
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: ieHXqx8ZTxxEBnhvzFOjnIT2Wb3fclv6dXr1Wok4zPI=
Subject key identifier: BD:42:26:DC:41:0E:D6:56:E3:DE:0E:22:BD:4C:1E:B4:5B:BF:A0:D4
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019D98185DBC38DCEE99E8849C41BCA2C46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: R8a1+0hpG8qc6mXuyRodb55eeeZXBI326CpsqjcfaKY=)
2: POtSiaRU3J6NN-3FcEzbyyc3iz4.roa (hash: xQmKcGL1aOnWYp2nu+qGyN+OtS+NUIMwhRaeCUEKn08=)
3: TKnfOm4ncEvg1o32_XggY8G_M1w.roa (hash: 0iZMIhG/WHr4eSkp/IKOXtdgHPLNekvLpZ/qpsVoNRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5d:bc:38:dc:ee:99:e8:84:9c:41:bc:a2:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=bd4226dc410ed656e3de0e22bd4c1eb45bbfa0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:63:41:77:1c:2d:58:7f:3f:22:69:1c:22:0a:
aa:35:f7:80:92:7d:7b:5c:63:df:8f:a4:41:22:b4:
a5:bb:2e:75:37:34:a5:c6:07:b6:f5:3f:dc:b4:bc:
79:a8:ad:52:2d:5f:2f:77:d6:23:1d:0f:31:ad:02:
16:e5:3c:e1:0b:5f:45:02:92:f6:1e:46:be:c9:7b:
a7:07:fa:0b:24:4b:05:a7:2f:3d:36:8b:87:54:a1:
f6:fd:0a:ea:dc:6c:8b:13:68:7d:0e:c4:f5:55:7b:
4c:46:7b:9a:6c:ee:e7:24:9f:eb:ce:36:88:7f:25:
d5:5a:fa:77:5a:e2:d5:5b:1a:79:e9:1f:f2:5d:80:
bd:96:ba:6a:9a:30:6e:71:60:04:65:74:58:7c:21:
a4:c3:5b:1f:10:b3:3c:ef:80:4c:71:fb:13:06:92:
59:5b:77:3f:8c:07:ed:3b:65:bf:b7:56:95:8b:17:
e4:39:b6:19:84:18:1e:23:4b:42:37:a5:f6:fb:bf:
db:c3:d3:98:35:d5:47:9c:c1:ce:fd:92:6b:3f:b4:
d7:9d:65:76:5b:bb:c0:d8:e5:4b:e6:59:3b:07:71:
3f:12:0f:63:a2:e6:d4:d8:46:c9:24:9a:a1:d1:72:
57:00:c5:0e:a5:1f:a4:c7:22:92:8b:39:15:c1:ee:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:26:DC:41:0E:D6:56:E3:DE:0E:22:BD:4C:1E:B4:5B:BF:A0:D4
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:68:2a:ef:86:04:0c:f5:86:6f:a8:e8:e7:a4:01:e8:69:
77:66:11:57:f6:43:1a:d7:0b:71:65:b8:7e:22:98:56:6d:7f:
57:44:47:70:a5:79:bb:36:a4:99:8b:1b:5b:25:bf:7d:2a:6d:
ab:e7:9a:90:c5:ad:30:7f:b9:9b:c0:f2:b2:a2:d3:a8:7d:e3:
ce:92:19:ec:f4:01:4d:d7:06:8a:9d:9e:07:4c:86:82:d0:8b:
f1:b5:45:1a:9b:1b:d2:a9:c0:c0:30:0b:d8:4a:63:11:14:43:
31:db:e3:ee:8a:0a:7c:71:59:c1:5a:2f:0e:34:4a:4a:af:f2:
37:2b:67:a8:74:56:18:92:bb:ac:d6:90:fc:50:f0:c7:8d:64:
d7:be:11:0d:60:2e:e0:37:d6:45:a3:b4:37:1b:a2:87:02:28:
d6:21:ba:6e:d3:6c:50:02:78:38:e9:9e:5a:1f:45:56:be:a7:
c6:84:da:fd:63:61:89:72:cf:c7:c2:6a:ae:97:ff:c0:4f:38:
59:2c:98:7f:c6:49:d5:c1:ac:98:88:16:9c:a3:0f:51:82:8d:
bb:34:df:80:cc:76:fe:48:06:3d:79:15:e2:0f:96:bd:2b:25:
83:7c:77:9c:9b:f0:e2:ca:2f:a7:d3:b0:1f:fe:d3:b9:b4:ce:
3b:fc:cd:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGF28ONzumeiEnEG8osRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1
M2U2NjIwHhcNMjYwNDE2MjEwMDI2WhcNMjYwNDE3MjEwMDI2WjAzMTEwLwYDVQQD
EyhiZDQyMjZkYzQxMGVkNjU2ZTNkZTBlMjJiZDRjMWViNDViYmZhMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGNBdxwtWH8/ImkcIgqqNfeAkn17
XGPfj6RBIrSluy51NzSlxge29T/ctLx5qK1SLV8vd9YjHQ8xrQIW5TzhC19FApL2
Hka+yXunB/oLJEsFpy89NouHVKH2/Qrq3GyLE2h9DsT1VXtMRnuabO7nJJ/rzjaI
fyXVWvp3WuLVWxp56R/yXYC9lrpqmjBucWAEZXRYfCGkw1sfELM874BMcfsTBpJZ
W3c/jAftO2W/t1aVixfkObYZhBgeI0tCN6X2+7/bw9OYNdVHnMHO/ZJrP7TXnWV2
W7vA2OVL5lk7B3E/Eg9joubU2EbJJJqh0XJXAMUOpR+kxyKSizkVwe7mKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1CJtxBDtZW494OIr1MHrRbv6DUMB8GA1UdIwQY
MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt
NmUyMmJmNDM2MzA0LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0
LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy1oKu+G
BAz1hm+o6OekAehpd2YRV/ZDGtcLcWW4fiKYVm1/V0RHcKV5uzakmYsbWyW/fSpt
q+eakMWtMH+5m8DysqLTqH3jzpIZ7PQBTdcGip2eB0yGgtCL8bVFGpsb0qnAwDAL
2EpjERRDMdvj7ooKfHFZwVovDjRKSq/yNytnqHRWGJK7rNaQ/FDwx41k174RDWAu
4DfWRaO0NxuihwIo1iG6btNsUAJ4OOmeWh9FVr6nxoTa/WNhiXLPx8Jqrpf/wE84
WSyYf8ZJ1cGsmIgWnKMPUYKNuzTfgMx2/kgGPXkV4g+WvSslg3x3nJvw4sovp9Ow
H/7TubTOO/zNDw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:58 2026 by rpki-client