb:12:15:cc:7c:8d:1a:e6:2d:8e:ef:3e:fc:d2:
15:0e:ef:b6:4e:95:19:5e:29:37:59:75:95:90:69:
d0:7a:50:aa:50:63:94:d8:59:d6:ef:2a:ea:36:93:
58:e5:1c:c6:45:7b:34:91:06:14:41:ab:16:dc:9b:
d5:64:db:dd:a2:ca:d5:15:12:19:13:86:c7:c1:2e:
a2:4d:ac:f2:14:a9:f8:31:87:a5:77:76:d3:3d:68:
27:1e:cb:26:5d:6e:15:b2:e3:fd:ff:b3:0f:a1:b1:
87:f6:c1:a7:01:a6:00:4b:15:f7:59:02:47:93:5b:
db:b2:ee:96:f4:b4:81:12:fb:12:30:4a:fc:1b:78:
87:36:08:8d:0c:9e:3a:e9:13:ec:20:da:5e:04:a5:
dd:4d:d8:e4:c0:ec:ba:9e:88:4c:f2:0f:50:f8:aa:
df:df:cc:df:48:57:b9:3f:44:0e:23:7f:8d:b6:df:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:0B:31:20:4B:91:00:55:DF:BE:70:1B:43:E9:39:68:3A:94:8E
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0f:d1:0d:f7:31:ae:11:3f:71:68:b0:5d:e9:e2:97:a4:b8:
a7:a1:07:1b:b3:19:f4:12:3d:49:b2:f6:72:79:b9:c1:e7:b4:
32:e1:8f:97:f0:ba:38:33:b3:c1:19:53:76:00:f5:32:d3:a9:
15:8d:1e:5c:4f:e8:5a:4b:ad:81:32:9d:07:be:3f:c9:f3:4e:
72:db:4f:3c:3b:39:f0:a5:22:ac:b2:a9:5a:f3:c6:d0:72:e9:
46:c2:81:61:ae:d7:4d:8b:85:02:d3:a4:71:42:de:67:9e:df:
db:6b:55:83:a7:75:80:1a:d8:5f:14:8f:b4:08:92:5c:d5:23:
5f:7b:9c:12:59:1d:29:59:0d:f7:f8:f2:28:6e:dd:7e:4b:01:
7e:af:29:3d:f4:cc:4c:60:5c:dc:20:4c:5b:d0:4c:d5:42:f9:
e3:5c:e6:6f:97:da:04:b9:c9:11:a7:a1:b1:48:5f:62:ef:73:
ba:78:fa:49:e3:d5:d1:d6:58:e3:86:d6:3c:a2:a6:52:7f:3d:
db:79:1b:d0:47:51:25:50:c1:39:7c:18:57:ef:2e:ce:0c:cc:
e0:34:52:f6:ba:4e:f9:01:2a:4a:1b:c2:59:e3:46:b2:c5:f0:
90:90:89:c9:8e:7e:9e:2a:1e:ad:30:8e:18:cb:a2:a8:b3:33:
71:c8:42:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daKSk2rluaJKFjJgkl1NuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjYwNDMwMDgwMTU1WhcNMjYwNTAxMDgwMTU1WjAzMTEwLwYDVQQD
Eyg1OWFhMGIzMTIwNGI5MTAwNTVkZmJlNzAxYjQzZTkzOTY4M2E5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsooOk+pbunk6XIEo6hSC+cRkjadK
H9Wq7uXxi3sNLjvare4nCWIxGMAGKk1FdDgzo91vNH9QiW6b53E8u70pfI26NT7J
0059r9cm6xIVzHyNGuYtju8+/NIVDu+2TpUZXik3WXWVkGnQelCqUGOU2FnW7yrq
NpNY5RzGRXs0kQYUQasW3JvVZNvdosrVFRIZE4bHwS6iTazyFKn4MYeld3bTPWgn
HssmXW4VsuP9/7MPobGH9sGnAaYASxX3WQJHk1vbsu6W9LSBEvsSMEr8G3iHNgiN
DJ466RPsINpeBKXdTdjkwOy6nohM8g9Q+Krf38zfSFe5P0QOI3+Ntt+7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmqCzEgS5EAVd++cBtD6TloOpSOMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg/RDfcx
rhE/cWiwXenil6S4p6EHG7MZ9BI9SbL2cnm5wee0MuGPl/C6ODOzwRlTdgD1MtOp
FY0eXE/oWkutgTKdB74/yfNOcttPPDs58KUirLKpWvPG0HLpRsKBYa7XTYuFAtOk
cULeZ57f22tVg6d1gBrYXxSPtAiSXNUjX3ucElkdKVkN9/jyKG7dfksBfq8pPfTM
TGBc3CBMW9BM1UL541zmb5faBLnJEaehsUhfYu9zunj6SePV0dZY44bWPKKmUn89
23kb0EdRJVDBOXwYV+8uzgzM4DRS9rpO+QEqShvCWeNGssXwkJCJyY5+nioerTCO
GMuiqLMzcchCjA==
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:30:56 2026 by rpki-client