Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: BMGCKgM1/iaQnrWLSB1tj8ujVwNaH6rqAPdvzFhT6Hk=
Subject key identifier: 73:60:E3:A5:66:0F:88:88:E0:C5:13:F3:44:F5:CB:7E:16:D9:21:D9
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019D9AE2E20DDB8BF87EFEFB3BB90E54A2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 10:00:53 +0000
Manifest this update: Fri 17 Apr 2026 10:00:53 +0000
Manifest next update: Sat 18 Apr 2026 10:00:53 +0000
Files and hashes: 1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: EG7sWOcQiBRd8cALVERNnYS5c7Idklds+Z0wN+39aJc=)
3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e2:0d:db:8b:f8:7e:fe:fb:3b:b9:0e:54:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Apr 17 10:00:53 2026 GMT
Not After : Apr 18 10:00:53 2026 GMT
Subject: CN=7360e3a5660f8888e0c513f344f5cb7e16d921d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:f0:f3:74:f0:1c:6d:ed:f1:80:4b:86:6a:
72:2d:2a:37:a9:a8:7f:df:ca:47:9f:d6:d5:26:27:
0c:a4:2b:b6:6c:f7:3e:75:a7:c0:fb:1d:06:66:f7:
1d:df:86:9a:4a:14:aa:c8:c5:59:60:6f:9f:82:9a:
af:90:3a:cb:f1:37:aa:9d:41:f7:8d:2d:e4:ef:32:
b2:83:6c:63:70:8d:7f:18:dc:68:a0:8a:10:e2:d1:
a0:7e:9e:04:e5:ce:5a:45:d3:b0:fc:1f:f3:55:61:
6d:df:77:68:27:06:e8:5d:13:02:e4:c0:38:d4:97:
fc:1f:77:c5:25:a3:83:f6:d2:9e:d9:43:8f:e0:ec:
ae:b6:23:ba:68:45:96:38:ca:ba:13:16:8f:27:63:
a8:5d:8c:33:82:a7:7c:04:ea:b5:59:48:c2:9a:a6:
23:3c:db:74:32:f5:db:ba:81:c8:b8:1f:c8:24:d9:
d4:9f:45:c1:1b:58:49:56:0c:1a:32:ef:91:8a:71:
28:91:95:eb:00:a6:0f:d6:cc:76:d6:6f:d3:15:9c:
23:b7:53:e8:40:c0:d6:99:d9:92:ad:1c:64:4e:9b:
05:e6:41:c2:02:21:91:3d:19:93:39:b0:59:a7:f1:
9f:db:4e:fd:30:ad:f0:d4:32:4a:b0:2f:40:c3:c6:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:60:E3:A5:66:0F:88:88:E0:C5:13:F3:44:F5:CB:7E:16:D9:21:D9
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f7:ba:d4:82:43:97:3b:ee:c0:78:a7:b7:af:2f:77:51:48:
d1:32:50:c1:27:6f:b7:1c:cd:38:e9:b8:ae:d9:c4:3e:4c:77:
4b:fa:b1:ae:52:1c:91:4d:00:ed:68:66:33:cb:7e:aa:f1:e2:
b6:22:31:98:3f:33:40:8b:f1:73:e3:ee:40:9c:cb:60:11:a5:
1c:e2:21:57:1c:be:a8:b4:99:4a:36:c9:2c:4e:ae:10:1d:f2:
bc:93:db:db:cc:eb:19:d3:d9:3e:44:86:08:6f:dc:38:3e:18:
3c:fa:32:20:31:2f:ca:1d:89:d9:87:44:96:44:2b:47:83:fd:
34:47:37:95:4d:6b:c3:5d:52:48:82:b2:85:81:ef:41:f0:e1:
51:09:c8:4d:5e:dc:41:33:14:1f:e8:29:25:07:33:f9:c3:ed:
f8:45:e4:88:64:09:43:fa:88:61:74:be:a7:01:40:36:74:61:
b1:94:ad:8c:39:c6:ff:05:3e:c3:51:71:d4:3a:95:8a:17:98:
30:7b:98:42:8e:18:5f:a1:7f:3c:f4:70:b5:3f:52:0e:2d:0e:
1a:8b:df:7d:a9:f1:76:6b:a8:38:02:8c:fe:77:0b:f3:22:24:
dd:41:23:fa:8f:e2:8e:65:ba:d1:9c:aa:d9:7c:63:2d:95:14:
d6:56:50:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4uIN24v4fv77O7kOVKKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3
MDViMmYwHhcNMjYwNDE3MTAwMDUzWhcNMjYwNDE4MTAwMDUzWjAzMTEwLwYDVQQD
Eyg3MzYwZTNhNTY2MGY4ODg4ZTBjNTEzZjM0NGY1Y2I3ZTE2ZDkyMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PXw83TwHG3t8YBLhmpyLSo3qah/
38pHn9bVJicMpCu2bPc+dafA+x0GZvcd34aaShSqyMVZYG+fgpqvkDrL8TeqnUH3
jS3k7zKyg2xjcI1/GNxooIoQ4tGgfp4E5c5aRdOw/B/zVWFt33doJwboXRMC5MA4
1Jf8H3fFJaOD9tKe2UOP4OyutiO6aEWWOMq6ExaPJ2OoXYwzgqd8BOq1WUjCmqYj
PNt0MvXbuoHIuB/IJNnUn0XBG1hJVgwaMu+RinEokZXrAKYP1sx21m/TFZwjt1Po
QMDWmdmSrRxkTpsF5kHCAiGRPRmTObBZp/Gf2079MK3w1DJKsC9Aw8ZkvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNg46VmD4iI4MUT80T1y34W2SHZMB8GA1UdIwQY
MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt
MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx
LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfe61IJD
lzvuwHint68vd1FI0TJQwSdvtxzNOOm4rtnEPkx3S/qxrlIckU0A7WhmM8t+qvHi
tiIxmD8zQIvxc+PuQJzLYBGlHOIhVxy+qLSZSjbJLE6uEB3yvJPb28zrGdPZPkSG
CG/cOD4YPPoyIDEvyh2J2YdElkQrR4P9NEc3lU1rw11SSIKyhYHvQfDhUQnITV7c
QTMUH+gpJQcz+cPt+EXkiGQJQ/qIYXS+pwFANnRhsZStjDnG/wU+w1Fx1DqViheY
MHuYQo4YX6F/PPRwtT9SDi0OGovffanxdmuoOAKM/ncL8yIk3UEj+o/ijmW60Zyq
2XxjLZUU1lZQGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:38:08 2026 by rpki-client