Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: EPgGHcBSVbaNKg9q2W4ezQllTnb/Q2VrUMAes3TAv44=
Subject key identifier: E6:A3:67:9A:5D:67:81:47:CE:2D:C6:A2:3F:19:A0:3F:68:7D:9E:74
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 019D9BBE3B8F1272C5B5BF219E3A00C13140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: a1cD9EYlmG13NxBr90ciEvptuWA.roa (hash: v81TOP+ZC2LYKrsgbz1s/Hzy51XQ6ECnroV1P/ElVCU=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: GNJTwkR+LMXW9xhoHs/UWe5iG0F9NzEOqwvVBP8p1OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3b:8f:12:72:c5:b5:bf:21:9e:3a:00:c1:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=e6a3679a5d678147ce2dc6a23f19a03f687d9e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:a2:a7:a4:6b:33:cc:2d:3c:6c:6b:84:61:
65:65:47:7f:78:fb:26:a6:67:59:c9:58:c3:27:22:
81:0f:55:c5:9f:e2:b2:8c:ad:7d:4b:38:6e:8f:1e:
61:98:09:61:37:24:87:8b:26:66:5f:54:95:b9:fa:
62:5d:6c:52:c8:00:a0:2e:d8:f5:06:45:ff:91:3a:
56:27:21:43:69:b0:c9:cc:f0:32:6b:9a:a5:e3:d6:
6c:cf:d7:16:f3:54:c4:ef:c5:0a:c4:0a:1e:a3:c0:
b4:c6:17:2e:57:00:9b:a3:35:47:3e:c1:57:32:25:
07:4b:2f:07:7f:ae:e7:7c:c3:4a:4e:18:bf:de:b1:
1b:2c:2f:5e:c2:27:f6:ed:a0:ce:5c:50:fb:a3:bb:
a2:6b:01:2c:19:cc:72:7a:5e:ca:0a:38:07:63:5d:
56:79:63:91:06:67:3c:5f:67:5e:7c:83:85:b4:a6:
92:4b:59:63:81:79:f9:4d:64:b9:05:c8:74:b2:95:
d2:4a:28:4f:5f:f2:ac:b3:fb:75:02:76:e9:ae:35:
ec:86:e2:41:e1:f0:c1:8e:26:57:82:eb:66:c1:a9:
6d:48:36:5a:ae:27:17:80:3f:35:6e:cc:81:f0:1d:
35:cc:92:6d:36:dc:b9:b6:f5:4c:d3:2b:ca:7d:5c:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:67:9A:5D:67:81:47:CE:2D:C6:A2:3F:19:A0:3F:68:7D:9E:74
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:22:46:37:f8:09:7d:f1:46:5b:68:24:a5:81:cf:a5:db:71:
1e:da:43:96:6a:bf:1d:57:74:d7:87:8d:f5:29:ef:a5:aa:22:
3a:51:05:c4:2d:c0:d9:ab:d6:8b:29:05:8d:c4:67:8d:97:78:
52:0b:17:c0:f3:4a:f3:02:3f:14:55:64:68:bd:23:98:8e:d4:
e8:2a:52:f6:4f:5d:64:6e:5c:0e:cd:33:0c:77:f8:9f:44:fe:
c0:9d:f4:fb:d3:d1:9a:cc:8c:60:c7:9e:b9:64:bb:99:64:51:
91:31:70:dc:4f:24:e9:80:e2:77:87:db:57:47:f7:9a:1d:96:
83:bc:c4:d8:e2:17:43:d3:06:02:f7:6f:d6:61:29:0a:62:5c:
63:11:53:af:b6:cb:59:70:5d:cd:56:ba:9b:70:2e:5c:da:17:
7e:83:70:bc:98:74:94:59:a2:fc:d2:b9:41:55:ce:1b:5c:ff:
55:f6:f5:90:9d:3e:43:01:cc:e7:c8:41:ac:3a:d6:1c:26:df:
91:26:e3:34:81:01:4b:1b:4f:c7:2d:c0:16:e7:3b:29:90:f2:
1b:cd:c7:ea:36:af:91:30:d4:63:c1:5c:cd:57:87:51:f5:b0:
ec:c3:ed:05:c9:94:42:37:11:a5:cb:f5:e7:8e:72:f2:88:00:
d2:ab:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:35 2026 by rpki-client