Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: jQCYklB0MMIM7jshAvyKj7rJwr24YVqO8CubQ7te74Y=
Subject key identifier: C3:C8:46:DE:95:1D:68:3B:43:07:61:68:F5:65:89:16:0B:F8:40:0E
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019D9962EABF4EE4980909FE740E799B8E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:29 +0000
Manifest this update: Fri 17 Apr 2026 03:01:29 +0000
Manifest next update: Sat 18 Apr 2026 03:01:29 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: +34t+vw8X2+CNzwHdz8xpN6CUwjHmL7dAgPINqctlx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ea:bf:4e:e4:98:09:09:fe:74:0e:79:9b:8e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Apr 17 03:01:29 2026 GMT
Not After : Apr 18 03:01:29 2026 GMT
Subject: CN=c3c846de951d683b43076168f56589160bf8400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:ac:92:77:cd:9e:de:29:ed:5e:92:44:d4:
7c:4b:2e:98:7a:9f:2f:45:0c:de:de:5a:89:80:2e:
81:91:23:24:0e:12:64:70:58:be:02:47:22:5c:de:
cc:c4:b9:1b:6c:d6:76:aa:1f:a3:21:a4:84:1c:93:
c4:5e:f4:1f:2a:14:93:5c:97:73:8e:e2:34:a1:b9:
9b:9e:22:83:d0:a6:cc:55:54:ac:91:d1:01:8a:29:
90:17:87:e1:cf:4c:14:f8:5e:e0:97:cd:c1:fa:6f:
6d:19:4b:e4:21:59:f1:9d:8e:85:b0:1e:e4:fb:49:
c2:b4:17:c4:bf:c7:7e:76:48:a5:98:d0:d4:2d:c5:
f2:96:88:f9:d0:1a:72:59:ff:aa:27:84:f7:61:ee:
5a:32:39:ce:02:d1:fb:d8:ae:a1:b8:6f:9a:48:51:
e5:bc:05:b2:a5:39:82:d6:96:49:27:5b:06:96:30:
bc:47:87:d9:00:9f:3e:82:1c:3d:90:ba:a2:49:83:
f5:1b:0c:ae:97:20:78:f4:ee:a2:73:2f:8a:35:33:
40:8f:fc:7f:7a:e9:ad:cc:7e:e6:b3:3d:4e:1d:1e:
0f:1a:42:a5:82:f2:24:c3:02:a5:53:70:29:36:3f:
3f:42:3e:a4:ab:b9:df:76:7a:44:c0:c2:ea:15:20:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:46:DE:95:1D:68:3B:43:07:61:68:F5:65:89:16:0B:F8:40:0E
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bb:55:ef:ce:d1:8e:2a:d5:88:47:04:e8:6b:4f:36:72:6d:
5d:e1:9e:cc:5b:0f:f0:f6:75:bb:de:4f:3b:b0:84:ef:5f:3e:
82:bf:17:1f:44:ed:e4:2f:f9:39:d6:d5:ab:5a:5d:26:e8:16:
26:b2:0e:4f:90:22:03:2e:c6:01:c5:40:70:01:be:cf:af:e7:
03:27:ef:d8:b0:3e:78:e4:be:eb:01:fa:1b:b9:2a:14:eb:d1:
e5:a3:4d:9f:ec:f4:1e:07:77:c5:6c:e0:27:76:85:0f:ff:77:
c6:6f:22:c2:2a:c1:21:26:fe:41:e8:f5:e5:13:a9:25:2a:ec:
57:ee:57:ca:21:fe:c9:df:de:cb:5d:e3:72:61:57:3b:af:ee:
17:3d:0e:77:6d:4c:f6:93:d8:7b:00:c5:21:ec:5c:04:70:2b:
bb:76:a9:79:b1:28:52:dc:24:e9:a6:23:a3:e9:d7:77:41:0e:
0a:69:b5:cd:3c:3f:d3:dd:8d:c3:0e:0e:0b:ea:a2:5d:c5:d2:
dc:04:ac:92:21:67:99:53:0e:5b:72:d2:04:ce:b5:aa:81:f0:
62:1b:82:b5:68:35:9f:3a:c1:34:0a:ed:ba:2e:34:57:45:8f:
65:07:87:19:43:7e:5c:17:0c:75:9a:ab:7e:df:49:77:e5:25:
d6:36:2b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYuq/TuSYCQn+dA55m46KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjYwNDE3MDMwMTI5WhcNMjYwNDE4MDMwMTI5WjAzMTEwLwYDVQQD
EyhjM2M4NDZkZTk1MWQ2ODNiNDMwNzYxNjhmNTY1ODkxNjBiZjg0MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQisknfNnt4p7V6SRNR8Sy6Yep8v
RQze3lqJgC6BkSMkDhJkcFi+AkciXN7MxLkbbNZ2qh+jIaSEHJPEXvQfKhSTXJdz
juI0obmbniKD0KbMVVSskdEBiimQF4fhz0wU+F7gl83B+m9tGUvkIVnxnY6FsB7k
+0nCtBfEv8d+dkilmNDULcXyloj50BpyWf+qJ4T3Ye5aMjnOAtH72K6huG+aSFHl
vAWypTmC1pZJJ1sGljC8R4fZAJ8+ghw9kLqiSYP1GwyulyB49O6icy+KNTNAj/x/
eumtzH7msz1OHR4PGkKlgvIkwwKlU3ApNj8/Qj6kq7nfdnpEwMLqFSDz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPIRt6VHWg7QwdhaPVliRYL+EAOMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArtV787R
jirViEcE6GtPNnJtXeGezFsP8PZ1u95PO7CE718+gr8XH0Tt5C/5OdbVq1pdJugW
JrIOT5AiAy7GAcVAcAG+z6/nAyfv2LA+eOS+6wH6G7kqFOvR5aNNn+z0Hgd3xWzg
J3aFD/93xm8iwirBISb+Qej15ROpJSrsV+5XyiH+yd/ey13jcmFXO6/uFz0Od21M
9pPYewDFIexcBHAru3apebEoUtwk6aYjo+nXd0EOCmm1zTw/092Nww4OC+qiXcXS
3ASskiFnmVMOW3LSBM61qoHwYhuCtWg1nzrBNArtui40V0WPZQeHGUN+XBcMdZqr
ft9Jd+Ul1jYr7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:53 2026 by rpki-client