Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: WOnQMidQ9ZpyqnzL3D+36e/ubvLCX2xSNKXQbAikTFM=
Subject key identifier: 50:46:3A:5B:B2:70:29:01:97:C5:79:05:0C:E8:00:DD:29:FA:E9:A0
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019D9C2D71A5D6DC281E130509DD7ED8528E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 16:01:56 +0000
Manifest this update: Fri 17 Apr 2026 16:01:56 +0000
Manifest next update: Sat 18 Apr 2026 16:01:56 +0000
Files and hashes: 1: 07lXNimrQBF3__ddGT3TZzLhskg.roa (hash: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw=)
2: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (hash: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY=)
3: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: ylccOm6xfsSsc1K8M3GpiwY0s7Ls6LvkaeTyErt6IJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:71:a5:d6:dc:28:1e:13:05:09:dd:7e:d8:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Apr 17 16:01:56 2026 GMT
Not After : Apr 18 16:01:56 2026 GMT
Subject: CN=50463a5bb270290197c579050ce800dd29fae9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:c1:5f:0b:45:76:85:4d:c0:05:33:8b:2e:
c4:a9:fb:85:f8:13:a1:4d:79:82:ea:0b:01:37:8b:
07:aa:16:99:a6:ff:b0:3e:6b:29:ec:32:93:e3:0e:
d6:71:19:1f:09:d3:d4:b0:0f:9d:10:a7:21:6f:31:
7a:cc:79:45:40:36:2f:95:d3:5c:ae:40:1a:72:fd:
59:c0:47:0d:57:1d:ab:e6:e7:ab:8b:ec:1f:df:2b:
ee:8a:fc:6b:68:e7:9b:77:73:01:2e:43:dd:fb:2c:
cb:d9:9a:e5:4c:6b:35:a3:eb:85:62:64:aa:23:d6:
cf:01:ee:9b:85:f5:55:12:fb:0b:98:6e:d0:78:da:
60:0f:39:38:6d:d3:88:7f:02:28:c9:c1:9f:b1:ab:
21:a7:eb:e1:39:6f:83:61:60:a3:f5:c4:66:81:68:
2f:08:f7:a5:92:03:75:13:8c:4a:b7:f7:41:72:61:
8b:f1:ae:ab:5a:f8:96:87:28:ab:a8:5e:a1:cc:9c:
ee:08:77:17:0b:d9:54:c6:64:77:78:64:e0:0d:a4:
0a:6d:a2:09:34:3f:95:98:3f:d2:b3:b9:79:b9:28:
8d:19:3a:19:1d:0f:a2:ee:23:39:3f:a0:15:6f:fb:
ee:d8:a9:b1:42:54:a4:e9:cc:47:c2:db:0f:a8:40:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:46:3A:5B:B2:70:29:01:97:C5:79:05:0C:E8:00:DD:29:FA:E9:A0
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:94:79:ae:74:ef:5f:92:e5:f2:4c:17:c1:37:de:47:c3:
90:f7:6c:68:b4:0f:b4:cf:72:53:e8:42:72:e5:05:af:48:9f:
c1:22:1c:9e:ac:7b:c3:13:93:99:fc:24:78:29:98:c3:66:16:
a6:bf:d8:8a:c9:99:35:65:6a:79:02:a3:49:97:3b:fe:9d:5c:
25:80:2d:8f:b3:6c:e4:53:2a:d1:bb:3a:91:7b:46:8b:1c:0c:
f0:fd:dc:d7:66:e4:54:aa:b0:6a:fb:9e:c5:13:0d:df:36:81:
6f:cd:4c:de:31:d0:5c:fe:c8:61:73:d1:66:01:a7:d4:4d:d6:
e4:9a:38:a7:56:ef:83:fd:96:21:0e:dd:6a:46:65:59:f4:35:
60:a4:80:bc:a3:93:71:21:f9:bb:91:ef:c5:58:30:6e:c9:e7:
f2:5f:c2:43:4d:cd:72:ae:b7:19:39:2c:be:b9:61:b3:be:3e:
ba:9a:3d:f0:52:be:d0:ba:93:28:7e:8e:9c:3d:5d:2f:7f:ba:
1c:19:37:b4:97:6c:97:fd:c8:8f:45:e8:aa:02:9b:83:b7:09:
88:0b:93:80:64:67:aa:59:c9:d5:74:2f:1f:62:28:65:c9:09:
3c:e5:84:7f:9e:fa:dc:77:d3:4a:f6:bb:c5:37:14:21:2a:34:
a2:fd:af:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLXGl1twoHhMFCd1+2FKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy
MDg0NTcwHhcNMjYwNDE3MTYwMTU2WhcNMjYwNDE4MTYwMTU2WjAzMTEwLwYDVQQD
Eyg1MDQ2M2E1YmIyNzAyOTAxOTdjNTc5MDUwY2U4MDBkZDI5ZmFlOWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/BXwtFdoVNwAUziy7EqfuF+BOh
TXmC6gsBN4sHqhaZpv+wPmsp7DKT4w7WcRkfCdPUsA+dEKchbzF6zHlFQDYvldNc
rkAacv1ZwEcNVx2r5ueri+wf3yvuivxraOebd3MBLkPd+yzL2ZrlTGs1o+uFYmSq
I9bPAe6bhfVVEvsLmG7QeNpgDzk4bdOIfwIoycGfsashp+vhOW+DYWCj9cRmgWgv
CPelkgN1E4xKt/dBcmGL8a6rWviWhyirqF6hzJzuCHcXC9lUxmR3eGTgDaQKbaIJ
ND+VmD/Ss7l5uSiNGToZHQ+i7iM5P6AVb/vu2KmxQlSk6cxHwtsPqEBwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBGOluycCkBl8V5BQzoAN0p+umgMB8GA1UdIwQY
MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNqUea50
71+S5fJMF8E33kfDkPdsaLQPtM9yU+hCcuUFr0ifwSIcnqx7wxOTmfwkeCmYw2YW
pr/YismZNWVqeQKjSZc7/p1cJYAtj7Ns5FMq0bs6kXtGixwM8P3c12bkVKqwavue
xRMN3zaBb81M3jHQXP7IYXPRZgGn1E3W5Jo4p1bvg/2WIQ7dakZlWfQ1YKSAvKOT
cSH5u5HvxVgwbsnn8l/CQ03Ncq63GTksvrlhs74+upo98FK+0LqTKH6OnD1dL3+6
HBk3tJdsl/3Ij0XoqgKbg7cJiAuTgGRnqlnJ1XQvH2IoZckJPOWEf5763HfTSva7
xTcUISo0ov2vow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:50 2026 by rpki-client