Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: ZDVNfJmbS8jevnihmuiGdwrPUsIiU0J/1Okuex0XJ+0=
Subject key identifier: 16:47:64:AD:94:A4:69:16:64:11:F4:52:8F:0B:04:56:DB:D1:41:C9
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019D9B19DA6BBCA4276344CA20A22E3D3403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 11:00:55 +0000
Manifest this update: Fri 17 Apr 2026 11:00:55 +0000
Manifest next update: Sat 18 Apr 2026 11:00:55 +0000
Files and hashes: 1: 0KPNPZABDj0Qzagg_XV0X1ugEl0.roa (hash: MiYwj7dTzwCXkj4L24OFbR3dzFvz57EK/cZJ5GPnv1I=)
2: 0qcfJpEX8g6MF2qj_nDo1QD1IkU.roa (hash: E2DR9Q+D5XZIwJi+r9euBWagkYE3FYAiz4v22D7W4YM=)
3: 3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa (hash: AnfSRJoJBQHSsw5wKN0U0W2kl6uSdHO9bTTKS8nGB5c=)
4: S-bwMSos2-eKtENDykR1_8Qkp_I.roa (hash: xbxuJbxZkr/mH223J2YVdm3uiis0Dm1Iy28FKMjVeRU=)
5: XyYjURWnDtL6j5DL-ST6SPw7rFI.roa (hash: 26mKNoH4079E9ccWRUpU/d+cgxVIAOMCoINSih0nzDo=)
6: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: pJHTdsJJzWGcOTZF1XYpHjUKu8nD/Zl6kbXDANW7Z+Q=)
7: lPnGL0KIOYwCmT8t1QVCdAPTLQc.roa (hash: bPZuuyywF6pfSEcL1PH/gV1v3n4qj+MA79LKLf/5bEE=)
8: tDGAKA6vCaBKcErUgT3MNC6aIu0.roa (hash: e/pJ6HHlGchTF3Diz9Sgd8uUt2kZ7DHh23Gu0gHK74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:da:6b:bc:a4:27:63:44:ca:20:a2:2e:3d:34:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Apr 17 11:00:55 2026 GMT
Not After : Apr 18 11:00:55 2026 GMT
Subject: CN=164764ad94a469166411f4528f0b0456dbd141c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:ae:ea:a7:24:75:ed:70:a2:ae:43:db:c4:
67:0a:19:03:de:b9:7c:17:c6:a5:5c:eb:e2:d1:a9:
fc:09:ec:79:40:44:5b:9e:b7:0f:d4:c1:fa:83:3c:
45:a7:fe:9c:64:b5:dd:85:a3:f1:18:c5:e0:7e:bf:
2e:c0:03:9c:c1:6e:6a:2b:44:9a:8f:86:a2:80:b1:
58:cf:7f:02:1e:aa:43:9b:49:68:c3:99:e1:3e:7d:
28:c0:f7:a7:a7:dc:3d:f1:94:56:f4:26:d6:8b:d3:
0a:20:be:88:a7:5c:4a:c2:99:d9:cb:74:fd:fb:0d:
ac:27:7d:22:17:06:3d:b8:ad:f3:e1:00:89:89:90:
31:55:64:fb:c4:aa:47:c9:e2:3a:84:34:39:11:56:
85:25:73:9b:2d:c7:eb:ed:8f:4d:a9:18:19:16:b3:
74:07:fb:28:29:5f:51:7f:4c:0f:66:7a:f5:77:b7:
13:65:17:88:f6:88:43:29:bd:ff:c4:7a:bb:9d:41:
52:fd:15:64:6b:81:d8:be:19:ae:93:35:e0:15:25:
44:5e:84:ff:d4:93:3c:ff:0f:77:36:77:e2:89:e2:
