Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: DO5fZhM9vplRmp/uHrrI6ndFLMaENl74/h6DQvHpsT0=
Subject key identifier: C7:78:9E:4F:89:A7:D9:0B:80:62:77:2A:BF:77:3B:B7:72:39:F3:E2
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019D98BDA1F3BA40E6298360C48CCBFAADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: BbT4kFBTea5uosWZ8bPpKIo7WUllf4Y+xNSuGgreOuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a1:f3:ba:40:e6:29:83:60:c4:8c:cb:fa:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=c7789e4f89a7d90b8062772abf773bb77239f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:18:a5:9a:21:73:aa:33:f4:32:f5:8b:51:
5e:04:c5:36:e4:fd:fd:ac:69:91:e9:f2:8a:5a:42:
b1:05:58:44:ca:95:ed:99:38:8c:c5:a8:16:04:3b:
e1:16:9b:95:b9:91:65:3a:40:29:83:d8:f6:e8:31:
9c:a5:a6:ed:fe:3f:09:aa:bc:30:49:83:21:ae:4f:
e4:93:8b:1e:39:d9:66:ec:02:5d:03:03:8e:97:34:
a6:44:aa:6f:e1:00:57:38:0c:01:47:9e:fd:d4:44:
52:97:f7:e3:9d:c6:d5:8e:c7:b3:ce:62:fb:41:5e:
84:8b:8b:a2:91:1c:62:c2:5d:7d:34:92:e8:bc:8f:
30:92:3e:32:bb:16:09:cd:71:28:7a:ab:d0:5b:b9:
5d:d4:98:24:b2:19:84:b8:06:88:05:ed:34:41:28:
fa:3e:b8:39:cb:90:82:76:23:42:cc:c7:e8:dd:2c:
38:16:3a:b6:f7:21:7f:6b:7e:32:a5:aa:52:f4:15:
3f:48:70:62:91:48:c0:e9:02:c4:81:e3:38:10:4d:
4a:94:28:39:c7:4b:29:bf:bc:e4:3f:0d:18:93:9d:
f9:a5:05:74:9e:aa:fa:c7:3c:b5:63:08:2e:d1:43:
03:d3:ba:56:db:f0:77:98:eb:4f:25:8b:cc:bf:32:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:9E:4F:89:A7:D9:0B:80:62:77:2A:BF:77:3B:B7:72:39:F3:E2
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:a9:df:d6:37:a5:45:08:56:dd:d4:f7:ba:40:b6:4e:b7:
8f:9a:c1:97:22:b6:c7:97:01:fc:0f:c1:31:60:34:fa:9d:b1:
72:7a:62:d2:85:4d:7f:c2:05:45:f9:53:73:83:70:83:c2:a3:
8e:15:2d:41:66:db:df:95:f1:35:9a:55:f6:d7:f7:c3:6b:f1:
e8:a8:1f:c4:34:c2:05:c6:d9:76:04:c0:d7:e7:c5:4f:db:65:
68:28:05:51:db:5a:ba:fb:74:39:08:4b:80:bc:e9:3e:d4:18:
8f:c6:18:fb:d6:26:86:57:e3:9e:52:0b:22:c3:83:44:c2:d7:
cb:34:bb:64:ef:43:d2:a5:06:5b:b7:e2:a9:02:67:e7:65:09:
54:8c:45:7e:a1:36:fd:6f:18:e8:73:b5:77:1f:f7:17:cb:a2:
59:76:75:8c:70:ee:41:97:f9:d8:e9:19:cf:de:e2:72:aa:f7:
30:c2:8e:87:07:77:c9:0b:f4:3f:49:6d:65:31:3f:ca:7f:0d:
8a:60:87:fd:8e:33:9a:63:2b:5c:c3:ee:a2:42:ea:97:d4:83:
78:56:88:99:38:ea:9b:a8:84:82:58:84:4e:62:9a:99:d2:d6:
a2:8c:0e:34:8f:b5:ba:96:61:fc:f9:f6:f7:8e:9b:57:e8:2f:
68:af:b3:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvaHzukDmKYNgxIzL+q2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjYwNDE3MDAwMDU3WhcNMjYwNDE4MDAwMDU3WjAzMTEwLwYDVQQD
EyhjNzc4OWU0Zjg5YTdkOTBiODA2Mjc3MmFiZjc3M2JiNzcyMzlmM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygwYpZohc6oz9DL1i1FeBMU25P39
rGmR6fKKWkKxBVhEypXtmTiMxagWBDvhFpuVuZFlOkApg9j26DGcpabt/j8Jqrww
SYMhrk/kk4seOdlm7AJdAwOOlzSmRKpv4QBXOAwBR5791ERSl/fjncbVjsezzmL7
QV6Ei4uikRxiwl19NJLovI8wkj4yuxYJzXEoeqvQW7ld1JgkshmEuAaIBe00QSj6
Prg5y5CCdiNCzMfo3Sw4Fjq29yF/a34ypapS9BU/SHBikUjA6QLEgeM4EE1KlCg5
x0spv7zkPw0Yk535pQV0nqr6xzy1Ywgu0UMD07pW2/B3mOtPJYvMvzJmtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd4nk+Jp9kLgGJ3Kr93O7dyOfPiMB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3mp39Y3
pUUIVt3U97pAtk63j5rBlyK2x5cB/A/BMWA0+p2xcnpi0oVNf8IFRflTc4Nwg8Kj
jhUtQWbb35XxNZpV9tf3w2vx6KgfxDTCBcbZdgTA1+fFT9tlaCgFUdtauvt0OQhL
gLzpPtQYj8YY+9YmhlfjnlILIsODRMLXyzS7ZO9D0qUGW7fiqQJn52UJVIxFfqE2
/W8Y6HO1dx/3F8uiWXZ1jHDuQZf52OkZz97icqr3MMKOhwd3yQv0P0ltZTE/yn8N
imCH/Y4zmmMrXMPuokLql9SDeFaImTjqm6iEgliETmKamdLWoowONI+1upZh/Pn2
946bV+gvaK+zeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:05 2026 by rpki-client