Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: 3QpKwdvcnh3e8K/OP1yiOb8/E8GOAZgnVh4nxB6lhZ4=
Subject key identifier: 75:91:05:15:36:A1:EB:3D:DF:19:A9:B7:16:AA:BF:2A:33:BD:CF:56
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019D99D0DB70BCE4B4514418338CF734B6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: JtUB764JyNY1XXOE1_eNW3xG0iQ.roa (hash: s3szDIQwIbSkPF/zR+p/071/+sqN8uUP7e4YiFiIuRs=)
2: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: lb9OKCj2xbsW7ORThmoIbHjXagCf8cQvZG1pBKgmoqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:db:70:bc:e4:b4:51:44:18:33:8c:f7:34:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=7591051536a1eb3ddf19a9b716aabf2a33bdcf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:fb:f0:20:fc:34:95:1b:22:09:4c:64:47:
1d:de:d3:e2:cd:71:61:16:f1:88:3e:ab:19:23:e2:
22:dc:00:30:90:7c:d4:25:ec:d0:f6:a9:d9:df:7c:
63:13:8d:20:f5:ce:58:d3:91:54:db:f6:71:53:a1:
a5:06:de:74:00:93:2c:e1:14:19:ba:be:02:5f:a1:
86:da:d8:e6:24:2e:78:6d:49:c1:e3:91:2b:00:a6:
40:2f:7c:07:55:99:9c:a8:0f:cf:1e:e4:13:2e:bb:
14:2c:d1:8b:51:34:2e:1d:c0:8c:f7:45:35:dd:24:
d0:08:5f:ba:5a:b6:7c:af:7d:f2:17:24:a0:a3:e0:
ec:5f:2c:b2:d2:d3:a6:39:38:c0:18:eb:25:cf:2b:
f4:85:3f:93:bb:d1:39:15:5b:f4:9f:8a:07:2f:91:
0e:5a:7f:f3:13:24:8e:05:92:be:0a:2b:8d:3e:6d:
c9:64:38:92:d3:48:ce:dc:16:18:04:68:67:de:ab:
9d:31:78:1a:f8:f9:f3:e0:7d:b1:59:5a:49:34:2f:
0e:14:af:dd:44:28:5f:77:5c:44:c8:72:55:a9:60:
6a:fd:54:7f:40:ba:30:e1:9e:b4:aa:32:b4:e1:bb:
b8:85:32:da:c5:26:5b:eb:a1:2a:ca:05:20:f5:7d:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:05:15:36:A1:EB:3D:DF:19:A9:B7:16:AA:BF:2A:33:BD:CF:56
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8b:c6:f4:36:dd:db:37:bf:29:e3:47:e8:79:4d:49:0b:16:
d3:8e:55:0f:42:1d:68:74:cc:67:18:44:ec:c2:39:dc:a4:f5:
77:b5:04:7e:1e:83:c5:84:6c:28:77:de:09:af:e6:12:f3:44:
f7:c6:62:28:b2:d7:7a:c5:b0:cc:e8:d9:16:b9:04:77:50:a3:
42:a0:d4:eb:7b:ae:79:ee:5c:49:7f:6b:19:56:fc:c0:d8:7e:
94:2c:ca:54:74:0f:31:96:33:89:4d:21:1e:8d:d6:4e:d2:74:
5f:88:cf:a5:b8:50:fa:53:0f:78:eb:22:be:2b:89:6a:bf:4c:
73:57:16:97:e5:fa:7f:2a:53:93:97:c1:83:d3:31:e8:86:db:
fd:9f:41:4e:26:9b:c1:17:ae:c4:d2:f7:dc:36:24:c4:75:4c:
eb:98:35:d6:e6:fc:06:1d:ed:47:f4:53:1b:6b:de:c1:5d:5b:
f4:f1:9e:82:95:4f:2a:71:74:25:e8:6b:55:d3:de:10:3b:0a:
02:1a:51:ee:87:0b:a1:c2:c3:cf:8b:54:2c:93:57:9e:29:51:
46:67:9c:d8:4b:29:80:4f:97:ee:a5:9e:5b:cc:e1:cb:97:94:
15:f8:bd:3a:2a:b2:b1:ab:39:d5:66:84:6a:3d:f3:f6:cf:82:
98:8b:7d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NtwvOS0UUQYM4z3NLbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RiMjgxZmI2NWYwMjhiN2NkY2FiOWM0NzA2ZWE3YzQ1
OTQwMjIwHhcNMjYwNDE3MDUwMTM0WhcNMjYwNDE4MDUwMTM0WjAzMTEwLwYDVQQD
Eyg3NTkxMDUxNTM2YTFlYjNkZGYxOWE5YjcxNmFhYmYyYTMzYmRjZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTX78CD8NJUbIglMZEcd3tPizXFh
FvGIPqsZI+Ii3AAwkHzUJezQ9qnZ33xjE40g9c5Y05FU2/ZxU6GlBt50AJMs4RQZ
ur4CX6GG2tjmJC54bUnB45ErAKZAL3wHVZmcqA/PHuQTLrsULNGLUTQuHcCM90U1
3STQCF+6WrZ8r33yFySgo+DsXyyy0tOmOTjAGOslzyv0hT+Tu9E5FVv0n4oHL5EO
Wn/zEySOBZK+CiuNPm3JZDiS00jO3BYYBGhn3qudMXga+Pnz4H2xWVpJNC8OFK/d
RChfd1xEyHJVqWBq/VR/QLow4Z60qjK04bu4hTLaxSZb66EqygUg9X1mHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWRBRU2oes93xmptxaqvyozvc9WMB8GA1UdIwQY
MBaAFIrNsoH7ZfAot83KucRwbqfEWUAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUt
ZmFjMzQ2NDAwMzY5LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUtZmFjMzQ2NDAwMzY5
LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIvG9Dbd
2ze/KeNH6HlNSQsW045VD0IdaHTMZxhE7MI53KT1d7UEfh6DxYRsKHfeCa/mEvNE
98ZiKLLXesWwzOjZFrkEd1CjQqDU63uuee5cSX9rGVb8wNh+lCzKVHQPMZYziU0h
Ho3WTtJ0X4jPpbhQ+lMPeOsiviuJar9Mc1cWl+X6fypTk5fBg9Mx6Ibb/Z9BTiab
wReuxNL33DYkxHVM65g11ub8Bh3tR/RTG2vewV1b9PGegpVPKnF0JehrVdPeEDsK
AhpR7ocLocLDz4tULJNXnilRRmec2EspgE+X7qWeW8zhy5eUFfi9Oiqysas51WaE
aj3z9s+CmIt9jA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:48 2026 by rpki-client