Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: zHZ7hNd3M5tcRSuyD5T5C/309vq+wMNukMhHlK6cLng=
Subject key identifier: 4F:BF:78:E9:65:B0:87:25:40:D5:68:38:41:7C:88:09:F4:1A:EB:00
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019DA52FC7AD83842A552226095F1DEF4B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 10:01:05 +0000
Manifest this update: Sun 19 Apr 2026 10:01:05 +0000
Manifest next update: Mon 20 Apr 2026 10:01:05 +0000
Files and hashes: 1: PCmfaBCDc6kdDFKOLkKdXE8InlY.roa (hash: ZpImK0PiLtizwaLw2fhTrlKvfw3ZfWhio2/P51B+d/A=)
2: RwAyPd51yPKFVoNHbXXQGuR7_EY.roa (hash: SJOa0Y57+2jyYSq2obqvHcjbEVfI5zAybNhvZJSsELU=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: cQvSnhRRZTePyubsTjPOdxu0dGOSymjVcp7DURw5en8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:c7:ad:83:84:2a:55:22:26:09:5f:1d:ef:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Apr 19 10:01:05 2026 GMT
Not After : Apr 20 10:01:05 2026 GMT
Subject: CN=4fbf78e965b0872540d56838417c8809f41aeb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:e0:64:09:06:42:25:10:46:2a:c8:4c:ac:
a6:be:f2:0f:3f:2b:27:3e:df:1f:69:39:b5:52:95:
e8:6e:84:3c:11:a2:fa:b9:5f:70:07:c5:0f:b3:f3:
bf:91:64:b2:a5:40:04:cd:a2:89:9c:72:3d:f4:97:
a7:50:8c:97:11:fc:02:7c:dd:d6:a7:4a:93:56:ed:
c9:1f:48:c8:11:97:75:f9:f9:27:1b:25:b6:c5:50:
f9:5f:02:a2:83:ff:d0:0c:3c:89:b6:fc:30:97:17:
1a:3e:a3:fe:0a:21:3c:e6:31:48:31:e8:4b:1c:c0:
0c:9d:ea:69:92:c0:d7:12:3d:90:75:3f:39:1d:48:
9b:66:96:bd:21:bf:ef:90:6d:4b:98:02:71:46:a6:
d0:ae:78:1b:aa:84:8b:99:76:31:37:f7:93:32:c1:
b8:d9:0e:c1:e8:ab:a7:59:82:b7:91:14:95:61:5a:
1c:be:9f:e8:74:e3:bd:f7:a8:c1:23:87:22:26:c0:
cc:5f:4a:07:d3:73:af:b7:76:0b:dd:9c:94:5b:98:
76:67:25:89:c7:55:4b:d5:8a:1e:8e:7e:b5:75:4e:
54:bb:96:40:2d:ec:43:6e:f1:f3:18:ae:f3:5f:7c:
1f:aa:d4:70:81:c1:6f:e4:8d:ac:6c:c4:9c:24:2b:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:78:E9:65:B0:87:25:40:D5:68:38:41:7C:88:09:F4:1A:EB:00
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9e:d0:a5:dd:58:e0:8b:c9:99:2b:50:18:9e:1b:55:17:49:
cc:75:58:2d:bd:0f:48:7f:51:af:34:8f:3f:01:83:c6:3a:a7:
f0:4f:72:3d:75:a3:1a:96:50:b5:2d:b3:1d:98:97:73:e2:a3:
3b:26:c9:e7:da:5b:3c:95:c5:ee:bc:3d:b8:c2:f0:ed:3f:b4:
04:68:b8:a3:9a:23:ce:63:c1:a6:94:42:f9:fe:a0:6d:73:03:
7d:d4:83:cd:af:7a:f6:9b:8a:4c:ff:33:ce:00:57:36:71:47:
6e:4d:ab:53:21:91:61:af:cc:d9:49:61:c3:46:bf:ed:9f:09:
74:a4:53:25:ec:c3:ce:12:39:7a:2c:15:d1:10:37:8b:ff:5e:
82:50:00:c2:74:5f:07:ae:b3:8f:cd:dc:58:77:9a:6c:65:39:
ea:79:37:32:e0:80:da:18:0d:a3:1f:c5:20:ba:00:81:f0:6b:
52:e8:dc:79:7a:4a:6c:f4:e0:a7:7b:59:f1:59:cc:88:45:c0:
26:53:ce:4a:41:92:0d:bf:b7:65:c6:73:40:58:a8:87:f0:48:
01:89:f1:30:d3:3c:59:38:c7:65:de:de:98:1e:ba:fc:09:42:
d6:5e:31:6e:e3:06:19:2f:bc:49:92:f8:a6:e3:11:5e:0b:b1:
a1:3f:f2:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL8etg4QqVSImCV8d70thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWE1MGExYzYyMDgyNzYyYWZkYTAwN2Q2ZmM4YjRiZGIw
NTc0OWYwHhcNMjYwNDE5MTAwMTA1WhcNMjYwNDIwMTAwMTA1WjAzMTEwLwYDVQQD
Eyg0ZmJmNzhlOTY1YjA4NzI1NDBkNTY4Mzg0MTdjODgwOWY0MWFlYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubXgZAkGQiUQRirITKymvvIPPysn
Pt8faTm1UpXoboQ8EaL6uV9wB8UPs/O/kWSypUAEzaKJnHI99JenUIyXEfwCfN3W
p0qTVu3JH0jIEZd1+fknGyW2xVD5XwKig//QDDyJtvwwlxcaPqP+CiE85jFIMehL
HMAMneppksDXEj2QdT85HUibZpa9Ib/vkG1LmAJxRqbQrngbqoSLmXYxN/eTMsG4
2Q7B6KunWYK3kRSVYVocvp/odOO996jBI4ciJsDMX0oH03Ovt3YL3ZyUW5h2ZyWJ
x1VL1Yoejn61dU5Uu5ZALexDbvHzGK7zX3wfqtRwgcFv5I2sbMScJCubXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+/eOllsIclQNVoOEF8iAn0GusAMB8GA1UdIwQY
MBaAFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAt
MjcyZGFiNWFmYTY2LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAtMjcyZGFiNWFmYTY2
LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT57Qpd1Y
4IvJmStQGJ4bVRdJzHVYLb0PSH9RrzSPPwGDxjqn8E9yPXWjGpZQtS2zHZiXc+Kj
OybJ59pbPJXF7rw9uMLw7T+0BGi4o5ojzmPBppRC+f6gbXMDfdSDza969puKTP8z
zgBXNnFHbk2rUyGRYa/M2Ulhw0a/7Z8JdKRTJezDzhI5eiwV0RA3i/9eglAAwnRf
B66zj83cWHeabGU56nk3MuCA2hgNox/FILoAgfBrUujceXpKbPTgp3tZ8VnMiEXA
JlPOSkGSDb+3ZcZzQFioh/BIAYnxMNM8WTjHZd7emB66/AlC1l4xbuMGGS+8SZL4
puMRXguxoT/yQg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:29 2026 by rpki-client