Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: 0Plquh5ed9phOZOiR2wt+8m3RhxjgrVur8kOkaRzZnk=
Subject key identifier: 41:76:36:1C:41:BF:01:AA:6D:2F:AF:B3:E2:B5:DB:FE:60:29:9C:60
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019D9A3E125EDC5F1709FE3F5D4E6B0C1D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: N4urLvm45wf2pQiJNa1aE3QTuoEgba+z8FvIT3svedU=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:12:5e:dc:5f:17:09:fe:3f:5d:4e:6b:0c:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=4176361c41bf01aa6d2fafb3e2b5dbfe60299c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:b2:32:f4:92:f0:93:74:dc:97:ab:c1:f1:
2a:2c:79:cb:1d:c3:b8:2c:17:3d:b4:56:0c:31:c3:
e0:20:33:0d:fa:3b:48:bb:c8:42:a5:af:d4:0b:1d:
39:f9:74:fb:7f:51:95:51:73:29:0f:e3:a6:cc:cd:
53:20:b5:86:51:69:fb:aa:c5:e8:0a:0c:e0:8e:75:
4d:81:5a:6c:7c:17:7d:31:03:e6:14:aa:05:3c:c6:
f1:b7:2d:d6:d8:00:71:2d:63:1b:16:47:dc:9a:8b:
9b:a7:3b:cc:e6:15:a3:a3:28:2f:11:fc:d9:6d:16:
23:20:4d:a4:ed:27:5d:af:eb:0e:b4:a1:f6:2d:7d:
d2:18:b4:20:9d:ac:02:1f:5c:bf:07:e7:5c:a1:2b:
82:a6:a7:19:5e:e3:be:9e:b0:a7:57:26:0f:00:64:
71:dd:9f:db:41:3e:79:9a:aa:75:6f:09:c2:9c:f9:
99:42:1e:04:99:d9:f4:e3:45:f4:ad:5a:9e:41:ad:
97:bb:e8:77:97:a7:39:56:8e:e5:5b:e9:04:27:42:
2f:82:bb:fa:dc:80:ba:fd:c1:03:ef:6b:2d:7c:0f:
64:43:a1:30:cf:18:02:7f:95:e0:7f:d4:39:82:25:
66:cf:44:5a:73:b0:33:d8:4c:73:0d:a2:03:c8:74:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:36:1C:41:BF:01:AA:6D:2F:AF:B3:E2:B5:DB:FE:60:29:9C:60
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:25:97:d0:ec:12:01:57:30:d1:32:b1:26:a9:83:90:ff:
d7:9d:13:d2:9f:d8:ec:cb:17:37:9b:c1:91:73:b7:53:7c:a2:
b6:1f:18:c6:66:95:04:57:d0:44:78:cb:b9:ae:da:c8:c4:20:
d9:5c:81:33:1e:63:3f:51:9b:2c:c7:82:a0:f6:74:76:51:f4:
8a:7b:74:a2:74:db:52:03:57:65:be:d8:1c:a9:3a:5c:16:11:
dd:d9:ec:2f:26:e7:f6:67:08:42:6d:a4:e4:a2:be:ce:a7:29:
11:1b:b2:96:3a:b3:a0:30:c9:79:82:69:d5:e5:18:28:12:8a:
d2:1d:a0:ea:d6:ac:98:39:f9:77:d3:4e:70:39:b8:cf:73:9d:
a5:04:48:07:88:ca:0b:17:a8:02:64:1c:c2:b5:98:32:e0:54:
75:71:b9:02:24:ea:b6:2e:3c:bd:17:36:d7:30:cb:40:15:a1:
8a:84:08:f5:f7:2e:80:5c:da:37:aa:e8:ca:1b:aa:42:82:69:
78:11:35:cd:7d:d0:d7:e6:01:c1:c8:da:54:c3:d5:47:5b:89:
7a:db:19:fe:a9:ae:cf:44:87:0f:e2:e0:9b:27:7f:94:3c:eb:
22:6a:76:08:2a:65:e1:c4:00:5d:9a:d7:5a:97:81:80:06:cb:
36:44:b4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhJe3F8XCf4/XU5rDB0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjYwNDE3MDcwMDUyWhcNMjYwNDE4MDcwMDUyWjAzMTEwLwYDVQQD
Eyg0MTc2MzYxYzQxYmYwMWFhNmQyZmFmYjNlMmI1ZGJmZTYwMjk5YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa+yMvSS8JN03JerwfEqLHnLHcO4
LBc9tFYMMcPgIDMN+jtIu8hCpa/UCx05+XT7f1GVUXMpD+OmzM1TILWGUWn7qsXo
CgzgjnVNgVpsfBd9MQPmFKoFPMbxty3W2ABxLWMbFkfcmoubpzvM5hWjoygvEfzZ
bRYjIE2k7Sddr+sOtKH2LX3SGLQgnawCH1y/B+dcoSuCpqcZXuO+nrCnVyYPAGRx
3Z/bQT55mqp1bwnCnPmZQh4Emdn040X0rVqeQa2Xu+h3l6c5Vo7lW+kEJ0Ivgrv6
3IC6/cED72stfA9kQ6EwzxgCf5Xgf9Q5giVmz0Rac7Az2ExzDaIDyHQQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF2NhxBvwGqbS+vs+K12/5gKZxgMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNIll9Ds
EgFXMNEysSapg5D/150T0p/Y7MsXN5vBkXO3U3yith8YxmaVBFfQRHjLua7ayMQg
2VyBMx5jP1GbLMeCoPZ0dlH0int0onTbUgNXZb7YHKk6XBYR3dnsLybn9mcIQm2k
5KK+zqcpERuyljqzoDDJeYJp1eUYKBKK0h2g6tasmDn5d9NOcDm4z3OdpQRIB4jK
CxeoAmQcwrWYMuBUdXG5AiTqti48vRc21zDLQBWhioQI9fcugFzaN6royhuqQoJp
eBE1zX3Q1+YBwcjaVMPVR1uJetsZ/qmuz0SHD+Lgmyd/lDzrImp2CCpl4cQAXZrX
WpeBgAbLNkS0XA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:19 2026 by rpki-client