Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: 0S25Hm5VyTN3tfySfMN9xs6Lj+ciPcWgDfZmb5+EcKY=
Subject key identifier: 78:23:8F:0E:24:C4:85:44:D0:DB:CA:33:31:EB:E1:1B:DA:13:A4:56
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019DA340FCF702140A7749B1CACC85767817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 01:00:38 +0000
Manifest this update: Sun 19 Apr 2026 01:00:38 +0000
Manifest next update: Mon 20 Apr 2026 01:00:38 +0000
Files and hashes: 1: UlgMubvL0b05NPo0OYBZNNMYbpc.roa (hash: 5BRGLDe+CLca7bIM6Jp7/JjKHJiwcAuqklCH8T20ndI=)
2: WaF459Cc2uKlfeZQW71nNqM2m1o.roa (hash: INQ6UPfyYeMJRdxCsd5oJRH61VvqzRfFQEhDkUi1R2A=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: TR8ygzNKRDA+I8rtqCjKIIjMTGV6z3QPWeXbyr0hYXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:fc:f7:02:14:0a:77:49:b1:ca:cc:85:76:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Apr 19 01:00:38 2026 GMT
Not After : Apr 20 01:00:38 2026 GMT
Subject: CN=78238f0e24c48544d0dbca3331ebe11bda13a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:ae:95:65:0f:fa:66:43:2c:02:c1:32:89:
5f:0f:08:99:0f:14:5a:b4:08:b8:d6:28:1c:33:35:
76:05:c7:67:84:b6:c5:f3:88:1b:f6:cc:ad:55:9b:
80:ba:6f:f8:e0:bf:09:2d:1c:b8:e6:45:a4:2d:e8:
c3:c4:6c:55:0e:1e:c4:73:30:5f:95:bf:0f:bd:a3:
ab:b8:c2:4a:51:25:15:08:d9:1a:3d:cb:83:06:e2:
fa:66:f5:cd:4f:56:d9:74:da:3d:a6:2c:9d:8b:e7:
d8:fa:d6:d6:0b:32:5c:3b:51:f7:ec:a7:b9:81:5a:
99:16:79:4e:a1:bb:42:23:b5:7b:4a:b0:b3:39:20:
f5:ba:90:eb:65:11:4b:0a:e8:54:35:e8:53:ed:c6:
a8:3b:c2:09:3a:fd:ed:04:c5:dc:f9:2f:49:e6:1f:
6e:7b:14:7e:00:f4:f6:9d:34:18:6b:d4:4d:b3:20:
71:3a:99:55:58:c7:16:61:a6:5b:84:05:4f:3a:7f:
ec:2e:2a:53:d4:8f:bf:a4:5d:d5:53:fc:32:2b:64:
e7:6c:cd:95:b5:93:a1:12:65:ea:8c:f0:37:ab:49:
5e:6c:6c:ef:3a:a9:04:cf:3a:06:58:40:22:3d:71:
4a:49:7d:28:16:7d:3a:cc:fe:8f:24:0d:39:60:95:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:8F:0E:24:C4:85:44:D0:DB:CA:33:31:EB:E1:1B:DA:13:A4:56
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:16:60:bf:63:f6:87:87:fc:14:e3:c7:71:ee:7a:70:18:ae:
8d:48:c7:48:8e:62:2d:22:26:d0:75:64:ae:12:33:32:19:df:
0e:c6:bb:37:f6:b1:83:7f:02:af:7e:ba:bb:e1:be:81:68:07:
e1:2c:8c:b4:dd:cc:6c:cb:c7:6b:c7:39:05:60:7c:ba:ea:28:
b4:9d:22:66:88:7c:2d:fc:13:f5:e5:e8:bb:41:76:1c:f2:2e:
6f:2e:fa:a6:eb:5a:d1:9a:bb:9d:42:e9:1e:c4:75:8b:e5:31:
4c:5a:8a:45:98:b5:f3:2f:01:56:5a:b4:c7:c7:2c:fc:8c:90:
f7:a8:f8:cd:a4:f1:d3:ed:3f:42:b9:55:29:10:92:5e:54:30:
7d:0d:d2:fa:fd:6b:8b:4e:6a:50:66:87:bd:02:c9:4d:74:e2:
8d:89:d8:ee:ab:08:67:b7:1a:e1:fd:08:0b:66:a2:b9:25:df:
db:6d:71:04:b0:de:f3:70:4a:17:04:6e:9a:61:5b:d6:33:17:
67:74:07:0a:af:bc:ec:b3:1b:89:14:fd:cc:31:61:0b:8b:81:
8c:79:24:a7:3d:17:01:3a:1e:0a:08:92:97:fa:8f:f8:d9:97:
f5:4a:63:7f:7b:3f:bd:3c:1d:48:b8:10:49:6a:2d:8b:ad:c1:
82:9b:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:38 2026 by rpki-client