Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: bMMWQbX6mHbxft5HdtBeW4g5qpclJv+NOTp00RZmtgI=
Subject key identifier: 7E:6D:8C:C3:1C:17:66:FA:B1:04:5F:B1:31:2F:7F:4A:9C:0F:32:55
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 019D9A3DE7EFA0560A4D7ECD5E1C1DD5E8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: +6bQsWG1qcpUsKp9bO8NJu5fMEgQoaAVmvAmpvVnEtA=)
2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e7:ef:a0:56:0a:4d:7e:cd:5e:1c:1d:d5:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=7e6d8cc31c1766fab1045fb1312f7f4a9c0f3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:66:6c:a7:da:c4:62:e9:aa:6e:f5:81:2c:
df:da:80:e5:d3:e6:0b:84:2c:74:9c:d9:ad:a4:88:
d9:f8:fd:f6:86:49:c4:4e:8a:01:da:a0:5d:fb:72:
ff:fa:cc:3b:2a:97:4b:ca:6a:3b:0f:1a:8b:d7:db:
a1:44:ba:d6:d6:bf:8e:f6:9f:76:7a:87:23:a1:81:
cd:c0:ef:40:cc:81:d4:2e:9b:1d:1b:44:d1:1c:26:
fb:56:b2:88:68:e2:ba:73:a2:a2:79:a7:e6:dd:c0:
9c:ab:68:ab:44:58:9d:6a:80:c4:43:7f:0c:c5:0e:
22:ad:52:13:97:8a:eb:b1:0a:db:05:62:ae:9f:61:
89:f4:11:24:90:d1:3b:a6:7b:2b:fb:87:c9:32:c1:
b6:e6:7f:c2:f3:fb:99:b2:35:0c:5c:5f:5b:d2:d4:
55:da:9d:cd:e3:54:c3:84:cb:ab:03:55:c1:e4:4b:
9d:e4:cf:e4:52:dc:7e:94:66:f4:2c:5a:f1:3d:5d:
ff:48:53:f6:cc:50:88:83:70:cf:2e:d8:22:d1:51:
ff:26:40:71:bd:17:91:80:15:89:f2:b3:17:b7:f4:
c0:a5:f0:ff:fa:95:f9:ef:e5:f0:f9:84:cb:66:f1:
90:1b:3c:2a:b5:e2:6e:98:14:29:a0:a6:13:5c:70:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:8C:C3:1C:17:66:FA:B1:04:5F:B1:31:2F:7F:4A:9C:0F:32:55
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:a3:3d:83:90:59:3a:31:40:38:fd:10:20:c4:3e:21:ef:
6b:ff:64:8f:3e:77:90:98:4f:d0:eb:e1:ff:cc:7d:be:bd:09:
27:b4:2a:1d:14:65:41:0c:53:ea:9b:9f:72:67:77:62:cb:a6:
95:64:2a:07:cd:0e:0e:fc:6b:06:da:f9:c0:70:37:3b:be:da:
e2:a6:bc:97:81:71:b5:b4:9e:10:c1:3c:7d:70:48:80:0c:11:
19:22:e6:c5:85:0c:74:56:a9:09:3c:13:eb:53:ba:6a:83:64:
e5:00:18:72:d8:bc:5d:83:3b:df:db:99:53:06:17:38:99:84:
2a:74:80:a1:15:9b:a9:38:1b:4f:de:fd:03:61:42:ed:c6:60:
e8:45:ce:b8:42:88:46:1c:5e:92:5d:85:64:85:1c:84:15:83:
34:3f:a9:a4:2c:d6:66:c5:c4:10:4c:66:35:41:89:30:70:53:
0e:cf:36:16:25:80:24:87:7c:66:4a:27:7b:96:fe:c8:d4:1e:
e1:db:56:5d:41:6a:71:ea:b4:0c:04:1c:ab:96:ed:3a:0d:08:
ed:ba:e5:fc:58:74:36:54:5e:de:ed:b4:79:5b:1b:6f:91:8f:
cc:9e:33:42:9b:7e:80:2b:88:dc:28:8d:f4:31:ac:1b:58:99:
be:4a:e9:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPefvoFYKTX7NXhwd1ejdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4
ZDg1YTAwHhcNMjYwNDE3MDcwMDQxWhcNMjYwNDE4MDcwMDQxWjAzMTEwLwYDVQQD
Eyg3ZTZkOGNjMzFjMTc2NmZhYjEwNDVmYjEzMTJmN2Y0YTljMGYzMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppdmbKfaxGLpqm71gSzf2oDl0+YL
hCx0nNmtpIjZ+P32hknETooB2qBd+3L/+sw7KpdLymo7DxqL19uhRLrW1r+O9p92
eocjoYHNwO9AzIHULpsdG0TRHCb7VrKIaOK6c6Kieafm3cCcq2irRFidaoDEQ38M
xQ4irVITl4rrsQrbBWKun2GJ9BEkkNE7pnsr+4fJMsG25n/C8/uZsjUMXF9b0tRV
2p3N41TDhMurA1XB5Eud5M/kUtx+lGb0LFrxPV3/SFP2zFCIg3DPLtgi0VH/JkBx
vReRgBWJ8rMXt/TApfD/+pX57+Xw+YTLZvGQGzwqteJumBQpoKYTXHDF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5tjMMcF2b6sQRfsTEvf0qcDzJVMB8GA1UdIwQY
MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt
YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2
LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwqjPYOQ
WToxQDj9ECDEPiHva/9kjz53kJhP0Ovh/8x9vr0JJ7QqHRRlQQxT6pufcmd3Ysum
lWQqB80ODvxrBtr5wHA3O77a4qa8l4FxtbSeEME8fXBIgAwRGSLmxYUMdFapCTwT
61O6aoNk5QAYcti8XYM739uZUwYXOJmEKnSAoRWbqTgbT979A2FC7cZg6EXOuEKI
Rhxekl2FZIUchBWDND+ppCzWZsXEEExmNUGJMHBTDs82FiWAJId8Zkone5b+yNQe
4dtWXUFqceq0DAQcq5btOg0I7brl/Fh0NlRe3u20eVsbb5GPzJ4zQpt+gCuI3CiN
9DGsG1iZvkrpBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:51 2026 by rpki-client