Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: hLAummOCIW5oLoyiLJh778/7zvfWrF8/3tZcq9rVcCw=
Subject key identifier: E3:E8:31:B4:8A:16:77:92:C8:00:C1:57:2A:FB:E5:6F:DD:96:90:B8
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 019D9AE33DACBB89C3D313867F81FFB3F557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: Udf1u54g8eD82TtvfONltLPhcohfYyUtv3Aj9obFpQY=)
2: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (hash: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU=)
3: glYko7Sp1JLcpRtPgtRJtpgechE.roa (hash: I3eBEUtzH+51u13OfXKNVDxOVZpjsrqrlvg0BT9d+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3d:ac:bb:89:c3:d3:13:86:7f:81:ff:b3:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=e3e831b48a167792c800c1572afbe56fdd9690b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:fd:a2:12:70:97:8d:cc:dc:73:ed:db:67:
74:8f:9f:78:a7:f5:2f:87:52:e5:12:6e:88:dc:11:
1a:8f:bd:a9:69:c1:1f:6a:f1:6a:b9:69:1e:c3:f8:
8d:ca:26:71:74:3b:61:77:5a:26:4d:0a:16:cb:d9:
d5:c2:5a:78:c0:1b:f7:77:f9:16:15:a6:86:37:c6:
d5:7f:ea:b1:e1:37:5d:60:81:1f:72:64:06:13:06:
47:fc:a9:f2:f7:f8:65:52:1d:44:7c:f5:aa:9b:73:
db:73:01:6a:58:a1:a6:36:59:27:36:c5:83:e9:e8:
90:02:de:16:2c:f5:52:c3:78:f2:4c:72:3b:c4:97:
7d:95:91:a1:5f:97:d8:53:77:90:6b:51:0b:cc:8d:
8d:0c:6a:36:fb:9e:3a:54:94:2e:73:a3:05:c5:10:
3a:dd:79:8a:f6:1b:8e:3e:15:2b:36:f2:88:2e:90:
9b:34:80:c7:17:19:45:f9:f3:85:2e:08:4a:0d:dd:
17:d7:7d:f0:47:c1:4f:b7:ca:1b:91:72:49:07:25:
cd:9b:14:58:2e:26:7f:fa:0b:e0:92:95:4d:c9:35:
9d:b9:52:23:8c:a0:87:0c:c6:05:a4:70:29:92:d7:
45:c5:72:3a:5f:ed:b9:a9:22:65:73:f8:56:29:ff:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:31:B4:8A:16:77:92:C8:00:C1:57:2A:FB:E5:6F:DD:96:90:B8
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8b:70:e0:a2:7a:2c:00:ed:de:1e:ad:19:a2:8c:17:c0:1c:
0e:dc:6f:30:30:e1:fd:27:ac:b6:ec:84:65:0a:16:69:bc:1c:
4d:2f:0b:73:18:32:c1:e4:45:8f:de:7b:af:87:09:86:eb:a8:
06:c1:74:7e:44:08:e8:90:6f:61:7b:2f:3b:37:26:48:00:bf:
d3:c7:11:58:a1:70:76:98:a0:45:20:c1:d7:8c:7f:c3:91:44:
78:f4:1d:89:a8:9d:3d:a7:aa:8e:1f:c2:4f:9d:72:d2:fb:b2:
6f:a3:f7:5f:bd:fa:7f:bd:09:0a:0c:24:f6:28:d1:45:21:71:
f9:b9:eb:56:d8:6a:c6:ee:d7:c6:e4:1b:37:a4:ed:01:e3:02:
35:82:80:e9:c5:dd:08:6e:b2:ae:8e:25:74:c7:cb:93:33:85:
c8:03:1e:0c:9f:a1:02:fe:1e:44:1e:82:46:f9:d2:94:9b:8f:
ba:7f:6d:0a:e1:e7:13:2a:3c:7f:9f:92:d8:48:32:6b:13:31:
9c:89:fc:51:e4:80:6d:91:34:0c:52:29:55:b7:fe:5e:05:f3:
63:5d:9e:0c:6b:32:fe:42:6a:ac:3c:11:09:0b:44:1a:7e:ef:
4b:95:06:46:20:85:18:41:49:2a:92:d9:97:9a:a5:c1:56:8a:
ae:bb:d7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4z2su4nD0xOGf4H/s/VXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGM0NGFlOTgxZTc0OTJkM2JhMjFlMjg0NzIwODAxODAz
OThkNjQwHhcNMjYwNDE3MTAwMTE2WhcNMjYwNDE4MTAwMTE2WjAzMTEwLwYDVQQD
EyhlM2U4MzFiNDhhMTY3NzkyYzgwMGMxNTcyYWZiZTU2ZmRkOTY5MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2n9ohJwl43M3HPt22d0j594p/Uv
h1LlEm6I3BEaj72pacEfavFquWkew/iNyiZxdDthd1omTQoWy9nVwlp4wBv3d/kW
FaaGN8bVf+qx4TddYIEfcmQGEwZH/Kny9/hlUh1EfPWqm3PbcwFqWKGmNlknNsWD
6eiQAt4WLPVSw3jyTHI7xJd9lZGhX5fYU3eQa1ELzI2NDGo2+546VJQuc6MFxRA6
3XmK9huOPhUrNvKILpCbNIDHFxlF+fOFLghKDd0X133wR8FPt8obkXJJByXNmxRY
LiZ/+gvgkpVNyTWduVIjjKCHDMYFpHApktdFxXI6X+25qSJlc/hWKf/2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPoMbSKFneSyADBVyr75W/dlpC4MB8GA1UdIwQY
MBaAFOUMRK6YHnSS07oh4oRyCAGAOY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQt
ZjVmZmVlMTcyMGMxLzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQtZjVmZmVlMTcyMGMx
LzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARItw4KJ6
LADt3h6tGaKMF8AcDtxvMDDh/SestuyEZQoWabwcTS8LcxgyweRFj957r4cJhuuo
BsF0fkQI6JBvYXsvOzcmSAC/08cRWKFwdpigRSDB14x/w5FEePQdiaidPaeqjh/C
T51y0vuyb6P3X736f70JCgwk9ijRRSFx+bnrVthqxu7XxuQbN6TtAeMCNYKA6cXd
CG6yro4ldMfLkzOFyAMeDJ+hAv4eRB6CRvnSlJuPun9tCuHnEyo8f5+S2EgyaxMx
nIn8UeSAbZE0DFIpVbf+XgXzY12eDGsy/kJqrDwRCQtEGn7vS5UGRiCFGEFJKpLZ
l5qlwVaKrrvXFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:52 2026 by rpki-client