Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: SoIE79piAuDuGBEXXVBQog59C7fiPytonRdOgEk8N/E=
Subject key identifier: E5:D7:84:EE:AA:3A:CD:37:C9:B8:6B:F4:98:C8:15:09:EF:08:AC:7A
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019D992B576E0A9AA80691BE2AA45E79DF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:47 +0000
Manifest this update: Fri 17 Apr 2026 02:00:47 +0000
Manifest next update: Sat 18 Apr 2026 02:00:47 +0000
Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=)
2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: zK6BLIyqL6nq04yK6rKTy27cu9qCyzj90WmeKvqUEQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:57:6e:0a:9a:a8:06:91:be:2a:a4:5e:79:df:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Apr 17 02:00:47 2026 GMT
Not After : Apr 18 02:00:47 2026 GMT
Subject: CN=e5d784eeaa3acd37c9b86bf498c81509ef08ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:d5:a8:e6:f5:ef:7e:6b:54:f3:6c:be:47:
d7:fb:82:98:a1:72:bf:bb:23:c4:55:58:0b:85:44:
05:cb:be:7b:7f:79:a0:7e:27:d8:e9:d3:1b:80:c8:
eb:24:b7:a0:b0:86:69:77:de:3d:ec:39:86:29:f9:
24:60:43:48:3f:b9:7f:3b:90:a3:3b:1d:eb:a4:e0:
e7:a6:a2:48:4d:de:0b:36:6d:16:37:d8:b2:9d:9c:
f1:fa:7b:1f:58:e7:d9:de:c6:9c:d2:43:cf:95:7e:
94:60:96:72:cd:0a:ba:1e:7d:4c:6d:94:0d:ce:50:
99:80:42:7f:ae:c9:a7:6f:22:49:08:32:9d:54:f3:
74:6f:51:04:b9:b5:63:13:71:3b:a2:b1:b3:34:ab:
0a:c3:f8:58:43:5b:15:7f:65:fc:a9:a2:9e:08:03:
78:22:df:e2:46:75:a8:4f:e3:17:c7:1a:9d:6b:54:
bf:73:3c:ff:5f:e9:ea:3a:a4:af:63:e3:0f:b0:38:
36:73:b3:64:6f:8f:b1:75:8e:6e:b4:5f:1e:61:4c:
71:06:3e:7e:a8:df:65:ac:77:7c:df:8c:24:50:2b:
16:55:37:94:83:d2:d2:59:64:82:5f:cc:d4:10:9d:
3a:09:bc:72:79:a0:bb:c1:c3:a9:ef:63:9a:fc:dd:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:84:EE:AA:3A:CD:37:C9:B8:6B:F4:98:C8:15:09:EF:08:AC:7A
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:26:54:53:cc:df:3c:ff:bd:e8:47:1c:77:5c:91:60:af:
3e:29:fd:b0:e9:8d:73:5c:5a:fd:68:64:fd:dd:27:73:ea:ec:
5c:03:dd:17:d0:e2:31:8e:b8:76:c9:8c:d0:5e:d3:d6:56:68:
3d:ee:13:83:39:de:b5:8a:63:1a:fa:8d:0c:56:29:48:36:7b:
04:e9:9f:ca:d7:6a:94:52:cb:dd:66:03:0a:cf:4c:5b:05:71:
25:ac:50:61:fc:6b:b5:81:13:62:0d:61:f9:8d:a7:8d:0a:93:
74:b7:c9:69:d5:80:d5:2b:31:e6:9c:b1:eb:d1:26:33:a6:74:
91:b2:95:96:d9:d5:ab:81:df:53:c8:f1:3a:22:9d:a3:14:30:
61:ea:1b:90:76:96:ff:be:1f:46:bd:7a:cc:fc:5a:bf:36:db:
bc:46:52:80:e3:0f:82:c1:9c:7a:77:91:14:bf:fc:4a:c5:18:
01:eb:6a:15:0d:59:84:f6:0e:64:b8:d8:0a:df:1a:89:60:aa:
cf:71:82:4c:61:aa:bb:14:e2:a7:6f:27:fc:6a:00:a3:40:90:
c7:6d:2e:65:56:db:97:70:89:d4:bf:3c:c8:7c:1b:40:66:51:
d5:62:66:fb:aa:0d:4f:65:04:8c:75:aa:c4:f5:6c:70:11:61:
4c:09:ef:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1duCpqoBpG+KqReed9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx
MWY2ZTEwHhcNMjYwNDE3MDIwMDQ3WhcNMjYwNDE4MDIwMDQ3WjAzMTEwLwYDVQQD
EyhlNWQ3ODRlZWFhM2FjZDM3YzliODZiZjQ5OGM4MTUwOWVmMDhhYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCvVqOb1735rVPNsvkfX+4KYoXK/
uyPEVVgLhUQFy757f3mgfifY6dMbgMjrJLegsIZpd9497DmGKfkkYENIP7l/O5Cj
Ox3rpODnpqJITd4LNm0WN9iynZzx+nsfWOfZ3sac0kPPlX6UYJZyzQq6Hn1MbZQN
zlCZgEJ/rsmnbyJJCDKdVPN0b1EEubVjE3E7orGzNKsKw/hYQ1sVf2X8qaKeCAN4
It/iRnWoT+MXxxqda1S/czz/X+nqOqSvY+MPsDg2c7Nkb4+xdY5utF8eYUxxBj5+
qN9lrHd834wkUCsWVTeUg9LSWWSCX8zUEJ06CbxyeaC7wcOp72Oa/N3PgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXXhO6qOs03ybhr9JjIFQnvCKx6MB8GA1UdIwQY
MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct
YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh
LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEomVFPM
3zz/vehHHHdckWCvPin9sOmNc1xa/Whk/d0nc+rsXAPdF9DiMY64dsmM0F7T1lZo
Pe4TgznetYpjGvqNDFYpSDZ7BOmfytdqlFLL3WYDCs9MWwVxJaxQYfxrtYETYg1h
+Y2njQqTdLfJadWA1Ssx5pyx69EmM6Z0kbKVltnVq4HfU8jxOiKdoxQwYeobkHaW
/74fRr16zPxavzbbvEZSgOMPgsGceneRFL/8SsUYAetqFQ1ZhPYOZLjYCt8aiWCq
z3GCTGGquxTip28n/GoAo0CQx20uZVbbl3CJ1L88yHwbQGZR1WJm+6oNT2UEjHWq
xPVscBFhTAnvDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:20 2026 by rpki-client