Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: Kr79ueIk/Cs40jiMw6WyIqZ3f4HY/7nTyPJOEu+0jbk=
Subject key identifier: 78:25:74:83:CD:E1:52:BB:85:8D:D6:14:5A:3C:9B:EC:14:D0:2D:91
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 019D98F4828E42F109AC5AEA54CB5EEB7427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 01:00:53 +0000
Manifest this update: Fri 17 Apr 2026 01:00:53 +0000
Manifest next update: Sat 18 Apr 2026 01:00:53 +0000
Files and hashes: 1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: Q1P19UcUnG5h98QgUzso/Ci2SxxBOmNK8XKbu9yZnHQ=)
5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:82:8e:42:f1:09:ac:5a:ea:54:cb:5e:eb:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Apr 17 01:00:53 2026 GMT
Not After : Apr 18 01:00:53 2026 GMT
Subject: CN=78257483cde152bb858dd6145a3c9bec14d02d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:74:86:5a:d0:f3:c3:ec:c5:3b:04:80:9f:
12:c5:f5:e5:d1:0e:01:42:11:6d:28:66:17:53:1b:
7a:cd:f9:15:87:50:62:c4:1d:96:5d:57:95:7a:05:
a9:cf:03:e7:14:b5:ff:55:cf:a2:53:b1:c1:1b:a6:
87:3f:9b:3c:f5:52:b7:95:51:cd:35:64:04:60:e0:
9d:ac:f7:d7:7b:b3:7b:7f:7c:1c:69:c2:20:6e:f1:
c2:59:6f:e7:5e:1d:e5:87:e3:88:1c:2f:b4:68:e1:
f2:e6:7e:ba:5f:ba:56:2c:04:e7:22:2c:ce:38:c8:
2f:88:ac:c6:b4:85:c8:bf:a4:4e:34:b9:ac:c5:bf:
17:b3:83:ad:32:b6:76:51:0d:8d:5e:ed:9b:fa:c0:
65:e6:2a:b8:64:6f:39:c3:1d:e3:c9:8a:7b:d4:5b:
28:fc:3a:9e:ce:9c:58:ec:2c:02:48:a8:ed:9d:f7:
97:06:24:99:d5:b6:21:9c:97:4a:9c:53:ec:c2:2c:
99:14:33:15:6d:d9:07:df:64:02:8f:56:7e:3a:fe:
ea:68:bf:53:a5:ba:c0:d9:92:ce:a7:f1:a2:94:dd:
a8:4e:90:f4:cc:dd:ed:80:d8:e4:67:07:55:b0:f7:
a4:f9:13:70:78:b7:86:0f:ca:8e:50:ee:88:1a:8c:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:74:83:CD:E1:52:BB:85:8D:D6:14:5A:3C:9B:EC:14:D0:2D:91
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:ad:d1:5e:d8:18:f3:c4:a9:01:54:a6:24:e2:41:17:2d:
57:4c:b2:4f:95:07:6a:11:93:ad:51:bd:9c:1d:db:72:51:8e:
5f:79:1e:54:d6:b5:94:bc:94:dc:f0:c9:38:5d:90:59:c2:53:
9c:8a:93:38:36:04:33:5a:f7:27:58:02:25:ec:39:a1:73:dc:
7c:19:88:de:29:fd:45:bb:c4:76:45:82:30:5c:e9:86:94:d1:
a5:fb:82:f6:4f:e4:d4:23:c0:ae:f2:1e:21:d6:ce:c4:d0:74:
9a:14:38:b2:09:3b:42:39:70:80:ca:6f:51:d6:3e:89:41:42:
80:35:a4:e8:26:a6:7d:c8:c4:3f:0a:9b:1d:54:3c:73:12:91:
da:23:6f:63:ad:05:42:ca:70:de:84:f3:2a:07:04:aa:bc:7d:
9a:52:71:98:0f:39:4d:72:84:fd:2e:04:6d:8f:ee:b2:47:93:
6f:e5:ed:ce:ad:48:f8:53:88:7b:3f:a6:30:c2:e0:33:80:d9:
93:7e:b4:18:93:c1:5b:bd:c4:92:f8:8e:02:00:a6:54:87:e5:
51:38:ee:13:1d:cd:a7:a6:4c:dc:13:53:6e:26:17:57:89:52:
93:f3:58:f5:ae:cf:6b:fc:bd:ca:da:2a:d0:2e:67:8b:97:3e:
9b:88:12:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9IKOQvEJrFrqVMte63QnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0
NTBhZWIwHhcNMjYwNDE3MDEwMDUzWhcNMjYwNDE4MDEwMDUzWjAzMTEwLwYDVQQD
Eyg3ODI1NzQ4M2NkZTE1MmJiODU4ZGQ2MTQ1YTNjOWJlYzE0ZDAyZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ50hlrQ88PsxTsEgJ8SxfXl0Q4B
QhFtKGYXUxt6zfkVh1BixB2WXVeVegWpzwPnFLX/Vc+iU7HBG6aHP5s89VK3lVHN
NWQEYOCdrPfXe7N7f3wcacIgbvHCWW/nXh3lh+OIHC+0aOHy5n66X7pWLATnIizO
OMgviKzGtIXIv6RONLmsxb8Xs4OtMrZ2UQ2NXu2b+sBl5iq4ZG85wx3jyYp71Fso
/DqezpxY7CwCSKjtnfeXBiSZ1bYhnJdKnFPswiyZFDMVbdkH32QCj1Z+Ov7qaL9T
pbrA2ZLOp/GilN2oTpD0zN3tgNjkZwdVsPek+RNweLeGD8qOUO6IGowoSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgldIPN4VK7hY3WFFo8m+wU0C2RMB8GA1UdIwQY
MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt
YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3
LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJWt0V7Y
GPPEqQFUpiTiQRctV0yyT5UHahGTrVG9nB3bclGOX3keVNa1lLyU3PDJOF2QWcJT
nIqTODYEM1r3J1gCJew5oXPcfBmI3in9RbvEdkWCMFzphpTRpfuC9k/k1CPArvIe
IdbOxNB0mhQ4sgk7QjlwgMpvUdY+iUFCgDWk6CamfcjEPwqbHVQ8cxKR2iNvY60F
Qspw3oTzKgcEqrx9mlJxmA85TXKE/S4EbY/uskeTb+Xtzq1I+FOIez+mMMLgM4DZ
k360GJPBW73EkviOAgCmVIflUTjuEx3Np6ZM3BNTbiYXV4lSk/NY9a7Pa/y9ytoq
0C5ni5c+m4gS0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:12:04 2026 by rpki-client