Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: KtTw9ZNq5ZceLZ25qXIMyXob0RJjArrW6KxGG2J2Lso=
Subject key identifier: C1:B1:3B:8C:AC:87:34:0F:C8:99:66:00:BE:1C:83:D1:CF:A5:CE:FA
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 019D98BD474F65E57F9E94B5F0072B3A1741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: h8AJ2HDnXDYbYZ+fYpDL/4NOjGXH/9TAA8dOzvGbdPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:47:4f:65:e5:7f:9e:94:b5:f0:07:2b:3a:17:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=c1b13b8cac87340fc8996600be1c83d1cfa5cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:65:39:a0:7d:d6:cd:45:7b:45:97:f2:57:
a2:c3:7e:31:25:f9:a7:ae:f9:d2:3b:30:cf:9b:6d:
9a:07:4a:06:e5:21:b5:45:e6:b1:21:27:95:6e:5a:
03:26:f2:02:c9:a0:3a:73:99:62:2d:2b:dd:83:35:
8d:a4:d2:a7:86:6a:df:fe:1d:5c:b7:61:ff:b3:ed:
30:f6:46:b4:41:b4:ab:18:91:a3:34:dd:a4:11:94:
96:37:7c:cf:1a:a2:a8:8a:aa:18:38:eb:30:7b:f5:
64:4c:a6:ca:0c:9e:ca:f6:01:84:eb:0c:ca:e8:47:
ce:22:ca:94:a3:ed:da:d4:c9:48:8d:06:00:99:b9:
fc:b5:35:f3:78:e5:89:58:2a:c3:99:6a:05:f5:84:
0f:04:56:18:a4:c4:2f:74:96:5b:d5:18:3b:ef:de:
de:50:84:f1:a9:aa:b0:fa:70:ac:a0:22:4d:f1:6e:
18:de:a7:fb:75:66:ed:0d:d4:28:c2:a8:7a:5d:c4:
53:9f:b3:3f:62:ea:8e:4c:b9:03:f8:c8:00:9a:e9:
b7:3d:65:3c:2f:28:c0:bf:c4:55:7b:13:01:1e:ff:
9b:1a:42:89:23:1c:68:66:97:86:6b:8e:33:ee:ec:
6e:b6:26:48:6a:fe:dd:a9:a1:22:cc:1c:45:93:61:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B1:3B:8C:AC:87:34:0F:C8:99:66:00:BE:1C:83:D1:CF:A5:CE:FA
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:1d:f5:8e:74:03:79:fa:dd:11:da:0a:27:36:d1:67:57:
4f:b2:d4:97:44:b5:39:92:68:97:f7:69:0e:bc:ce:4d:33:7f:
46:9d:2f:56:8f:2a:01:cd:4a:34:cf:09:ff:d2:eb:75:70:b8:
46:91:03:8a:49:f9:2a:51:2e:ce:52:90:da:cc:c2:0b:f9:af:
85:b3:c7:2c:fb:5c:c7:cf:ff:97:64:8d:d3:c3:a1:d5:25:47:
58:f1:c4:24:62:60:e5:e9:0e:20:3c:e0:70:ef:ae:2a:83:b3:
2e:39:44:8e:6e:c0:5c:42:6e:de:06:9e:ff:1d:f8:17:40:1c:
48:c2:58:0c:8f:df:fe:e3:e2:b6:93:e0:70:54:e8:7d:0e:80:
c6:1c:09:8f:bc:ff:8b:d4:b0:48:8c:37:cc:7d:45:08:1f:6e:
08:9d:bf:0d:ef:5b:77:0a:38:92:35:f1:57:82:6b:46:1f:65:
c9:e9:21:48:22:38:d0:9e:5a:75:ec:51:a7:76:85:d1:fc:6a:
d0:13:6d:15:f9:b2:0f:31:73:5c:58:14:27:a7:51:ca:70:18:
da:01:ea:49:af:0d:64:e0:22:08:0c:18:6f:c7:73:8c:10:a7:
75:6f:96:7d:78:af:52:3d:2f:b8:4d:bd:5e:05:85:60:ed:c7:
f7:8c:ac:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvUdPZeV/npS18AcrOhdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWU1ZTMzODc5NGU2MGQ1ZDhiNTIzYmRiMmI2OGVjNGFj
NzYyY2UwHhcNMjYwNDE3MDAwMDM0WhcNMjYwNDE4MDAwMDM0WjAzMTEwLwYDVQQD
EyhjMWIxM2I4Y2FjODczNDBmYzg5OTY2MDBiZTFjODNkMWNmYTVjZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodFlOaB91s1Fe0WX8leiw34xJfmn
rvnSOzDPm22aB0oG5SG1ReaxISeVbloDJvICyaA6c5liLSvdgzWNpNKnhmrf/h1c
t2H/s+0w9ka0QbSrGJGjNN2kEZSWN3zPGqKoiqoYOOswe/VkTKbKDJ7K9gGE6wzK
6EfOIsqUo+3a1MlIjQYAmbn8tTXzeOWJWCrDmWoF9YQPBFYYpMQvdJZb1Rg7797e
UITxqaqw+nCsoCJN8W4Y3qf7dWbtDdQowqh6XcRTn7M/YuqOTLkD+MgAmum3PWU8
LyjAv8RVexMBHv+bGkKJIxxoZpeGa44z7uxutiZIav7dqaEizBxFk2HjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGxO4yshzQPyJlmAL4cg9HPpc76MB8GA1UdIwQY
MBaAFNKuXjOHlOYNXYtSO9sraOxKx2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYt
OGQ4ZTllYTE0MzI1LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYtOGQ4ZTllYTE0MzI1
LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy8d9Y50
A3n63RHaCic20WdXT7LUl0S1OZJol/dpDrzOTTN/Rp0vVo8qAc1KNM8J/9LrdXC4
RpEDikn5KlEuzlKQ2szCC/mvhbPHLPtcx8//l2SN08Oh1SVHWPHEJGJg5ekOIDzg
cO+uKoOzLjlEjm7AXEJu3gae/x34F0AcSMJYDI/f/uPitpPgcFTofQ6AxhwJj7z/
i9SwSIw3zH1FCB9uCJ2/De9bdwo4kjXxV4JrRh9lyekhSCI40J5adexRp3aF0fxq
0BNtFfmyDzFzXFgUJ6dRynAY2gHqSa8NZOAiCAwYb8dzjBCndW+WfXivUj0vuE29
XgWFYO3H94ys+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:35 2026 by rpki-client