Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: cGrBYDmor20Fg/Ca6mVoSER5yUBFmBnrqDb5xUu61W4=
Subject key identifier: EB:5D:57:45:E4:64:D2:D3:97:E0:66:B5:8B:E5:25:7F:FA:74:06:6B
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019D9886664A75AC7AB153215BCC84FE0DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 23:00:37 +0000
Manifest this update: Thu 16 Apr 2026 23:00:37 +0000
Manifest next update: Fri 17 Apr 2026 23:00:37 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: phT45m3RNyxV6s453k/uAgCpqM06g0kNxJQHvoTP30I=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:66:4a:75:ac:7a:b1:53:21:5b:cc:84:fe:0d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Apr 16 23:00:37 2026 GMT
Not After : Apr 17 23:00:37 2026 GMT
Subject: CN=eb5d5745e464d2d397e066b58be5257ffa74066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:57:5e:31:73:96:67:2b:de:d2:27:d0:58:
c6:f4:d1:b0:49:c8:aa:05:8a:ee:fe:02:23:77:86:
d9:d9:19:b0:7b:3b:13:56:12:fc:71:13:32:9b:26:
3b:56:d9:64:79:77:13:da:b5:ba:a1:9b:e1:fc:2c:
5d:d7:11:55:23:24:49:3d:d8:e8:99:b0:75:e2:6a:
25:3c:5d:a0:85:a2:25:53:3a:b1:b3:aa:63:1d:ac:
77:10:40:1d:d4:56:f9:cd:1b:ab:51:59:59:7e:1c:
38:3e:c1:d0:37:b8:29:4f:a9:25:f6:f0:b3:05:41:
49:76:34:8d:67:af:a5:56:93:01:4f:3e:b7:84:25:
03:56:6f:c1:49:9a:94:85:45:b9:bc:e2:f9:58:42:
a5:1f:b1:31:6e:94:16:0f:b6:51:23:71:e3:d0:28:
d0:a9:a0:89:5d:a3:13:c3:1c:50:5c:75:2e:b0:a1:
bc:6b:81:df:1c:58:0a:f1:cf:de:a4:01:3a:d0:29:
e3:26:da:50:ee:85:3e:60:9d:f4:16:2b:54:ec:fc:
cd:56:b7:c3:02:98:28:3a:a5:ab:9d:69:00:8a:38:
64:e1:f7:8b:78:69:de:19:ab:cf:71:29:f9:73:69:
2b:75:40:49:eb:6d:5d:cb:c0:e2:a9:15:fa:82:58:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:57:45:E4:64:D2:D3:97:E0:66:B5:8B:E5:25:7F:FA:74:06:6B
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bb:37:58:34:27:a8:bf:e0:46:3f:18:82:a0:06:fb:9d:19:
97:fd:b5:49:3f:d8:e9:1f:01:6f:86:a0:2f:12:27:16:ab:65:
c5:4c:d9:20:db:de:be:f3:15:67:dd:ae:04:63:52:8e:6e:e0:
9d:cd:82:c5:2a:b7:7f:ee:d5:7b:15:bc:e1:bd:a9:d1:25:16:
7a:bc:1b:81:a2:91:7e:5c:6f:e0:c5:1a:1f:f0:b6:00:5b:5c:
8b:87:d0:df:e3:e6:e0:5c:a0:81:68:e0:47:cc:1c:43:bd:e0:
22:85:1c:67:1b:82:69:fa:95:73:d5:f6:12:68:52:bc:be:1a:
34:c6:46:e9:2b:a5:58:96:ca:f0:1b:5c:97:46:67:29:c9:db:
79:6b:86:53:9c:11:1b:92:ec:d5:df:b8:f9:df:36:78:d3:5b:
91:a4:e4:4c:95:4b:c2:f9:3f:77:3e:35:c0:f3:e6:2f:f7:59:
fe:fc:03:aa:e1:9f:1e:4a:b2:d0:8c:4d:a9:2c:3e:73:6d:ae:
ce:eb:7a:6f:95:88:b9:a9:a2:7c:a8:06:04:3f:78:7a:56:51:
22:e4:86:22:c8:b7:93:ea:15:08:13:df:d6:eb:e7:30:37:6e:
90:a2:c0:8a:11:f2:4e:b4:e0:66:2c:a9:51:13:28:1a:21:e5:
5a:9c:99:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhmZKdax6sVMhW8yE/g38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjYwNDE2MjMwMDM3WhcNMjYwNDE3MjMwMDM3WjAzMTEwLwYDVQQD
EyhlYjVkNTc0NWU0NjRkMmQzOTdlMDY2YjU4YmU1MjU3ZmZhNzQwNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1XXjFzlmcr3tIn0FjG9NGwSciq
BYru/gIjd4bZ2RmwezsTVhL8cRMymyY7VtlkeXcT2rW6oZvh/Cxd1xFVIyRJPdjo
mbB14molPF2ghaIlUzqxs6pjHax3EEAd1Fb5zRurUVlZfhw4PsHQN7gpT6kl9vCz
BUFJdjSNZ6+lVpMBTz63hCUDVm/BSZqUhUW5vOL5WEKlH7ExbpQWD7ZRI3Hj0CjQ
qaCJXaMTwxxQXHUusKG8a4HfHFgK8c/epAE60CnjJtpQ7oU+YJ30FitU7PzNVrfD
ApgoOqWrnWkAijhk4feLeGneGavPcSn5c2krdUBJ621dy8DiqRX6glhzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtdV0XkZNLTl+BmtYvlJX/6dAZrMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbs3WDQn
qL/gRj8YgqAG+50Zl/21ST/Y6R8Bb4agLxInFqtlxUzZINvevvMVZ92uBGNSjm7g
nc2CxSq3f+7VexW84b2p0SUWerwbgaKRflxv4MUaH/C2AFtci4fQ3+Pm4FyggWjg
R8wcQ73gIoUcZxuCafqVc9X2EmhSvL4aNMZG6SulWJbK8Btcl0ZnKcnbeWuGU5wR
G5Ls1d+4+d82eNNbkaTkTJVLwvk/dz41wPPmL/dZ/vwDquGfHkqy0IxNqSw+c22u
zut6b5WIuamifKgGBD94elZRIuSGIsi3k+oVCBPf1uvnMDdukKLAihHyTrTgZiyp
URMoGiHlWpyZsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:53 2026 by rpki-client