Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: k+GBaom7E0EefNcH4yrXtNHIIY7oNp8kP9RP5l4KPHQ=
Subject key identifier: 85:0A:82:13:2A:FC:51:3D:8C:33:86:87:70:02:E1:D3:D7:61:16:97
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019D9A3F00FB80B3B3DB5E043A5246042F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:53 +0000
Manifest this update: Fri 17 Apr 2026 07:01:53 +0000
Manifest next update: Sat 18 Apr 2026 07:01:53 +0000
Files and hashes: 1: DTTdYiDe4rcTCaN-iEKODwI-Eu8.asa (hash: DsmLYrnfk5AoSwzKsrv0DOGKLoF+nHgo9UgrFRmJvjU=)
2: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: 8LnLyEjrMOtz17HZStvJ0O8oZoc87+bY7SpOgFSiMis=)
3: xJH_hObu47NQAEZXy5oLh9VkIAc.roa (hash: 4Dk7/rqnOwM68MYpX2SX9kUT9VCrAuSm9jEE6Z2mvJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:00:fb:80:b3:b3:db:5e:04:3a:52:46:04:2f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Apr 17 07:01:53 2026 GMT
Not After : Apr 18 07:01:53 2026 GMT
Subject: CN=850a82132afc513d8c3386877002e1d3d7611697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:87:d6:3b:f5:e7:bd:25:92:62:0e:9a:95:
7c:8d:a3:47:cc:9e:b5:d1:05:58:ea:5e:f5:c1:bb:
81:55:e8:00:43:46:34:ee:8f:9c:a1:60:e3:a7:db:
a1:3b:78:62:d5:d1:23:e5:6e:7a:2d:1c:b9:f0:4d:
e8:65:62:70:22:eb:6b:b4:70:01:6b:67:16:56:7f:
28:e1:55:24:a1:9a:07:ab:04:d7:34:0f:c3:78:93:
ff:2d:41:de:0f:d7:6d:a6:6c:63:f3:b0:c0:15:61:
64:10:11:c8:35:49:dc:4c:7e:6d:21:71:2a:3f:d0:
2d:ab:6e:7b:16:7f:52:e7:45:33:af:cb:fa:1c:47:
f2:18:30:81:de:2b:76:0a:c3:e8:3e:9e:77:c8:00:
dd:dd:ef:6d:f1:22:bc:9f:5e:ee:66:64:4d:0b:e8:
ff:67:39:f1:24:e7:4b:1f:90:94:85:6d:bb:30:0a:
d7:2c:13:aa:a7:ee:cb:ca:30:49:94:ba:6f:a9:22:
07:46:f0:18:75:4b:55:fa:bd:29:d2:68:f0:3d:16:
5a:d4:e9:39:f3:9c:81:6a:89:f1:4b:42:22:b5:5d:
d3:58:b5:7d:0f:f2:0b:b0:2a:a1:a5:58:a3:a6:43:
e9:6f:82:2f:e9:12:38:70:09:42:de:fb:50:cb:23:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:82:13:2A:FC:51:3D:8C:33:86:87:70:02:E1:D3:D7:61:16:97
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:65:c3:a8:ce:30:29:67:ae:84:09:b5:c9:32:c4:09:1d:8f:
77:8c:9f:8e:bc:2a:a3:50:3d:6b:24:e7:cb:f7:ce:cf:0a:8b:
4b:02:3c:67:77:84:ed:a4:bd:5e:17:e9:77:09:82:98:d5:2b:
b4:b6:79:b4:43:ab:11:f7:86:26:2c:44:0a:64:84:f2:4a:aa:
d1:ce:4b:84:da:8b:45:a7:44:ea:d0:8b:85:a4:3f:dd:6b:e8:
b8:54:93:de:eb:97:16:be:ed:2a:45:90:b2:c6:27:ec:a2:22:
df:4d:e9:90:f2:8c:00:ab:07:10:2f:7d:26:0b:a1:7c:3b:ad:
c5:22:b0:99:08:c8:b0:41:f4:43:3d:0a:9a:44:7d:cf:01:f5:
7c:05:b7:a5:bf:96:bf:ff:65:c3:43:a8:5d:48:49:f1:28:b4:
ab:9c:c3:68:82:c9:e4:ea:71:a2:04:75:bd:96:e6:94:d8:44:
0a:dc:1c:0a:bd:80:ae:01:17:99:ec:15:da:4d:bc:ee:c8:d0:
fb:b4:82:aa:35:8b:6e:87:8b:fd:82:a8:a5:0f:53:55:14:7d:
8d:00:e1:90:ed:74:d3:ac:36:5a:41:7f:cf:81:6f:6a:9d:0e:
81:dc:ec:a9:1d:47:a2:f3:87:b8:e7:6b:c0:e0:73:79:d9:69:
d6:ef:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:13:46 2026 by rpki-client