Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: DmQ/6RuWmyqYvW5upEaiATxtdohm4WHGB5Vo8C1XAbM=
Subject key identifier: 32:2F:57:C0:0B:CD:AA:64:75:BB:3A:52:BD:43:77:0A:97:C8:A5:FD
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 019D9818FA4DD1A9362AE20AA31799FBCB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 21:01:06 +0000
Manifest this update: Thu 16 Apr 2026 21:01:06 +0000
Manifest next update: Fri 17 Apr 2026 21:01:06 +0000
Files and hashes: 1: 6ztQxOe_PEgUsDBO6kHXBhIN87Q.roa (hash: vJYdONcCwz7ZRzjkkaza8LT61nND9UkJTOAa0xHd8m4=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: QqQpF6Q5i+h3lXpds0zAfp2vUfVzwVocwCaIIUaRHA4=)
3: vrpkaL0U3jMOO-KVqiy6oc1DpeY.roa (hash: 1otko+I+GMmAYVo9i25VRg3S321FcTSnDSSA4SjQNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fa:4d:d1:a9:36:2a:e2:0a:a3:17:99:fb:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Apr 16 21:01:06 2026 GMT
Not After : Apr 17 21:01:06 2026 GMT
Subject: CN=322f57c00bcdaa6475bb3a52bd43770a97c8a5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:61:2c:cd:39:0f:48:b4:14:2f:55:7a:0e:
16:a9:e4:90:1b:eb:c4:dc:a0:00:f3:58:27:bb:cf:
f8:f8:88:47:2d:7b:a0:7f:26:7c:cc:63:76:45:56:
a5:97:84:cf:c5:70:8b:90:d7:22:33:61:20:45:88:
d6:4b:44:c2:c5:e0:e8:f7:e1:63:13:e8:6c:d8:d2:
6a:2c:e2:20:ad:39:55:b6:1e:2e:62:cb:fc:ee:8a:
61:60:f4:36:0e:e3:34:e4:e1:b7:0c:c7:ef:c9:55:
e7:00:9f:ea:55:d2:be:c4:32:9c:db:ef:1b:5a:e1:
78:0f:24:bd:3e:48:bc:0e:3f:07:bf:96:91:a5:1d:
3d:64:ff:2b:0a:46:15:47:2a:39:45:97:e8:b7:28:
03:8d:20:16:26:3b:87:df:cf:5c:31:3f:8d:44:69:
97:b1:53:a3:16:c4:5c:73:fb:d5:9e:a5:f0:fe:bb:
97:43:58:88:05:3e:86:6f:78:f9:bf:29:69:fd:b3:
0c:d3:be:86:d6:f9:3f:73:50:00:15:24:0c:89:25:
f4:2b:52:17:26:b7:ef:e0:4e:a5:08:2b:03:64:90:
fc:85:f8:c8:24:36:f0:4c:7b:5e:28:05:0f:05:eb:
f9:78:9f:cc:73:01:80:49:7b:df:3b:c6:3d:fd:70:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2F:57:C0:0B:CD:AA:64:75:BB:3A:52:BD:43:77:0A:97:C8:A5:FD
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:ac:c8:65:c7:bb:20:c0:32:9f:c3:9f:49:3c:eb:44:cf:
28:e6:2c:e0:33:6c:46:5c:0c:cd:ac:9c:6d:52:45:43:9a:29:
b8:b1:0f:68:33:04:c9:ad:82:61:10:2d:18:d4:9a:e1:ea:58:
77:78:da:a2:3e:de:f2:18:16:22:e4:98:ae:63:25:ba:6f:fb:
df:92:5f:1c:1a:d1:9f:40:40:59:ed:5d:82:97:24:98:0f:7e:
1f:ea:c0:f1:ca:21:8a:69:61:9d:2a:ce:fe:8c:40:c8:93:8e:
93:1d:1d:d4:69:e5:8d:f1:22:a7:c6:e5:10:b9:e2:6f:01:26:
1a:a7:87:7c:7d:f2:a1:bd:ef:85:a7:7c:3a:b5:f8:4f:58:a1:
39:a4:21:e7:67:2f:f3:6f:f2:a5:f0:f7:ae:bf:8f:55:56:ba:
b4:b1:66:e7:44:86:f4:f7:b8:87:bd:a9:cd:94:fa:72:22:50:
9c:4f:c2:be:c2:88:4d:7a:59:09:32:5f:3c:fb:fd:7f:5c:53:
b5:f4:24:83:09:de:87:6b:24:d3:6e:e7:8f:2d:64:96:c7:81:
4e:ce:65:7a:40:37:1f:9f:96:e7:28:d0:bc:57:2b:bf:99:3b:
b2:ce:e9:34:1d:ba:d2:70:d3:8d:e3:dc:9c:55:25:36:9e:1e:
72:e1:fe:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGPpN0ak2KuIKoxeZ+8tWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOWNiYjFlNDM5YTNhNzFlYjg3OTY2OTJmNjIyYmY4Mzhm
ODQ4OGMwHhcNMjYwNDE2MjEwMTA2WhcNMjYwNDE3MjEwMTA2WjAzMTEwLwYDVQQD
EygzMjJmNTdjMDBiY2RhYTY0NzViYjNhNTJiZDQzNzcwYTk3YzhhNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YdhLM05D0i0FC9Veg4WqeSQG+vE
3KAA81gnu8/4+IhHLXugfyZ8zGN2RVall4TPxXCLkNciM2EgRYjWS0TCxeDo9+Fj
E+hs2NJqLOIgrTlVth4uYsv87ophYPQ2DuM05OG3DMfvyVXnAJ/qVdK+xDKc2+8b
WuF4DyS9Pki8Dj8Hv5aRpR09ZP8rCkYVRyo5RZfotygDjSAWJjuH389cMT+NRGmX
sVOjFsRcc/vVnqXw/ruXQ1iIBT6Gb3j5vylp/bMM076G1vk/c1AAFSQMiSX0K1IX
Jrfv4E6lCCsDZJD8hfjIJDbwTHteKAUPBev5eJ/McwGASXvfO8Y9/XB+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIvV8ALzapkdbs6Ur1DdwqXyKX9MB8GA1UdIwQY
MBaAFDOcux5Dmjpx64eWaS9iK/g4+EiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQt
YWEwMDcxYjdiZjg0LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQtYWEwMDcxYjdiZjg0
LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9GsyGXH
uyDAMp/Dn0k860TPKOYs4DNsRlwMzaycbVJFQ5opuLEPaDMEya2CYRAtGNSa4epY
d3jaoj7e8hgWIuSYrmMlum/735JfHBrRn0BAWe1dgpckmA9+H+rA8cohimlhnSrO
/oxAyJOOkx0d1GnljfEip8blELnibwEmGqeHfH3yob3vhad8OrX4T1ihOaQh52cv
82/ypfD3rr+PVVa6tLFm50SG9Pe4h72pzZT6ciJQnE/CvsKITXpZCTJfPPv9f1xT
tfQkgwneh2sk027njy1klseBTs5lekA3H5+W5yjQvFcrv5k7ss7pNB260nDTjePc
nFUlNp4ecuH+Yg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:37 2026 by rpki-client