Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: g1fPPgRM8fysQswurvl1ziG4ddeoWHg+ZUIsu8sgyqQ=
Subject key identifier: C5:96:6A:56:E2:11:0F:43:4C:FE:34:A7:89:AA:36:9B:9F:74:C1:6E
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019D99CFC8751E0223697687D77C37C4F3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: 60WzvST4hWi4cyV9kIL/rJFZja1GMN1iETWRKE6zkEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c8:75:1e:02:23:69:76:87:d7:7c:37:c4:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=c5966a56e2110f434cfe34a789aa369b9f74c16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:82:71:40:7a:70:b8:55:3b:7a:59:ab:2a:
39:84:42:52:d8:aa:c9:9e:cb:fd:01:fe:43:e0:c0:
1c:54:ea:2f:fa:c9:01:25:0c:e4:48:c2:07:6c:b6:
a9:a0:cc:62:11:16:b7:e2:d7:c0:bf:45:33:70:29:
8e:ce:be:94:9d:7b:07:fb:6e:c6:27:6b:dc:67:0b:
ab:aa:a1:e4:a8:d5:91:15:2e:34:83:f6:bb:3c:0b:
11:c3:35:e1:3b:13:e8:6b:c4:bd:96:10:b5:5d:07:
11:17:8b:4f:3b:3a:b4:fc:89:1d:8a:72:a8:3f:d0:
14:e7:ce:18:e5:ce:96:cb:16:73:05:c2:be:5e:de:
de:bc:b0:b3:b9:92:8e:d3:13:f3:b3:17:b9:ec:22:
79:cc:a6:90:1c:8b:b4:84:32:a6:fc:79:3c:e1:68:
43:2f:0b:76:b9:fb:7a:2a:a2:b7:09:88:73:1d:40:
5e:46:94:23:83:23:16:e8:6e:6b:61:a5:c3:ed:85:
48:c5:55:62:d0:07:12:a2:d5:7e:52:6f:ba:cc:ff:
4e:b6:13:71:a0:79:12:1c:68:b5:8e:67:c8:e7:2f:
eb:0a:01:43:e6:2b:90:64:7d:79:ca:16:43:3f:fd:
72:a4:ef:f4:ff:01:e6:2e:e7:91:ea:77:a5:b8:24:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:6A:56:E2:11:0F:43:4C:FE:34:A7:89:AA:36:9B:9F:74:C1:6E
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:7c:4c:f8:a4:05:7d:57:0c:be:df:a2:bd:f0:57:cd:01:
1b:fb:60:88:3d:a9:51:01:b4:0a:91:03:02:2b:f9:45:bb:85:
f5:3b:a6:d2:9a:a8:9b:00:1b:cd:7a:43:cb:8a:46:b9:02:65:
c8:aa:82:d1:b9:f7:43:eb:6a:eb:d5:c8:4c:d5:13:84:6c:52:
b1:91:d1:b2:f3:a1:9d:6e:0e:94:26:ed:27:af:06:6d:86:a3:
e4:51:66:8f:07:3b:30:98:e4:d8:5a:5d:e3:9e:d0:f8:ac:ed:
75:d6:3f:85:28:ad:30:6b:1d:93:e8:81:6b:33:44:e0:cd:87:
6f:62:a2:5f:e3:7b:7c:f1:62:5f:46:29:98:e9:a8:bb:cb:80:
4b:52:e2:4d:d9:9a:5c:af:17:78:d6:d5:14:72:c0:21:96:7d:
c4:4e:f5:57:c8:9d:f0:ee:80:12:48:13:c5:1d:60:a0:5f:ee:
a4:44:cb:da:76:aa:fa:fb:c9:76:d8:16:aa:e4:25:16:b7:63:
f6:a6:47:ff:8f:d2:9f:37:f0:9e:bc:86:2e:c5:fa:86:22:1f:
0d:a8:07:e6:09:34:25:39:60:94:99:2f:cb:93:b4:6e:9b:bb:
55:55:83:56:9b:91:5b:68:fb:38:f4:b8:2e:7f:56:7f:1c:e4:
01:89:23:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8h1HgIjaXaH13w3xPO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MDU4NzE4ODliOWRjYWZlN2VjMzEzNmFlZDFkZGZlZTJk
ZmJjN2QwHhcNMjYwNDE3MDUwMDI0WhcNMjYwNDE4MDUwMDI0WjAzMTEwLwYDVQQD
EyhjNTk2NmE1NmUyMTEwZjQzNGNmZTM0YTc4OWFhMzY5YjlmNzRjMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cKCcUB6cLhVO3pZqyo5hEJS2KrJ
nsv9Af5D4MAcVOov+skBJQzkSMIHbLapoMxiERa34tfAv0UzcCmOzr6UnXsH+27G
J2vcZwurqqHkqNWRFS40g/a7PAsRwzXhOxPoa8S9lhC1XQcRF4tPOzq0/IkdinKo
P9AU584Y5c6WyxZzBcK+Xt7evLCzuZKO0xPzsxe57CJ5zKaQHIu0hDKm/Hk84WhD
Lwt2uft6KqK3CYhzHUBeRpQjgyMW6G5rYaXD7YVIxVVi0AcSotV+Um+6zP9OthNx
oHkSHGi1jmfI5y/rCgFD5iuQZH15yhZDP/1ypO/0/wHmLueR6neluCTEUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWWalbiEQ9DTP40p4mqNpufdMFuMB8GA1UdIwQY
MBaAFMYFhxiJudyv5+wxNq7R3f7i37x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQt
MzA4N2Y4NmE2M2FiLzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MDQ2YTYtZGVjYi00OWEzLWEzYjQtMzA4N2Y4NmE2M2Fi
LzEveGdXSEdJbTUzS19uN0RFMnJ0SGRfdUxmdkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcp8TPik
BX1XDL7for3wV80BG/tgiD2pUQG0CpEDAiv5RbuF9Tum0pqomwAbzXpDy4pGuQJl
yKqC0bn3Q+tq69XITNUThGxSsZHRsvOhnW4OlCbtJ68GbYaj5FFmjwc7MJjk2Fpd
457Q+KztddY/hSitMGsdk+iBazNE4M2Hb2KiX+N7fPFiX0YpmOmou8uAS1LiTdma
XK8XeNbVFHLAIZZ9xE71V8id8O6AEkgTxR1goF/upETL2naq+vvJdtgWquQlFrdj
9qZH/4/SnzfwnryGLsX6hiIfDagH5gk0JTlglJkvy5O0bpu7VVWDVpuRW2j7OPS4
Ln9WfxzkAYkjZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:19 2026 by rpki-client