Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: rh+YgbAaj7n9PWvb3FHBe6fZaWr+iidl/W7WimZgohM=
Subject key identifier: 50:0B:6C:19:5F:1D:CE:82:45:32:A6:25:35:C5:DF:96:64:E7:1B:56
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019D99D0112E1D881FEAA680F4378AFEF886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: 5E4BZktl2WdxNS1G/ximfYP7CeC/+2mPt7mRp6kL+U8=)
2: mT1y4Vcpn5hGJXQzo130fr7-JU8.roa (hash: 5+RIIvJ1lvndyR9sJPil/4SfnDQMNqbmhhM2Do86aWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:11:2e:1d:88:1f:ea:a6:80:f4:37:8a:fe:f8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=500b6c195f1dce824532a62535c5df9664e71b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:90:04:b6:db:27:14:d6:9c:59:5b:2c:ae:
c3:4c:23:2d:06:81:3b:dc:e3:42:f6:24:4f:d2:09:
32:b9:c3:a7:6f:17:75:9c:2a:46:d2:12:10:91:c6:
27:3c:86:4b:cc:13:a6:66:11:28:4d:3b:08:09:2a:
a1:32:2c:bf:d6:b1:5d:2d:b1:13:06:86:c4:d5:29:
fe:21:94:a7:76:52:c3:e9:b1:d8:d4:66:5f:3b:38:
5c:76:99:ab:03:57:d5:e0:5e:36:1a:67:8a:6f:69:
85:ef:62:0f:f4:71:62:34:17:ae:90:50:60:8d:08:
af:40:0f:bf:10:db:ff:c9:06:75:38:bd:c3:16:cf:
38:71:3e:6c:f1:ad:6a:7f:72:eb:46:c0:f4:a1:d2:
56:96:f9:57:3c:4b:5e:ba:62:af:de:51:e2:3c:41:
71:e9:8b:40:55:ce:10:8b:8f:d5:b8:9d:a5:8e:66:
32:a8:37:40:81:be:73:89:c4:ea:12:d1:d1:fd:78:
43:69:6b:90:21:f3:a0:e6:d0:30:3f:8e:9d:2c:ae:
06:1e:87:65:71:fc:50:17:09:79:2b:c8:b8:2c:cd:
92:2a:21:aa:7a:78:7a:4c:ec:bf:00:ed:23:cb:c6:
6f:e7:79:22:7c:e5:b5:d2:42:29:8d:88:2b:f0:53:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:6C:19:5F:1D:CE:82:45:32:A6:25:35:C5:DF:96:64:E7:1B:56
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:79:fc:38:35:48:aa:4d:ff:25:f2:6a:cc:08:7c:5d:06:
b7:56:8d:6f:77:f6:9b:39:cb:39:68:e3:e7:33:b6:5b:7e:1e:
c8:67:0c:b8:c5:89:05:b7:f0:58:a0:ec:47:f7:85:dd:74:f4:
b1:36:96:f0:9b:9b:67:c0:3f:d2:6d:ad:d6:d7:0d:e1:09:59:
51:de:f1:34:ad:a3:00:4d:88:fa:70:7a:0c:d6:90:f8:ea:d7:
bb:6e:64:b0:23:a9:7a:14:f2:52:a9:60:3f:24:79:54:d7:8c:
93:e2:87:56:aa:50:82:30:02:5f:f9:36:81:64:c7:2e:9e:1c:
f2:5d:0c:c9:2d:d3:14:b6:0d:c1:77:cc:b6:66:f8:91:86:51:
b4:d7:08:85:9f:b7:eb:a0:f2:83:32:3f:9c:92:78:4e:43:a9:
7b:55:85:f6:63:ee:48:3b:30:05:5c:e4:c7:68:80:a6:2a:f9:
09:24:07:fc:81:b3:0d:18:ae:6c:29:08:1e:43:38:7a:29:27:
4c:44:dd:2d:72:c9:41:57:57:93:5d:88:3c:95:d8:e4:fb:2f:
4d:da:f0:07:89:29:d4:cb:82:65:ec:91:47:76:b1:41:7b:8e:
1d:b3:c2:42:ec:c8:22:f1:50:5c:32:6d:5a:f6:eb:72:fe:89:
91:ce:3b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BEuHYgf6qaA9DeK/viGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1
ZDY2ZjkwHhcNMjYwNDE3MDUwMDQzWhcNMjYwNDE4MDUwMDQzWjAzMTEwLwYDVQQD
Eyg1MDBiNmMxOTVmMWRjZTgyNDUzMmE2MjUzNWM1ZGY5NjY0ZTcxYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6QBLbbJxTWnFlbLK7DTCMtBoE7
3ONC9iRP0gkyucOnbxd1nCpG0hIQkcYnPIZLzBOmZhEoTTsICSqhMiy/1rFdLbET
BobE1Sn+IZSndlLD6bHY1GZfOzhcdpmrA1fV4F42GmeKb2mF72IP9HFiNBeukFBg
jQivQA+/ENv/yQZ1OL3DFs84cT5s8a1qf3LrRsD0odJWlvlXPEteumKv3lHiPEFx
6YtAVc4Qi4/VuJ2ljmYyqDdAgb5zicTqEtHR/XhDaWuQIfOg5tAwP46dLK4GHodl
cfxQFwl5K8i4LM2SKiGqenh6TOy/AO0jy8Zv53kifOW10kIpjYgr8FO4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFALbBlfHc6CRTKmJTXF35Zk5xtWMB8GA1UdIwQY
MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt
NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh
LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrh5/Dg1
SKpN/yXyaswIfF0Gt1aNb3f2mznLOWjj5zO2W34eyGcMuMWJBbfwWKDsR/eF3XT0
sTaW8JubZ8A/0m2t1tcN4QlZUd7xNK2jAE2I+nB6DNaQ+OrXu25ksCOpehTyUqlg
PyR5VNeMk+KHVqpQgjACX/k2gWTHLp4c8l0MyS3TFLYNwXfMtmb4kYZRtNcIhZ+3
66DygzI/nJJ4TkOpe1WF9mPuSDswBVzkx2iApir5CSQH/IGzDRiubCkIHkM4eikn
TETdLXLJQVdXk12IPJXY5PsvTdrwB4kp1MuCZeyRR3axQXuOHbPCQuzIIvFQXDJt
Wvbrcv6Jkc47cQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:25 2026 by rpki-client