Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: Kj7eE2Fq27T2VjTMxXAEu3KKpg3QcKC5tBkpMqQ13pI=
Subject key identifier: 5D:08:B8:E4:8C:BE:98:CD:42:C2:1C:F8:D0:2C:C4:53:FE:32:FE:18
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019D99D05238CA825CFFD8D91AB5A6C494A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: nw0rEw88BW76sbndQUv4nCBvhvCGwFj1KDxiwrOCNfA=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:52:38:ca:82:5c:ff:d8:d9:1a:b5:a6:c4:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=5d08b8e48cbe98cd42c21cf8d02cc453fe32fe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:f8:72:96:f5:06:77:bd:81:14:c8:e9:6a:
49:94:80:13:8e:78:54:27:67:93:7b:28:dc:1b:4e:
38:8f:0a:4d:c7:e6:75:15:08:da:3e:57:16:0d:70:
5d:d8:9e:56:4b:1b:95:18:98:01:d0:ad:09:6c:72:
35:d2:f1:45:f0:c5:cc:b3:a4:f4:8c:69:96:e2:14:
1a:87:ae:99:07:df:12:c4:28:0f:28:70:3c:14:d0:
55:43:7e:c9:6c:b6:97:ed:33:46:c3:84:04:d2:e7:
73:ea:f2:b7:f4:61:5b:f1:10:5b:67:53:84:3e:38:
1b:f7:63:3f:be:0e:e2:2c:71:f1:e4:63:76:34:3c:
18:e7:90:80:ef:dc:81:3c:87:81:2d:97:f0:6b:54:
30:23:e2:64:bc:a7:86:9c:29:55:0d:09:4c:09:e0:
f5:e1:b6:4a:20:3d:18:27:5d:73:30:8d:5a:94:ca:
05:70:1d:07:ed:4e:5b:4e:d0:6d:8d:4e:00:fb:d4:
9a:ab:c8:c9:cd:01:27:49:9c:8a:38:93:59:74:61:
b7:e3:40:56:ad:65:e4:d1:05:b5:74:6e:29:2f:40:
1b:65:04:86:6d:4b:0b:e5:3b:9d:ba:34:7f:dc:5a:
a2:c2:0b:ea:80:d6:98:91:9b:1c:b8:11:f2:31:77:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:B8:E4:8C:BE:98:CD:42:C2:1C:F8:D0:2C:C4:53:FE:32:FE:18
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7f:c1:2d:c0:a7:89:6b:2f:cc:cd:7d:df:2f:2f:5a:85:d9:
1d:56:43:32:3e:de:9d:d4:d1:cc:af:58:55:91:16:ef:30:8d:
39:15:28:19:3c:26:f7:21:50:90:1b:9c:6b:a0:2f:9e:d1:d7:
87:ef:c5:b7:b7:5d:17:75:ac:4f:07:23:e6:dd:ca:4c:44:38:
49:73:06:7e:d6:97:b7:62:93:2b:3b:8c:c9:30:59:29:99:58:
a6:8c:61:23:3b:8a:a1:43:4c:f5:f0:86:28:4d:ff:35:9b:bc:
0b:fc:da:ec:df:38:f3:72:c8:dc:f7:e1:97:4f:0b:dc:57:2c:
31:01:78:74:ed:88:ea:9f:ab:da:9c:6e:d4:35:72:58:f6:da:
57:9d:b5:68:22:4b:88:93:ad:80:18:6b:74:f7:3e:cb:96:e1:
79:7d:64:c3:e1:48:b1:44:58:e8:04:92:40:4c:99:ed:cb:e0:
9b:d2:5c:0e:91:2c:21:94:48:56:c5:e0:10:63:80:e7:e4:83:
71:af:ba:61:8d:35:75:bc:24:8f:75:ff:bf:cb:f0:20:e8:46:
b8:33:26:d4:0c:33:c0:dc:30:b4:c0:b3:76:d9:dc:5b:61:22:
03:ed:a5:81:9c:ad:96:92:dc:ac:1d:ac:af:c7:a0:94:32:b0:
ac:b8:dc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0FI4yoJc/9jZGrWmxJSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjYwNDE3MDUwMDU5WhcNMjYwNDE4MDUwMDU5WjAzMTEwLwYDVQQD
Eyg1ZDA4YjhlNDhjYmU5OGNkNDJjMjFjZjhkMDJjYzQ1M2ZlMzJmZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufj4cpb1Bne9gRTI6WpJlIATjnhU
J2eTeyjcG044jwpNx+Z1FQjaPlcWDXBd2J5WSxuVGJgB0K0JbHI10vFF8MXMs6T0
jGmW4hQah66ZB98SxCgPKHA8FNBVQ37JbLaX7TNGw4QE0udz6vK39GFb8RBbZ1OE
Pjgb92M/vg7iLHHx5GN2NDwY55CA79yBPIeBLZfwa1QwI+JkvKeGnClVDQlMCeD1
4bZKID0YJ11zMI1alMoFcB0H7U5bTtBtjU4A+9Saq8jJzQEnSZyKOJNZdGG340BW
rWXk0QW1dG4pL0AbZQSGbUsL5TudujR/3FqiwgvqgNaYkZscuBHyMXcPZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0IuOSMvpjNQsIc+NAsxFP+Mv4YMB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3/BLcCn
iWsvzM193y8vWoXZHVZDMj7endTRzK9YVZEW7zCNORUoGTwm9yFQkBuca6AvntHX
h+/Ft7ddF3WsTwcj5t3KTEQ4SXMGftaXt2KTKzuMyTBZKZlYpoxhIzuKoUNM9fCG
KE3/NZu8C/za7N8483LI3Pfhl08L3FcsMQF4dO2I6p+r2pxu1DVyWPbaV521aCJL
iJOtgBhrdPc+y5bheX1kw+FIsURY6ASSQEyZ7cvgm9JcDpEsIZRIVsXgEGOA5+SD
ca+6YY01dbwkj3X/v8vwIOhGuDMm1AwzwNwwtMCzdtncW2EiA+2lgZytlpLcrB2s
r8eglDKwrLjcRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:20 2026 by rpki-client