Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: mVHAMNeuyuke+22rWDaVBuhbOR+l3HGtv8XHTn0RpzE=
Subject key identifier: 19:B2:89:00:23:4E:43:6A:4C:A7:AD:2B:CD:51:A8:C8:F4:A4:27:A5
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019D9C639C2A37AC802E6702CE41A838B785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 17:01:06 +0000
Manifest this update: Fri 17 Apr 2026 17:01:06 +0000
Manifest next update: Sat 18 Apr 2026 17:01:06 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: ihbW4cGgqStrpkdf3cZElRMJeJU2gi0Vt7XoEEI4HRM=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:9c:2a:37:ac:80:2e:67:02:ce:41:a8:38:b7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Apr 17 17:01:06 2026 GMT
Not After : Apr 18 17:01:06 2026 GMT
Subject: CN=19b28900234e436a4ca7ad2bcd51a8c8f4a427a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:f2:7b:a3:50:e9:29:1e:11:23:6f:cc:82:
6a:18:01:ef:65:e3:90:d8:da:07:21:9d:ca:c2:95:
ca:54:ec:bb:70:d2:e8:68:3b:b5:19:b5:a8:6b:36:
52:a2:4c:53:19:56:05:7e:9b:e5:9c:52:2c:f3:07:
42:1c:8d:06:86:78:99:e1:ea:29:b4:28:76:4a:5b:
1f:a1:25:73:0a:78:b5:54:c6:b7:f0:e3:b9:77:7e:
40:b1:08:75:c9:df:5c:2f:b7:08:2c:d0:3c:73:34:
e4:f3:1c:ef:47:76:f1:30:53:fb:72:79:83:7d:f3:
23:d6:5e:58:26:58:22:b3:62:84:63:b8:46:79:69:
ef:ee:d4:b3:00:91:53:71:4a:37:ab:1c:85:19:21:
f1:87:e6:ef:e5:46:ad:56:40:88:97:76:a9:46:8a:
82:72:36:17:b0:7e:b8:13:a6:19:f2:a3:5f:1a:a2:
e2:29:f2:ef:5e:d5:b0:44:55:ae:2f:44:8b:35:41:
48:42:29:c8:09:c2:2f:7a:33:20:d5:e3:df:c8:14:
b8:a9:b5:e6:e8:19:b2:84:0d:37:0a:16:48:10:97:
d6:69:e1:61:74:99:f0:59:70:dc:1c:4e:8c:5c:40:
c9:56:3f:77:ef:20:68:ca:78:33:4f:79:96:c2:6a:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:89:00:23:4E:43:6A:4C:A7:AD:2B:CD:51:A8:C8:F4:A4:27:A5
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:85:db:a5:17:1d:9d:44:dc:2e:99:05:dc:ad:54:5e:39:98:
63:b3:26:ef:f6:e5:1d:db:9c:0f:28:4d:96:75:11:f0:5a:31:
a4:c4:87:ca:e6:09:05:2f:bc:49:a0:fb:34:cc:75:e1:96:15:
d1:e2:77:19:ad:b5:55:49:70:ee:68:85:6c:c0:bc:e6:10:1d:
a3:53:a6:7f:2f:7b:1b:09:40:89:7d:99:7e:7c:f4:fc:dd:c4:
d4:66:7f:99:7d:1c:5c:64:f4:41:67:13:57:e8:f8:c1:60:04:
12:16:32:4d:de:8c:22:14:44:e4:94:6b:28:5f:3b:9d:b3:61:
84:8d:b0:1e:53:88:8d:1c:7b:30:70:73:d8:42:ad:ea:9a:8b:
d2:28:33:81:85:52:23:33:91:2b:d3:2e:5b:e5:79:1d:af:83:
24:aa:d9:fd:c8:ba:51:b9:35:36:7f:4f:d2:08:cb:05:73:d7:
9c:cf:72:8c:a4:17:39:8e:ac:76:09:ed:58:92:50:b8:32:e4:
2d:53:4a:21:68:be:a4:6b:22:9d:55:90:97:fa:fc:a6:cf:de:
11:8e:94:96:c4:85:e1:9c:b1:a2:60:1f:c1:e4:3f:d9:59:c3:
49:a5:2d:3a:21:36:92:53:d8:60:53:24:1a:8a:30:b4:61:c4:
d9:29:9c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY5wqN6yALmcCzkGoOLeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk
MWE5YWYwHhcNMjYwNDE3MTcwMTA2WhcNMjYwNDE4MTcwMTA2WjAzMTEwLwYDVQQD
EygxOWIyODkwMDIzNGU0MzZhNGNhN2FkMmJjZDUxYThjOGY0YTQyN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Hye6NQ6SkeESNvzIJqGAHvZeOQ
2NoHIZ3KwpXKVOy7cNLoaDu1GbWoazZSokxTGVYFfpvlnFIs8wdCHI0GhniZ4eop
tCh2SlsfoSVzCni1VMa38OO5d35AsQh1yd9cL7cILNA8czTk8xzvR3bxMFP7cnmD
ffMj1l5YJlgis2KEY7hGeWnv7tSzAJFTcUo3qxyFGSHxh+bv5UatVkCIl3apRoqC
cjYXsH64E6YZ8qNfGqLiKfLvXtWwRFWuL0SLNUFIQinICcIvejMg1ePfyBS4qbXm
6BmyhA03ChZIEJfWaeFhdJnwWXDcHE6MXEDJVj937yBoyngzT3mWwmpYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmyiQAjTkNqTKetK81RqMj0pCelMB8GA1UdIwQY
MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct
MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2
LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4XbpRcd
nUTcLpkF3K1UXjmYY7Mm7/blHducDyhNlnUR8FoxpMSHyuYJBS+8SaD7NMx14ZYV
0eJ3Ga21VUlw7miFbMC85hAdo1Omfy97GwlAiX2Zfnz0/N3E1GZ/mX0cXGT0QWcT
V+j4wWAEEhYyTd6MIhRE5JRrKF87nbNhhI2wHlOIjRx7MHBz2EKt6pqL0igzgYVS
IzORK9MuW+V5Ha+DJKrZ/ci6Ubk1Nn9P0gjLBXPXnM9yjKQXOY6sdgntWJJQuDLk
LVNKIWi+pGsinVWQl/r8ps/eEY6UlsSF4ZyxomAfweQ/2VnDSaUtOiE2klPYYFMk
GoowtGHE2SmcOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:59 2026 by rpki-client