
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: y1Z6kOfjUEwyHq1a4aEqxb4Ul88m4FLeUKDeWtTIYCk=
Subject key identifier: F4:8F:13:11:71:71:9B:BE:94:38:6F:BD:2D:D9:9F:D8:FC:C8:00:DE
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019D9BF51088F5A76B98F0EABD7B74199132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:00:22 +0000
Manifest this update: Fri 17 Apr 2026 15:00:22 +0000
Manifest next update: Sat 18 Apr 2026 15:00:22 +0000
Files and hashes: 1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: ZZDinL+v7lc+jpeY38UcehKNicSQsCSZBFZiOGJ1gdE=)
2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:10:88:f5:a7:6b:98:f0:ea:bd:7b:74:19:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Apr 17 15:00:22 2026 GMT
Not After : Apr 18 15:00:22 2026 GMT
Subject: CN=f48f131171719bbe94386fbd2dd99fd8fcc800de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:23:b8:4d:a2:28:16:c2:14:2f:26:8a:24:
bb:8d:b8:92:a2:e8:02:88:11:f5:bb:c3:7a:98:75:
90:e1:8e:f1:8a:6c:03:6e:53:98:f5:4a:ec:99:5e:
5d:46:ea:b4:3e:e9:cd:93:ec:a2:e8:c3:55:44:98:
38:8b:2e:1a:39:99:54:3b:c3:6e:68:1e:65:71:20:
92:84:fb:09:38:ac:67:4c:a0:ed:da:95:11:45:0e:
af:fd:77:15:70:61:0d:bb:a0:92:30:67:7b:17:cc:
7c:00:26:44:a4:6c:f9:08:66:2f:7b:12:2c:a2:38:
e1:85:89:c6:26:e2:e3:73:a9:b4:41:30:19:b7:e5:
dc:7f:b2:2f:02:22:8b:3d:c3:ad:58:82:be:9f:93:
a8:be:e9:c1:ea:67:7a:28:b9:4c:e1:1a:82:62:c0:
2d:ad:41:17:4b:10:03:01:dc:61:9a:a9:31:c7:e2:
88:81:ce:06:25:11:b9:d2:82:70:ff:e9:61:85:0f:
f1:e5:05:e9:c3:fe:ae:25:fe:26:6c:e0:14:47:2a:
32:e2:87:03:7c:6f:24:2c:ea:29:71:cf:76:9c:a7:
35:2b:61:4c:28:c8:ba:00:a4:b5:c6:ae:24:95:0c:
a3:13:b2:40:2d:fd:29:0c:6b:29:23:da:6f:a6:2b:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:13:11:71:71:9B:BE:94:38:6F:BD:2D:D9:9F:D8:FC:C8:00:DE
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:06:e6:44:72:08:ed:55:56:fd:0d:25:43:53:b2:a5:4a:
ac:de:1d:b7:2c:37:73:3f:22:45:4c:d2:49:ec:ae:e5:ac:18:
ca:28:d1:c2:8d:29:aa:62:85:a5:00:f4:0d:07:11:c8:30:2d:
68:a0:9e:6a:30:ab:f3:fd:c0:6a:ef:c3:3e:4b:cf:08:83:4f:
07:5d:89:f8:58:b2:56:31:af:87:2e:1b:49:86:44:a3:66:5c:
eb:29:77:72:65:cc:44:8f:e2:11:d0:9b:91:e8:ce:8e:b3:fa:
42:d0:a4:f1:e8:f9:a7:cb:39:c0:f5:11:5c:8d:3f:d0:8c:8d:
23:ef:a0:1f:ec:e1:a0:e5:85:85:d5:41:e3:15:c3:0a:a0:2c:
78:f2:fb:c9:3f:c2:4f:fb:6a:92:1a:05:37:56:d1:50:e1:aa:
7c:78:33:fe:39:ca:ec:be:5c:51:5e:c4:8c:22:f5:ea:4a:f3:
1d:d5:3d:12:51:7d:50:c6:0f:de:1a:3d:61:a9:14:0c:9e:12:
e4:89:71:e3:79:8b:d0:e3:e8:c3:ec:d9:52:47:da:6a:b8:35:
62:bb:ea:15:90:ae:27:6b:0f:24:34:5d:af:91:41:13:4f:9e:
81:e1:20:d4:28:90:0a:96:f2:7d:72:e0:1f:17:d4:ef:ba:6f:
bd:ee:4d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9RCI9adrmPDqvXt0GZEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy
MDM2ZTEwHhcNMjYwNDE3MTUwMDIyWhcNMjYwNDE4MTUwMDIyWjAzMTEwLwYDVQQD
EyhmNDhmMTMxMTcxNzE5YmJlOTQzODZmYmQyZGQ5OWZkOGZjYzgwMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEEjuE2iKBbCFC8miiS7jbiSougC
iBH1u8N6mHWQ4Y7ximwDblOY9UrsmV5dRuq0PunNk+yi6MNVRJg4iy4aOZlUO8Nu
aB5lcSCShPsJOKxnTKDt2pURRQ6v/XcVcGENu6CSMGd7F8x8ACZEpGz5CGYvexIs
ojjhhYnGJuLjc6m0QTAZt+Xcf7IvAiKLPcOtWIK+n5OovunB6md6KLlM4RqCYsAt
rUEXSxADAdxhmqkxx+KIgc4GJRG50oJw/+lhhQ/x5QXpw/6uJf4mbOAURyoy4ocD
fG8kLOopcc92nKc1K2FMKMi6AKS1xq4klQyjE7JALf0pDGspI9pvpivDxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSPExFxcZu+lDhvvS3Zn9j8yADeMB8GA1UdIwQY
MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt
OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx
LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS68G5kRy
CO1VVv0NJUNTsqVKrN4dtyw3cz8iRUzSSeyu5awYyijRwo0pqmKFpQD0DQcRyDAt
aKCeajCr8/3Aau/DPkvPCINPB12J+FiyVjGvhy4bSYZEo2Zc6yl3cmXMRI/iEdCb
kejOjrP6QtCk8ej5p8s5wPURXI0/0IyNI++gH+zhoOWFhdVB4xXDCqAsePL7yT/C
T/tqkhoFN1bRUOGqfHgz/jnK7L5cUV7EjCL16krzHdU9ElF9UMYP3ho9YakUDJ4S
5Ilx43mL0OPow+zZUkfaarg1YrvqFZCuJ2sPJDRdr5FBE0+egeEg1CiQCpbyfXLg
HxfU77pvve5NrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:12 2026 by rpki-client