7b:3e:36:4d:cf:cf:bf:4a:25:68:5d:48:e1:09:f2:
51:1f:84:fa:28:6f:b9:9e:79:d6:b0:9a:39:87:db:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:64:AD:94:A4:69:16:64:11:F4:52:8F:0B:04:56:DB:D1:41:C9
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6a:90:ca:15:5b:93:0d:79:19:e8:aa:b9:2b:f0:c0:71:b7:
38:c8:14:23:64:45:79:2d:b6:8a:8d:37:3b:3a:9e:ab:33:df:
c6:db:e4:66:54:6b:94:7e:86:71:26:fa:70:29:73:14:8f:04:
c2:eb:c3:a0:c4:38:98:c5:b4:85:12:03:60:0b:26:e4:b3:c5:
7f:22:d9:ec:ea:53:a8:c9:59:ad:b0:54:4d:fd:6f:e2:0d:02:
1a:38:05:e7:a2:68:dd:e0:9b:1e:1a:35:91:7d:9a:74:dc:01:
df:a2:e0:0d:21:e4:a4:8f:a7:c1:0b:c1:9c:f2:d3:ef:42:a9:
15:3e:72:10:6b:3e:67:6e:d2:87:18:d7:15:ef:32:22:d0:9c:
4f:6b:8c:5a:d7:14:39:cd:70:ea:34:e5:3b:92:27:38:36:fe:
a8:d8:87:b5:30:71:77:ad:9f:e5:0f:0f:ab:4c:c7:15:7e:85:
ef:eb:85:22:d1:9c:0a:38:86:7c:59:68:0d:17:49:cd:df:6b:
41:f1:36:28:a4:23:b0:81:30:6c:3a:7f:65:6e:c4:55:ea:f1:
7c:08:90:73:ae:53:31:b1:6b:4a:1d:20:16:89:72:70:08:be:
0d:ff:14:2d:c3:1e:71:f8:24:a4:b8:8b:39:da:ae:cf:a3:95:
a6:30:8f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGdprvKQnY0TKIKIuPTQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjYwNDE3MTEwMDU1WhcNMjYwNDE4MTEwMDU1WjAzMTEwLwYDVQQD
EygxNjQ3NjRhZDk0YTQ2OTE2NjQxMWY0NTI4ZjBiMDQ1NmRiZDE0MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5au6qckde1woq5D28RnChkD3rl8
F8alXOvi0an8Cex5QERbnrcP1MH6gzxFp/6cZLXdhaPxGMXgfr8uwAOcwW5qK0Sa
j4aigLFYz38CHqpDm0low5nhPn0owPenp9w98ZRW9CbWi9MKIL6Ip1xKwpnZy3T9
+w2sJ30iFwY9uK3z4QCJiZAxVWT7xKpHyeI6hDQ5EVaFJXObLcfr7Y9NqRgZFrN0
B/soKV9Rf0wPZnr1d7cTZReI9ohDKb3/xHq7nUFS/RVka4HYvhmukzXgFSVEXoT/
1JM8/w93NnfiieJ7PjZNz8+/SiVoXUjhCfJRH4T6KG+5nnnWsJo5h9tVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZHZK2UpGkWZBH0Uo8LBFbb0UHJMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2qQyhVb
kw15GeiquSvwwHG3OMgUI2RFeS22io03OzqeqzPfxtvkZlRrlH6GcSb6cClzFI8E
wuvDoMQ4mMW0hRIDYAsm5LPFfyLZ7OpTqMlZrbBUTf1v4g0CGjgF56Jo3eCbHho1
kX2adNwB36LgDSHkpI+nwQvBnPLT70KpFT5yEGs+Z27ShxjXFe8yItCcT2uMWtcU
Oc1w6jTlO5InODb+qNiHtTBxd62f5Q8Pq0zHFX6F7+uFItGcCjiGfFloDRdJzd9r
QfE2KKQjsIEwbDp/ZW7EVerxfAiQc65TMbFrSh0gFolycAi+Df8ULcMecfgkpLiL
Odquz6OVpjCP9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:40 2026 by rpki-client