Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier: SQF4X+oY1WbolLYLrXsbTHqnZYFrHtgd2pqLburMcws=
Subject key identifier: 37:CE:0B:B5:5B:B5:18:FB:89:08:C0:D4:6F:79:E0:92:E3:1E:54:7D
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 019D9998E9F7FE0C2765008CEC924E7EEF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: /zdKY/0GkkWz1ZSB0HLFETI7Zd7T7TtyFb4l0I8r8uI=)
2: ko2j8hnKnRa6XfeSySN88cJHiqc.roa (hash: MyMKVgwxSjCpWrh/r1qz4ah1FabN79izJ21lx/qGswk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e9:f7:fe:0c:27:65:00:8c:ec:92:4e:7e:ef:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=37ce0bb55bb518fb8908c0d46f79e092e31e547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:9a:c7:16:69:7a:23:da:77:1b:1d:83:d3:
d2:b9:3d:d9:21:3d:73:6d:d8:b1:db:cb:55:61:cb:
e5:e9:a0:f8:f8:39:54:d4:58:26:9a:17:00:9d:dd:
bc:1c:16:4b:4d:e6:3c:12:80:d0:6d:65:e6:34:29:
55:7c:18:2d:5a:71:cc:b4:3f:89:c7:20:68:09:d6:
fc:c8:8b:52:ae:e5:c6:f5:d7:a6:55:41:29:0f:78:
98:dc:a2:2a:2e:f0:ab:e5:46:82:56:22:57:bc:ed:
76:0b:81:9d:47:83:38:98:d0:b2:dc:ec:d1:99:7b:
95:5f:31:b3:d2:06:de:5d:6a:50:d7:95:e6:72:2d:
9b:50:f9:d7:a7:92:14:e8:bd:cd:aa:19:38:e9:8e:
f4:74:19:32:fa:ee:77:19:4f:e5:c0:64:50:02:4a:
69:2c:5e:d9:f5:49:1d:f1:6a:07:4f:54:22:93:30:
44:5f:00:8f:6d:cb:ca:57:bf:53:27:5e:9c:d0:e1:
eb:9d:c3:ee:5a:e5:39:ee:46:d6:ae:97:35:50:be:
cd:04:0b:26:3f:71:a6:37:a0:27:27:ec:07:85:2a:
94:4f:ea:9c:76:70:fe:9d:19:4c:f9:f9:08:f2:02:
99:31:92:4c:63:24:6c:ae:ce:85:6b:f0:4b:f6:c5:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:0B:B5:5B:B5:18:FB:89:08:C0:D4:6F:79:E0:92:E3:1E:54:7D
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:44:41:0e:73:95:c8:d3:45:2a:43:16:f3:62:60:ac:bd:75:
ff:0e:85:ac:6b:cb:bb:c7:a9:ed:0d:26:6b:ce:ff:8e:8f:72:
68:df:6a:ae:e8:cc:f0:22:26:1d:4b:d9:7f:7a:48:52:66:f2:
ab:61:ff:ee:17:30:69:d4:f8:b5:14:40:88:a3:90:e7:7f:7b:
d3:8d:aa:4e:ff:7e:c5:93:f5:ce:ff:aa:44:37:18:47:c5:26:
76:70:83:96:06:99:29:36:0a:e6:a6:ab:4a:08:4d:c2:e3:d9:
6e:a8:d6:2c:35:fe:20:e4:c6:b9:86:00:06:97:f8:58:ff:b4:
aa:e7:b5:78:d4:8a:ae:ec:7d:66:b1:58:0f:22:d4:e7:ea:96:
48:27:ac:6d:ab:82:5c:d6:00:34:8b:2c:30:38:70:97:98:cc:
36:6d:e7:91:a4:b3:00:a7:22:fd:72:a7:8b:4b:b4:f4:05:59:
6d:5f:e1:06:38:8a:3f:c3:6a:ec:f1:14:90:e5:96:48:84:5c:
c8:d2:4d:92:bd:54:cc:74:2d:2c:b7:d9:9b:a8:d0:12:a7:32:
20:97:24:62:e0:93:29:9c:bf:6e:92:26:31:9d:99:98:43:f8:
f4:e2:f4:74:16:c7:4b:2a:44:4a:c1:ec:06:25:6e:1e:29:ef:
26:2c:84:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmOn3/gwnZQCM7JJOfu8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NWU0YzhjM2E4ODUwMjZkZjhjZDYzMzc5NzhlN2ZhYTkx
YTQ0NmEwHhcNMjYwNDE3MDQwMDI4WhcNMjYwNDE4MDQwMDI4WjAzMTEwLwYDVQQD
EygzN2NlMGJiNTViYjUxOGZiODkwOGMwZDQ2Zjc5ZTA5MmUzMWU1NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndeaxxZpeiPadxsdg9PSuT3ZIT1z
bdix28tVYcvl6aD4+DlU1FgmmhcAnd28HBZLTeY8EoDQbWXmNClVfBgtWnHMtD+J
xyBoCdb8yItSruXG9demVUEpD3iY3KIqLvCr5UaCViJXvO12C4GdR4M4mNCy3OzR
mXuVXzGz0gbeXWpQ15Xmci2bUPnXp5IU6L3Nqhk46Y70dBky+u53GU/lwGRQAkpp
LF7Z9Ukd8WoHT1QikzBEXwCPbcvKV79TJ16c0OHrncPuWuU57kbWrpc1UL7NBAsm
P3GmN6AnJ+wHhSqUT+qcdnD+nRlM+fkI8gKZMZJMYyRsrs6Fa/BL9sWRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfOC7VbtRj7iQjA1G954JLjHlR9MB8GA1UdIwQY
MBaAFOReTIw6iFAm34zWM3l45/qpGkRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMt
OWIzNjdhYjJjY2QzLzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMtOWIzNjdhYjJjY2Qz
LzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMERBDnOV
yNNFKkMW82JgrL11/w6FrGvLu8ep7Q0ma87/jo9yaN9qrujM8CImHUvZf3pIUmby
q2H/7hcwadT4tRRAiKOQ5397042qTv9+xZP1zv+qRDcYR8UmdnCDlgaZKTYK5qar
SghNwuPZbqjWLDX+IOTGuYYABpf4WP+0que1eNSKrux9ZrFYDyLU5+qWSCesbauC
XNYANIssMDhwl5jMNm3nkaSzAKci/XKni0u09AVZbV/hBjiKP8Nq7PEUkOWWSIRc
yNJNkr1UzHQtLLfZm6jQEqcyIJckYuCTKZy/bpImMZ2ZmEP49OL0dBbHSypESsHs
BiVuHinvJiyEyw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:20 2026 by rpki-client