Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: hMz0smpYdXcdwZtZzRCVOaezoNdDVEU09XVySrV5F7g=
Subject key identifier: C6:D4:37:9D:AA:86:D1:6B:F6:1F:A4:85:26:63:2F:58:3B:85:5D:C4
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 019D9BF5D1C6031B45510EE468957F558277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:01:11 +0000
Manifest this update: Fri 17 Apr 2026 15:01:11 +0000
Manifest next update: Sat 18 Apr 2026 15:01:11 +0000
Files and hashes: 1: 0ahuT_cQ-yr70ImuaU2y8TIM6YI.roa (hash: 2Sp8oKtDy+w7qYM5rV8PIyGUx3izF3kL/3cBlfuy8Ic=)
2: REUxyMPs7GWbZsF8OEuAFX9QDL8.roa (hash: qehVRR9bmjq29nQypelWb8SFMyO97IaXW9uMo+fR3FU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: zk5ysgo0Eum+H39pcPkEUKFJjTl2wThtY1XRtQRsOq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:d1:c6:03:1b:45:51:0e:e4:68:95:7f:55:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Apr 17 15:01:11 2026 GMT
Not After : Apr 18 15:01:11 2026 GMT
Subject: CN=c6d4379daa86d16bf61fa48526632f583b855dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:2a:d3:a4:aa:73:d4:7f:56:09:20:f8:74:
01:87:ac:5e:71:74:04:47:e5:6f:d1:48:f7:af:ac:
7f:94:05:3a:bf:63:84:62:78:94:d7:ec:ee:66:0d:
27:9f:14:93:00:99:ae:38:06:56:a6:2f:17:0d:15:
83:cf:4b:77:1b:c9:dc:a8:b1:09:4b:d1:d8:74:bf:
9d:1d:4c:45:96:75:e3:01:55:68:3a:11:1d:82:dd:
f6:3b:99:fb:6c:f8:0e:6d:cd:90:36:27:b2:de:29:
d6:1d:86:c3:0f:82:ca:99:3c:17:41:b7:fa:d6:32:
26:6e:37:49:b2:fa:e5:a9:04:0e:f4:16:f0:9d:8c:
70:ed:76:4f:e4:29:b3:3c:8f:19:ab:12:1d:7d:e2:
e4:1a:c6:dc:e4:3c:70:49:05:84:3b:13:9d:6c:49:
e5:6e:b3:7a:43:54:a2:d4:25:fd:57:05:a0:1f:01:
92:b7:91:63:83:de:81:bd:49:08:96:8c:19:60:1a:
3a:59:97:97:89:45:14:9f:cb:bc:eb:70:57:c2:da:
85:c6:e0:17:6d:2d:1a:e5:f3:d1:d8:8c:13:b3:fe:
d3:34:50:f2:80:64:bd:3a:4b:77:3a:e1:60:a8:91:
30:ba:c7:a5:35:55:60:60:e0:38:cf:55:f1:0a:59:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:37:9D:AA:86:D1:6B:F6:1F:A4:85:26:63:2F:58:3B:85:5D:C4
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3f:b2:b7:46:67:69:fa:e2:a0:0b:93:73:0c:4a:0e:fd:41:
6a:46:9c:11:f3:0d:4f:f1:9b:a3:c1:d8:c3:ba:54:dc:16:7f:
5d:47:63:a1:3d:02:ad:8b:da:eb:1d:86:c9:1d:ff:e7:6c:73:
a3:c4:74:3e:2c:82:ee:6f:07:b5:2c:60:52:59:fa:f6:23:93:
8c:eb:ad:cd:0e:33:05:7b:df:75:3e:ee:ef:82:48:ad:99:08:
d1:65:d5:8e:9f:37:6f:32:08:fc:d0:72:02:da:c5:f3:e6:9e:
44:62:be:43:2b:2a:3b:fe:5f:b6:64:d1:6b:f9:3a:82:c8:42:
cd:ee:5a:29:04:a0:af:f9:2d:be:14:8d:c1:b3:3b:6f:91:de:
44:83:9c:cb:62:9f:ba:6d:ae:2b:0c:20:3d:3f:66:dd:12:70:
13:eb:47:1b:b7:08:74:53:df:45:c4:a0:29:8e:60:66:a7:2f:
e3:b9:b6:03:6e:04:40:5c:46:92:20:ec:d9:7d:b9:ad:cd:f3:
b4:e2:4a:2d:1d:b2:b2:96:02:fd:34:7f:0b:fb:50:80:89:88:
a8:8d:5f:1c:e8:aa:13:c9:c5:14:71:6a:77:61:15:ce:16:c6:
a3:60:22:a0:8b:b5:51:82:72:c1:9d:bf:4d:a2:09:1d:9f:d4:
63:57:f6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9dHGAxtFUQ7kaJV/VYJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjAxZDdjYzgyMGRjNzE5MTVlYTkzMDY3M2VmNDdmMjQx
YTcxYzgwHhcNMjYwNDE3MTUwMTExWhcNMjYwNDE4MTUwMTExWjAzMTEwLwYDVQQD
EyhjNmQ0Mzc5ZGFhODZkMTZiZjYxZmE0ODUyNjYzMmY1ODNiODU1ZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwQq06Sqc9R/Vgkg+HQBh6xecXQE
R+Vv0Uj3r6x/lAU6v2OEYniU1+zuZg0nnxSTAJmuOAZWpi8XDRWDz0t3G8ncqLEJ
S9HYdL+dHUxFlnXjAVVoOhEdgt32O5n7bPgObc2QNiey3inWHYbDD4LKmTwXQbf6
1jImbjdJsvrlqQQO9BbwnYxw7XZP5CmzPI8ZqxIdfeLkGsbc5DxwSQWEOxOdbEnl
brN6Q1Si1CX9VwWgHwGSt5Fjg96BvUkIlowZYBo6WZeXiUUUn8u863BXwtqFxuAX
bS0a5fPR2IwTs/7TNFDygGS9Okt3OuFgqJEwuselNVVgYOA4z1XxClkjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbUN52qhtFr9h+khSZjL1g7hV3EMB8GA1UdIwQY
MBaAFLdgHXzIINxxkV6pMGc+9H8kGnHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEt
NjcxZDY4MTg4Njg4LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yZjQ1YWUtNzVjMC00MzljLWEzMTEtNjcxZDY4MTg4Njg4
LzEvdDJBZGZNZ2czSEdSWHFrd1p6NzBmeVFhY2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtT+yt0Zn
afrioAuTcwxKDv1BakacEfMNT/Gbo8HYw7pU3BZ/XUdjoT0CrYva6x2GyR3/52xz
o8R0PiyC7m8HtSxgUln69iOTjOutzQ4zBXvfdT7u74JIrZkI0WXVjp83bzII/NBy
AtrF8+aeRGK+QysqO/5ftmTRa/k6gshCze5aKQSgr/ktvhSNwbM7b5HeRIOcy2Kf
um2uKwwgPT9m3RJwE+tHG7cIdFPfRcSgKY5gZqcv47m2A24EQFxGkiDs2X25rc3z
tOJKLR2yspYC/TR/C/tQgImIqI1fHOiqE8nFFHFqd2EVzhbGo2AioIu1UYJywZ2/
TaIJHZ/UY1f2+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:30 2026 by rpki-client