Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: V3vOFR+jCDdKyXaVRySPpIUgTTtyaQMJCi9WPwiRigU=
Subject key identifier: A6:F0:DB:68:50:C5:C7:02:C4:AA:A3:C7:D9:BE:A2:D4:B4:97:79:8A
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019D98F40AB79D599BB363C81A943D3E0391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:23 +0000
Manifest this update: Fri 17 Apr 2026 01:00:23 +0000
Manifest next update: Sat 18 Apr 2026 01:00:23 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: bmz5xXstfdAkcFY0EknWB7yixshGy9sJN/cw33r6H3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:0a:b7:9d:59:9b:b3:63:c8:1a:94:3d:3e:03:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Apr 17 01:00:23 2026 GMT
Not After : Apr 18 01:00:23 2026 GMT
Subject: CN=a6f0db6850c5c702c4aaa3c7d9bea2d4b497798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:88:a8:98:15:34:d6:c9:f0:61:27:ac:03:
1e:7b:ca:fc:9c:4a:d6:2a:a1:30:99:a4:a2:a5:0c:
78:0e:77:a6:8c:c7:0d:b9:1d:78:2f:98:36:28:71:
b6:9b:5f:02:80:fa:45:cd:48:11:9e:d6:bb:40:78:
0c:77:33:49:35:00:76:20:0f:18:a5:b3:73:4a:e9:
9a:e4:5b:5c:f0:68:f7:15:19:2f:0e:f5:1a:c8:a2:
e1:bf:8c:c4:9b:36:49:71:b1:f3:c7:2d:42:b3:d3:
03:7a:9f:54:dd:06:d0:fe:40:5c:68:64:88:53:66:
db:72:ce:0a:da:c0:c0:36:5b:4c:fa:64:54:64:72:
a1:71:6c:18:23:f1:90:49:89:cc:df:c9:98:48:d3:
52:3b:79:a5:84:10:1b:c5:18:f5:5e:e4:f9:77:8e:
20:b5:58:c9:9b:cd:a6:48:64:be:91:83:17:02:77:
f8:3d:6f:e4:38:2c:82:cd:30:a7:30:ab:69:41:f1:
39:98:8c:67:39:d3:91:9c:5e:ff:da:99:f1:af:06:
f4:44:ae:59:0f:62:fa:1b:3a:78:e9:88:cf:ab:ed:
fb:a1:78:ff:7e:46:6c:68:1b:3f:c1:8b:26:37:49:
b3:5a:85:d9:9b:07:10:f3:91:25:c6:2e:4b:b5:fd:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:DB:68:50:C5:C7:02:C4:AA:A3:C7:D9:BE:A2:D4:B4:97:79:8A
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9d:c9:9b:a5:08:20:4a:d1:0f:57:84:ba:ff:de:de:fd:d3:
cc:24:b9:fe:5c:7f:5d:91:da:b2:c4:c5:f6:77:eb:a4:95:87:
ba:31:51:93:8c:02:1d:0d:ec:f0:de:6e:20:5b:47:fc:bb:e2:
29:02:af:ad:d1:a9:52:75:10:0a:c3:1c:9a:c9:d8:d9:05:ce:
45:3c:e1:eb:f0:19:08:93:22:f3:fd:aa:b1:5f:ce:2e:7d:f5:
b9:94:0d:18:14:ed:19:fc:89:95:9f:a3:63:ea:67:61:59:5a:
f2:08:25:66:20:5e:5b:4b:3d:e2:72:7f:27:10:7c:af:65:1a:
3a:11:ce:f4:c8:f3:2a:a9:8d:b4:54:f9:08:10:23:e8:d9:20:
fb:38:97:1c:7e:d7:e6:f7:8d:c0:86:c6:5e:c1:ce:23:8a:a6:
cb:24:87:f2:a3:77:e0:1f:46:06:ea:f7:b6:97:58:1c:06:02:
b9:5a:74:63:32:f2:c4:d3:0b:4b:c0:08:69:a5:99:55:11:3d:
b0:0e:8f:a0:68:ed:94:a7:9e:21:c7:7d:9e:44:75:f9:77:3a:
20:12:8a:74:2d:37:ff:77:3e:83:80:d9:dd:bc:e5:b1:c8:c6:
21:d5:62:60:48:02:3d:4c:8c:19:92:e7:44:a3:0b:2b:ad:b2:
99:60:d1:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Aq3nVmbs2PIGpQ9PgORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjYwNDE3MDEwMDIzWhcNMjYwNDE4MDEwMDIzWjAzMTEwLwYDVQQD
EyhhNmYwZGI2ODUwYzVjNzAyYzRhYWEzYzdkOWJlYTJkNGI0OTc3OThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupKIqJgVNNbJ8GEnrAMee8r8nErW
KqEwmaSipQx4DnemjMcNuR14L5g2KHG2m18CgPpFzUgRnta7QHgMdzNJNQB2IA8Y
pbNzSuma5Ftc8Gj3FRkvDvUayKLhv4zEmzZJcbHzxy1Cs9MDep9U3QbQ/kBcaGSI
U2bbcs4K2sDANltM+mRUZHKhcWwYI/GQSYnM38mYSNNSO3mlhBAbxRj1XuT5d44g
tVjJm82mSGS+kYMXAnf4PW/kOCyCzTCnMKtpQfE5mIxnOdORnF7/2pnxrwb0RK5Z
D2L6Gzp46YjPq+37oXj/fkZsaBs/wYsmN0mzWoXZmwcQ85Elxi5Ltf0m8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbw22hQxccCxKqjx9m+otS0l3mKMB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhp3Jm6UI
IErRD1eEuv/e3v3TzCS5/lx/XZHassTF9nfrpJWHujFRk4wCHQ3s8N5uIFtH/Lvi
KQKvrdGpUnUQCsMcmsnY2QXORTzh6/AZCJMi8/2qsV/OLn31uZQNGBTtGfyJlZ+j
Y+pnYVla8gglZiBeW0s94nJ/JxB8r2UaOhHO9MjzKqmNtFT5CBAj6Nkg+ziXHH7X
5veNwIbGXsHOI4qmyySH8qN34B9GBur3tpdYHAYCuVp0YzLyxNMLS8AIaaWZVRE9
sA6PoGjtlKeeIcd9nkR1+Xc6IBKKdC03/3c+g4DZ3bzlscjGIdViYEgCPUyMGZLn
RKMLK62ymWDRug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:22:59 2026 by rpki-client