Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: ++l854vb4fdNI2W5THTylZWUyLN42/AnbfrCsekbV+0=
Subject key identifier: C5:BA:70:08:0A:BE:E0:4E:06:54:3C:28:0F:C2:08:CF:BC:6E:B4:15
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019DA41C9077468B6967F8EC04B4293F3A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 05:00:28 +0000
Manifest this update: Sun 19 Apr 2026 05:00:28 +0000
Manifest next update: Mon 20 Apr 2026 05:00:28 +0000
Files and hashes: 1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: DA1l7KBwiBT9ik2igml/pbk5+o454jFg9Lq4Y6czLDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:90:77:46:8b:69:67:f8:ec:04:b4:29:3f:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Apr 19 05:00:28 2026 GMT
Not After : Apr 20 05:00:28 2026 GMT
Subject: CN=c5ba70080abee04e06543c280fc208cfbc6eb415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:39:8c:51:e7:9b:33:5c:56:6a:92:23:df:
c2:2b:65:df:b2:3e:c6:82:f5:d5:0c:e0:5b:cc:99:
d5:de:59:51:79:3b:d0:1a:b5:06:fe:1d:47:82:57:
bd:82:27:5f:f9:5b:b1:30:b3:74:4a:29:e8:77:a3:
02:2f:ad:c8:76:92:26:8a:2d:d4:93:51:ac:47:a6:
0b:45:ea:36:27:ee:d2:3f:d7:3a:c4:5b:86:a2:45:
37:81:ae:09:d9:60:02:e1:38:43:c0:e6:82:86:01:
1a:16:9c:1b:b2:8e:00:e4:7e:41:a3:13:d0:f3:e0:
c2:e4:3b:bb:e3:24:c8:16:90:31:f9:5a:f4:68:3a:
db:2f:f3:1f:7f:88:8a:73:86:53:13:13:63:b8:0b:
38:23:25:a1:09:fc:ea:76:dd:a8:8c:9b:78:f6:f4:
88:0d:bf:ee:05:89:24:7b:de:da:fd:cb:60:12:27:
31:78:1f:e8:6f:15:c5:c1:4c:88:a7:71:15:48:02:
0d:4e:6a:63:84:e2:5e:59:67:46:c5:d3:62:df:52:
1e:c2:64:ee:ff:4a:c2:9a:1c:80:60:4f:44:2a:77:
f6:88:7b:d7:65:a2:32:22:35:4f:c0:15:5c:50:1d:
93:d7:88:88:3d:40:68:fa:a3:f4:e5:2c:4d:0f:34:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:70:08:0A:BE:E0:4E:06:54:3C:28:0F:C2:08:CF:BC:6E:B4:15
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:22:db:7b:ab:18:14:eb:c2:97:e8:f9:6b:31:44:93:db:
01:ec:88:7c:9b:1a:bf:6d:bb:32:7a:e2:99:2a:65:73:83:71:
31:69:f0:28:91:cd:48:1c:5f:ac:6f:25:9d:95:8a:55:ac:98:
68:ea:ed:dd:59:46:52:83:29:d0:3c:f3:5d:5d:22:a8:0e:94:
fe:62:d6:31:dd:f6:58:95:03:fd:5b:6a:82:c3:7f:c9:34:fb:
fc:ac:90:72:3b:bf:6c:60:32:9b:a6:35:23:91:8e:fc:84:1c:
36:e8:26:63:1a:55:3e:59:e7:b0:63:74:1a:04:d1:7d:40:25:
af:af:28:fc:aa:de:10:ff:c9:9b:e4:d3:00:75:d6:84:04:94:
82:99:57:69:52:b5:50:d5:25:cb:3a:99:fc:21:fe:99:39:e3:
df:ce:04:ce:ea:ed:33:3b:bb:19:d2:1a:f0:a0:d3:36:15:69:
69:89:53:f1:a5:f0:57:a0:07:17:b5:eb:12:d2:34:5c:47:71:
3e:0e:d7:7a:ae:99:4d:1e:2f:4b:c8:38:52:b3:1d:34:9d:e3:
da:1b:a2:da:8e:85:5a:10:32:3e:ac:1b:6e:12:51:52:e0:2f:
aa:ca:d2:a9:37:e7:a0:ab:32:fc:dc:93:28:c8:75:6f:e5:b6:
24:94:02:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHJB3RotpZ/jsBLQpPzpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwNDE5MDUwMDI4WhcNMjYwNDIwMDUwMDI4WjAzMTEwLwYDVQQD
EyhjNWJhNzAwODBhYmVlMDRlMDY1NDNjMjgwZmMyMDhjZmJjNmViNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4A5jFHnmzNcVmqSI9/CK2Xfsj7G
gvXVDOBbzJnV3llReTvQGrUG/h1Hgle9gidf+VuxMLN0Sinod6MCL63IdpImii3U
k1GsR6YLReo2J+7SP9c6xFuGokU3ga4J2WAC4ThDwOaChgEaFpwbso4A5H5BoxPQ
8+DC5Du74yTIFpAx+Vr0aDrbL/Mff4iKc4ZTExNjuAs4IyWhCfzqdt2ojJt49vSI
Db/uBYkke97a/ctgEicxeB/obxXFwUyIp3EVSAINTmpjhOJeWWdGxdNi31IewmTu
/0rCmhyAYE9EKnf2iHvXZaIyIjVPwBVcUB2T14iIPUBo+qP05SxNDzRD8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW6cAgKvuBOBlQ8KA/CCM+8brQVMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftAi23ur
GBTrwpfo+WsxRJPbAeyIfJsav227MnrimSplc4NxMWnwKJHNSBxfrG8lnZWKVayY
aOrt3VlGUoMp0DzzXV0iqA6U/mLWMd32WJUD/VtqgsN/yTT7/KyQcju/bGAym6Y1
I5GO/IQcNugmYxpVPlnnsGN0GgTRfUAlr68o/KreEP/Jm+TTAHXWhASUgplXaVK1
UNUlyzqZ/CH+mTnj384EzurtMzu7GdIa8KDTNhVpaYlT8aXwV6AHF7XrEtI0XEdx
Pg7Xeq6ZTR4vS8g4UrMdNJ3j2hui2o6FWhAyPqwbbhJRUuAvqsrSqTfnoKsy/NyT
KMh1b+W2JJQCaA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:16 2026 by rpki-client