Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: XpQO6qwX9f92lCCWgDYOJODgYb6oZ9WLqSlsC1rKlTA=
Subject key identifier: 1C:2E:58:42:F2:E2:C0:FC:01:71:AF:73:FE:EE:8C:5D:2E:81:30:43
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 019D9998D0F25208D7F2097C5D98028922A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: vksqvUAII0giuxDjCQNg3VZ/ORDwGCr/P0lSzwVGskI=)
2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d0:f2:52:08:d7:f2:09:7c:5d:98:02:89:22:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=1c2e5842f2e2c0fc0171af73feee8c5d2e813043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:6e:30:37:70:23:0a:18:64:4b:52:0d:08:
0c:e8:eb:d4:aa:77:61:ca:96:45:68:3f:f0:23:36:
d3:f1:29:b3:4c:d1:81:a7:0c:bc:9b:f6:76:01:b7:
75:f7:a8:b5:94:c2:fe:32:0e:ea:81:12:92:c7:30:
14:fd:aa:71:e1:17:6b:47:c5:ea:dc:e0:16:2d:bd:
01:37:f0:21:6a:d2:e6:63:64:13:5c:b5:d9:04:ee:
57:16:f7:28:2a:75:8e:ab:f9:69:27:91:d2:4e:fb:
04:9b:8b:ba:ef:43:54:74:e0:10:a9:4e:67:87:51:
b2:d2:ec:45:cc:73:cd:c0:0b:0b:d4:f4:db:d9:16:
01:3e:ec:41:9a:d1:16:14:22:31:1b:a2:46:59:15:
dd:24:25:ad:ab:1c:72:5b:ba:6b:ab:ea:4b:d2:ea:
e0:ed:48:09:47:99:8f:a1:3b:d8:c1:80:dd:ab:d2:
38:d4:03:b1:d6:61:de:03:81:79:81:64:35:52:28:
a7:ef:82:01:70:25:88:b1:f3:a8:6f:6c:d2:18:24:
4c:ef:3e:32:67:6d:b2:25:09:90:37:90:3c:f2:e4:
22:48:68:f5:b9:a5:a9:92:b1:72:c7:88:e6:88:89:
02:09:42:fd:5a:81:36:2c:6d:d7:21:f4:74:3a:de:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:58:42:F2:E2:C0:FC:01:71:AF:73:FE:EE:8C:5D:2E:81:30:43
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:ff:cb:8d:4f:1c:c8:67:6a:af:e0:79:78:50:78:c4:46:
3c:c6:50:a4:e2:a7:27:15:f5:6b:dc:04:d5:33:f6:4b:2a:09:
d0:8c:30:84:53:d2:c9:8a:b3:5d:57:8b:6f:9a:73:c7:96:3a:
8a:a3:36:f9:ab:1c:79:73:f4:83:3f:24:c2:28:a8:4d:66:95:
9e:6a:dc:af:40:da:d7:7a:0d:3f:d1:ac:23:aa:ed:b6:e8:b5:
78:33:b1:50:30:82:76:67:b7:5e:6d:f1:ff:fc:2a:79:bb:de:
38:dd:98:8f:e8:cc:11:23:7f:12:7d:47:32:93:7d:4f:ee:2b:
da:7d:eb:22:17:a3:6c:d0:9a:2f:a6:91:8c:b1:c6:3f:13:d3:
11:f2:ef:ca:8d:66:81:38:aa:f5:35:02:fa:aa:cd:e0:94:6c:
56:d5:60:b4:f0:3e:22:8c:0d:1e:cd:22:64:07:bf:53:ec:75:
5d:63:52:af:ec:70:11:b5:16:aa:15:99:26:50:c2:0a:17:c4:
c8:03:4e:a7:8e:a7:f4:eb:55:60:fb:39:4b:f0:14:32:4b:6a:
e1:51:eb:a2:57:74:9a:e1:71:e3:9b:85:50:99:bd:b3:00:2a:
9a:ec:4e:90:90:c9:92:dd:02:b8:24:7b:ed:a6:2f:fa:32:68:
81:7b:0a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmNDyUgjX8gl8XZgCiSKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWU1ZjIzZGI5ODNmZDEzNmFlOWQ3MWU4N2UxZTUxMzBi
Y2Y2ZDQwHhcNMjYwNDE3MDQwMDIyWhcNMjYwNDE4MDQwMDIyWjAzMTEwLwYDVQQD
EygxYzJlNTg0MmYyZTJjMGZjMDE3MWFmNzNmZWVlOGM1ZDJlODEzMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5puMDdwIwoYZEtSDQgM6OvUqndh
ypZFaD/wIzbT8SmzTNGBpwy8m/Z2Abd196i1lML+Mg7qgRKSxzAU/apx4RdrR8Xq
3OAWLb0BN/AhatLmY2QTXLXZBO5XFvcoKnWOq/lpJ5HSTvsEm4u670NUdOAQqU5n
h1Gy0uxFzHPNwAsL1PTb2RYBPuxBmtEWFCIxG6JGWRXdJCWtqxxyW7prq+pL0urg
7UgJR5mPoTvYwYDdq9I41AOx1mHeA4F5gWQ1Uiin74IBcCWIsfOob2zSGCRM7z4y
Z22yJQmQN5A88uQiSGj1uaWpkrFyx4jmiIkCCUL9WoE2LG3XIfR0Ot6TqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwuWELy4sD8AXGvc/7ujF0ugTBDMB8GA1UdIwQY
MBaAFAWuXyPbmD/RNq6dceh+HlEwvPbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQt
NDRlZmQxMzA2NTljLzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQtNDRlZmQxMzA2NTlj
LzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEu//y41P
HMhnaq/geXhQeMRGPMZQpOKnJxX1a9wE1TP2SyoJ0IwwhFPSyYqzXVeLb5pzx5Y6
iqM2+asceXP0gz8kwiioTWaVnmrcr0Da13oNP9GsI6rttui1eDOxUDCCdme3Xm3x
//wqebveON2Yj+jMESN/En1HMpN9T+4r2n3rIhejbNCaL6aRjLHGPxPTEfLvyo1m
gTiq9TUC+qrN4JRsVtVgtPA+IowNHs0iZAe/U+x1XWNSr+xwEbUWqhWZJlDCChfE
yANOp46n9OtVYPs5S/AUMktq4VHrold0muFx45uFUJm9swAqmuxOkJDJkt0CuCR7
7aYv+jJogXsKlA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:41 2026 by rpki-client