Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: NaUeBOTNUqC6VIhDjmc5tFb/TOBdgkYqJbVgG9opTyY=
Subject key identifier: 13:CD:B8:79:9E:70:06:48:39:96:A0:A8:01:D0:76:5D:EF:59:7C:6C
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019D9AE27192627DDBA046595BDE24D04E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:00:24 +0000
Manifest this update: Fri 17 Apr 2026 10:00:24 +0000
Manifest next update: Sat 18 Apr 2026 10:00:24 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: TEFkaWZ5thjw3Tkdm1FYieM/3yLxbGnGm64W6kV5Ito=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:71:92:62:7d:db:a0:46:59:5b:de:24:d0:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Apr 17 10:00:24 2026 GMT
Not After : Apr 18 10:00:24 2026 GMT
Subject: CN=13cdb8799e7006483996a0a801d0765def597c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:c7:ea:2a:a0:d8:ab:55:fd:52:b2:b5:65:
ff:91:02:73:a7:b4:31:5b:fd:5b:5c:a2:24:e9:81:
bd:e1:2c:03:b0:f1:ce:84:d3:3d:51:b8:3b:3e:7e:
8c:cd:33:50:28:a6:1b:69:ca:9b:c0:76:0d:69:d0:
5c:5d:18:35:fb:29:e1:b2:0b:df:d8:30:fa:13:15:
2b:00:cb:65:bd:4e:56:fb:ad:9d:4e:94:58:2d:31:
cc:03:b4:f3:a5:ee:11:65:25:ae:f5:73:a7:b0:40:
1d:cc:fd:f3:23:d2:2e:b2:a8:85:f2:ac:3e:24:a9:
6a:87:2f:4c:ef:c1:75:d3:fb:30:78:56:3b:ec:d4:
1d:e0:89:62:09:1f:3f:15:b5:66:2a:12:b1:70:b7:
03:ef:79:f8:3d:19:eb:ee:d6:66:5e:67:53:5f:46:
c3:97:56:b5:ff:f7:e6:8a:54:00:29:b3:10:e8:90:
aa:34:24:9a:a9:be:87:9a:92:10:99:06:ae:ca:30:
cf:4a:1d:c2:dd:e4:d1:f1:54:0c:fa:69:39:6e:8e:
cf:7b:ea:24:67:e4:53:da:8e:01:d7:b7:14:20:5a:
bb:a5:80:74:e0:11:a8:5b:c2:5c:b5:de:a7:e7:19:
54:94:c9:7a:0d:63:36:19:1c:c2:36:ad:4d:4a:a6:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:B8:79:9E:70:06:48:39:96:A0:A8:01:D0:76:5D:EF:59:7C:6C
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4f:14:25:89:fc:b7:b4:5b:5f:db:ec:2c:34:94:66:f7:5b:
53:cf:57:06:91:6e:0b:fe:78:58:6d:17:cc:73:c2:81:68:ec:
e7:74:15:d5:9d:2f:bc:2d:83:ee:1b:ea:8c:2f:0b:fb:d9:a6:
03:5a:fd:25:01:1e:5a:b8:57:7e:0e:94:c2:81:6c:d0:fb:40:
5d:ad:79:fa:cb:30:35:72:98:ba:3a:a7:77:5d:23:64:df:c9:
2e:58:5d:2a:0b:f0:2e:d0:44:f5:6d:ca:8b:c6:7f:f0:60:2c:
e0:6c:72:36:b4:f4:23:f1:51:a0:b1:18:fb:48:a3:6b:b7:d9:
a9:38:f5:d0:1d:a9:70:04:de:3b:dc:99:cd:e3:99:be:39:00:
80:c6:4f:97:20:48:ef:a9:82:af:88:44:12:d5:e1:e7:ec:4c:
32:f5:0d:b8:d4:e2:d2:50:bc:1a:01:e0:6e:54:32:ce:d2:87:
bb:a2:79:2c:62:1a:b8:99:a4:04:28:14:e7:71:f5:26:c4:30:
05:82:6d:6d:a5:8d:6c:3d:c4:88:d2:93:34:34:49:af:6a:a2:
e1:2c:53:fe:c6:05:f0:a3:ed:3f:71:db:ab:a3:1f:a6:60:4f:
e7:dd:56:04:18:c2:82:c4:a1:ce:b8:af:e9:a8:b8:fb:1c:d3:
db:f0:1c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4nGSYn3boEZZW94k0E4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjYwNDE3MTAwMDI0WhcNMjYwNDE4MTAwMDI0WjAzMTEwLwYDVQQD
EygxM2NkYjg3OTllNzAwNjQ4Mzk5NmEwYTgwMWQwNzY1ZGVmNTk3YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q/H6iqg2KtV/VKytWX/kQJzp7Qx
W/1bXKIk6YG94SwDsPHOhNM9Ubg7Pn6MzTNQKKYbacqbwHYNadBcXRg1+ynhsgvf
2DD6ExUrAMtlvU5W+62dTpRYLTHMA7Tzpe4RZSWu9XOnsEAdzP3zI9IusqiF8qw+
JKlqhy9M78F10/sweFY77NQd4IliCR8/FbVmKhKxcLcD73n4PRnr7tZmXmdTX0bD
l1a1//fmilQAKbMQ6JCqNCSaqb6HmpIQmQauyjDPSh3C3eTR8VQM+mk5bo7Pe+ok
Z+RT2o4B17cUIFq7pYB04BGoW8Jctd6n5xlUlMl6DWM2GRzCNq1NSqZNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPNuHmecAZIOZagqAHQdl3vWXxsMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS08UJYn8
t7RbX9vsLDSUZvdbU89XBpFuC/54WG0XzHPCgWjs53QV1Z0vvC2D7hvqjC8L+9mm
A1r9JQEeWrhXfg6UwoFs0PtAXa15+sswNXKYujqnd10jZN/JLlhdKgvwLtBE9W3K
i8Z/8GAs4GxyNrT0I/FRoLEY+0ija7fZqTj10B2pcATeO9yZzeOZvjkAgMZPlyBI
76mCr4hEEtXh5+xMMvUNuNTi0lC8GgHgblQyztKHu6J5LGIauJmkBCgU53H1JsQw
BYJtbaWNbD3EiNKTNDRJr2qi4SxT/sYF8KPtP3Hbq6MfpmBP591WBBjCgsShzriv
6ai4+xzT2/AcwA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:43 2026 by rpki-client