Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: HsDZSFH6y7PVQii04ZGPlcxpLRT/DZcs4KfQTkW6K/M=
Subject key identifier: C1:7E:73:E9:4E:BA:73:DF:C0:63:A8:56:BA:AE:F3:52:91:44:3C:07
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019D9B874096E0CB9ED27668DE01E86ECB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 13:00:25 +0000
Manifest this update: Fri 17 Apr 2026 13:00:25 +0000
Manifest next update: Sat 18 Apr 2026 13:00:25 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: U1RntaeUS1yyF4cHro+/ZDdRN4YhYUIedTMdGrHCrxM=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:40:96:e0:cb:9e:d2:76:68:de:01:e8:6e:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Apr 17 13:00:25 2026 GMT
Not After : Apr 18 13:00:25 2026 GMT
Subject: CN=c17e73e94eba73dfc063a856baaef35291443c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:43:6a:94:9e:cf:7b:ce:7f:4d:26:de:70:
48:5d:4a:a0:bf:ae:bd:ec:28:9f:25:52:d8:85:5b:
3f:c4:7f:bd:51:b2:86:5c:48:30:74:35:8d:40:b2:
7f:2a:1d:61:43:60:31:a6:24:d8:b9:f7:05:a0:b4:
a4:a5:56:32:bf:7b:a3:6a:ee:15:1b:02:2c:d5:9c:
d1:e1:20:d2:c4:62:7a:e9:34:ec:e2:c5:9d:0d:e4:
c3:c9:bf:39:c0:3e:30:99:05:21:e5:40:45:44:86:
35:85:e7:9a:fe:37:a2:df:89:19:51:55:f3:5f:4c:
49:64:a1:73:9a:bf:28:11:04:26:54:e2:1e:e1:05:
e4:4d:6f:44:6c:7a:43:73:e1:d5:c3:dc:3a:2b:65:
3e:ad:e0:6c:44:dc:e4:89:59:62:43:c9:9c:03:12:
4c:4d:68:0e:b2:57:51:f5:26:17:ad:16:d1:48:40:
90:f1:6e:ab:09:6c:9d:3e:71:8e:d0:5b:c2:6f:1b:
8d:55:91:c6:cb:18:f8:f3:7e:0e:70:b0:06:ce:2d:
3f:47:2a:2b:56:d8:38:ba:23:e3:7a:31:31:21:fc:
11:26:ca:ab:c1:96:9b:78:3e:60:93:28:2a:7b:e5:
ec:db:45:39:88:3f:b2:8c:41:44:25:04:f9:f7:f8:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:73:E9:4E:BA:73:DF:C0:63:A8:56:BA:AE:F3:52:91:44:3C:07
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:b0:91:b1:93:34:64:cd:27:49:17:37:52:4f:f2:eb:21:
5b:55:1e:8c:12:f4:6f:ac:65:e8:e8:2b:ab:c8:a4:dc:79:39:
82:2e:4e:2e:80:99:d9:a8:62:bb:3c:8a:ad:0b:ab:1d:da:d2:
65:11:a0:79:ad:2a:e8:84:de:e0:37:eb:d1:59:02:64:30:7b:
de:aa:8b:e9:32:1a:8f:b3:00:2e:35:2f:41:67:2a:02:37:11:
82:7a:02:ea:7e:03:a4:4e:a9:e1:a4:71:95:d7:e2:79:4d:b9:
0b:9f:7d:a7:25:55:c2:2d:db:f3:ab:6f:6b:61:6c:f9:38:ea:
96:d3:b9:b8:f8:1c:f0:1c:60:22:00:37:e9:39:9a:d2:8d:ac:
c6:e8:20:2f:52:83:7f:1b:c3:7b:73:68:6f:64:ab:6c:90:fe:
b6:98:94:9c:3c:6b:0d:03:d8:f4:52:8e:ed:41:b7:34:3c:25:
78:e0:a0:a5:69:ea:cf:c4:0e:de:86:a7:50:72:98:6b:0a:12:
8f:43:3d:e5:c2:ca:54:9d:df:c2:b2:00:05:dc:a5:dc:6c:ea:
c4:b5:b9:fa:a6:f7:71:f3:cb:4e:31:e4:1d:97:89:37:ce:d4:
18:b8:5d:a2:2c:52:d7:fe:b5:15:7b:27:fb:77:84:50:4d:9d:
17:b7:e9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh0CW4Mue0nZo3gHobstVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjYwNDE3MTMwMDI1WhcNMjYwNDE4MTMwMDI1WjAzMTEwLwYDVQQD
EyhjMTdlNzNlOTRlYmE3M2RmYzA2M2E4NTZiYWFlZjM1MjkxNDQzYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0RDapSez3vOf00m3nBIXUqgv669
7CifJVLYhVs/xH+9UbKGXEgwdDWNQLJ/Kh1hQ2AxpiTYufcFoLSkpVYyv3ujau4V
GwIs1ZzR4SDSxGJ66TTs4sWdDeTDyb85wD4wmQUh5UBFRIY1heea/jei34kZUVXz
X0xJZKFzmr8oEQQmVOIe4QXkTW9EbHpDc+HVw9w6K2U+reBsRNzkiVliQ8mcAxJM
TWgOsldR9SYXrRbRSECQ8W6rCWydPnGO0FvCbxuNVZHGyxj4834OcLAGzi0/Ryor
Vtg4uiPjejExIfwRJsqrwZabeD5gkygqe+Xs20U5iD+yjEFEJQT59/iHswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF+c+lOunPfwGOoVrqu81KRRDwHMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWawkbGT
NGTNJ0kXN1JP8ushW1UejBL0b6xl6Ogrq8ik3Hk5gi5OLoCZ2ahiuzyKrQurHdrS
ZRGgea0q6ITe4Dfr0VkCZDB73qqL6TIaj7MALjUvQWcqAjcRgnoC6n4DpE6p4aRx
ldfieU25C599pyVVwi3b86tva2Fs+TjqltO5uPgc8BxgIgA36Tma0o2sxuggL1KD
fxvDe3Nob2SrbJD+tpiUnDxrDQPY9FKO7UG3NDwleOCgpWnqz8QO3oanUHKYawoS
j0M95cLKVJ3fwrIABdyl3GzqxLW5+qb3cfPLTjHkHZeJN87UGLhdoixS1/61FXsn
+3eEUE2dF7fpfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:26 2026 by rpki-client