Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
File: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft (raw, json)
Hash identifier: FmtwzVjriXh8bAol48kkJq3DAQo31xGMpx5bhf+Y9jg=
Subject key identifier: 85:24:25:0C:86:F9:4B:F7:43:2D:9B:05:C8:1A:ED:42:53:74:9E:F5
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019D9A3DE3959304A659D34C180E2F413AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
Manifest number: E9
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: Qkmm8NzglIDSaRRojnPgAONoFTs.roa (hash: +ytJC/qxZWUUZ4DE43GZcN4/00ano+1+6kAJf6whSh4=)
2: dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl (hash: 9uBeNUC8nu2wgOchc1522c9zA5a9mIAydJRwj/HEtN4=)
3: fS9DhAA3eiG8HtVq67hAVe5MUHU.roa (hash: IiJhrxZlH7dtIcu6+WjaoQeyu/z5L+5HOr52j6mMjfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e3:95:93:04:a6:59:d3:4c:18:0e:2f:41:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=8524250c86f94bf7432d9b05c81aed4253749ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:40:21:0f:02:6a:6b:48:86:65:0f:2b:7e:
1e:c4:8c:84:07:51:37:4e:d0:1f:16:bc:a6:1d:38:
b9:bf:2b:d4:b7:83:95:48:c9:56:d6:18:6b:16:8d:
d5:7e:43:da:b1:1e:9a:9a:8b:a5:6e:76:9b:94:77:
1f:c3:68:2f:c4:1a:b5:d4:70:12:2f:5a:fa:86:9a:
07:03:75:bb:c4:03:03:28:60:56:c4:6a:f6:c8:96:
48:00:9c:27:c3:05:74:81:ca:4d:4e:30:8b:cd:99:
5e:61:88:25:4d:33:f5:88:9c:80:ab:69:03:8a:22:
67:f1:9c:65:15:2b:2e:25:53:d3:b8:cd:42:89:79:
0e:eb:b9:3b:28:d6:ec:02:aa:6f:7f:ef:cc:ea:06:
37:6c:14:a6:85:e9:b6:53:68:90:30:5a:fe:21:51:
d4:6e:69:22:eb:61:e6:a6:27:89:6e:a6:e6:8f:8a:
72:f5:59:de:21:4a:f9:6a:32:03:0b:3c:25:37:b6:
f0:72:f6:8b:f6:8c:d4:7e:af:92:5e:43:47:29:8c:
ec:a7:86:00:48:c4:7b:7c:cf:b3:ce:bf:75:2f:c3:
74:54:49:f8:50:2a:80:60:0d:db:a4:5c:ab:ad:a0:
76:0d:33:af:47:71:64:22:f6:c1:4d:7a:02:bb:c4:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:25:0C:86:F9:4B:F7:43:2D:9B:05:C8:1A:ED:42:53:74:9E:F5
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:19:3b:26:50:63:e4:c7:4f:e4:59:4e:b7:bf:7a:80:c7:8d:
95:1a:47:f5:26:a3:b0:f3:80:64:7a:50:91:e7:f0:5d:de:a1:
4f:1b:d7:30:c3:78:0f:08:67:8a:2d:33:72:25:e3:76:d0:30:
da:76:11:0c:f1:be:e6:5e:77:18:d3:ee:fd:54:dd:cb:8d:d1:
1d:03:47:32:2c:af:77:97:fc:40:08:df:d8:74:1a:32:ff:f9:
3a:ea:17:c0:16:57:56:92:41:39:4f:f7:2b:c5:b6:56:47:37:
e3:88:4c:14:a5:75:cb:6d:f4:6e:3b:8f:f6:52:7c:b3:75:c8:
84:63:cb:62:d9:7d:bc:f4:c6:3b:0f:44:0d:aa:d6:f7:f1:9e:
69:83:50:ee:3d:58:57:b9:dd:ef:d2:04:16:48:87:d8:a8:8b:
f2:ee:ac:c4:a5:71:16:13:ac:2c:6f:c3:bf:8d:7c:1b:84:0d:
e8:14:b6:0f:cb:2d:16:5b:6e:f1:08:fd:06:53:6d:b4:b7:66:
18:3b:35:fa:4a:77:07:fe:82:5d:18:a5:6e:47:20:6b:f2:12:
ab:f3:9c:ac:72:a5:80:e5:a8:7d:ee:9f:3f:a0:86:1f:f0:52:
5f:de:f0:5f:62:a3:0c:68:78:66:5c:e9:e9:a1:66:f9:75:f5:
bb:2a:e7:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeOVkwSmWdNMGA4vQTr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGU1MmRlNTMzMzBkNTAwNTQ5OGIwZmM0MDllNjRkZDk4
YmIwOTkwHhcNMjYwNDE3MDcwMDQwWhcNMjYwNDE4MDcwMDQwWjAzMTEwLwYDVQQD
Eyg4NTI0MjUwYzg2Zjk0YmY3NDMyZDliMDVjODFhZWQ0MjUzNzQ5ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsldAIQ8CamtIhmUPK34exIyEB1E3
TtAfFrymHTi5vyvUt4OVSMlW1hhrFo3VfkPasR6amoulbnablHcfw2gvxBq11HAS
L1r6hpoHA3W7xAMDKGBWxGr2yJZIAJwnwwV0gcpNTjCLzZleYYglTTP1iJyAq2kD
iiJn8ZxlFSsuJVPTuM1CiXkO67k7KNbsAqpvf+/M6gY3bBSmhem2U2iQMFr+IVHU
bmki62HmpieJbqbmj4py9VneIUr5ajIDCzwlN7bwcvaL9ozUfq+SXkNHKYzsp4YA
SMR7fM+zzr91L8N0VEn4UCqAYA3bpFyrraB2DTOvR3FkIvbBTXoCu8QCNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUkJQyG+Uv3Qy2bBcga7UJTdJ71MB8GA1UdIwQY
MBaAFHUOUt5TMw1QBUmLD8QJ5k3Zi7CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzkt
MjRmNmJkYmQ5NTBkLzEvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzktMjRmNmJkYmQ5NTBk
LzEvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRk7JlBj
5MdP5FlOt796gMeNlRpH9SajsPOAZHpQkefwXd6hTxvXMMN4Dwhnii0zciXjdtAw
2nYRDPG+5l53GNPu/VTdy43RHQNHMiyvd5f8QAjf2HQaMv/5OuoXwBZXVpJBOU/3
K8W2Vkc344hMFKV1y230bjuP9lJ8s3XIhGPLYtl9vPTGOw9EDarW9/GeaYNQ7j1Y
V7nd79IEFkiH2KiL8u6sxKVxFhOsLG/Dv418G4QN6BS2D8stFltu8Qj9BlNttLdm
GDs1+kp3B/6CXRilbkcga/ISq/OcrHKlgOWofe6fP6CGH/BSX97wX2KjDGh4Zlzp
6aFm+XX1uyrnzw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:31:40 2026 by rpki-client