Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: U/3Ut+a7QDGSEQuW92zLnoM16YdZhiE4W+BvJ10JY2U=
Subject key identifier: 4A:7A:69:A0:D3:FF:DA:99:E1:F0:CE:AD:E4:2D:BD:02:E9:D6:5B:84
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019D9886DF15F0B92915CDFA6E94BFBF2515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 23:01:08 +0000
Manifest this update: Thu 16 Apr 2026 23:01:08 +0000
Manifest next update: Fri 17 Apr 2026 23:01:08 +0000
Files and hashes: 1: 868i0cEmWAdaQ1srLCAkC6Q7hMo.roa (hash: bgPNU3tWKyMlZeeAEm+kUMGWGR8Zu5gAsJkW3Dggnbc=)
2: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: 0+arK3jYR7VaSneJOFHr3Iofu+ecr4EHfxiA96KM4L4=)
3: e-qDMdTbtmiNw1eY99Zvxji3790.roa (hash: rAjNKwDttf142Mu+7uwfX/OFpQYYqgzVqAG785xMd70=)
4: j86y_ItGPyrknhpKFaA3OkNhDHQ.roa (hash: cX4ebinCqmLGTvDjfCih1gjKANEWYIZmpmYzsqgMTHY=)
5: vS7Af9oIr8_TE8vST7hJpgUbQiA.roa (hash: l/38QxwCvvrMgly58So5QMOq8vU0cNnGu2QIK7hxaZg=)
6: xLZ3J1KMb8yQrN6g6__lPacbUAQ.roa (hash: 3oyRoMLYdGZGUobI7quUmcksz3zT3JdoMcdxUp1s5Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:df:15:f0:b9:29:15:cd:fa:6e:94:bf:bf:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Apr 16 23:01:08 2026 GMT
Not After : Apr 17 23:01:08 2026 GMT
Subject: CN=4a7a69a0d3ffda99e1f0ceade42dbd02e9d65b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:72:11:c3:9e:be:07:d9:b6:f2:7f:c6:3f:
44:b7:cc:af:6b:a3:3f:f7:ea:c5:65:9d:76:2f:16:
50:1d:a9:80:ed:cd:97:c7:df:b3:90:11:9e:50:66:
b0:a7:70:95:5a:97:1f:49:21:59:e2:be:51:34:ec:
af:66:29:07:61:b3:69:46:36:a9:51:86:7a:0e:3d:
68:c1:27:bf:7d:6d:e3:e4:83:39:8e:82:41:85:05:
d2:84:f7:35:55:2b:d0:be:21:4a:11:b7:42:53:68:
f6:00:38:bb:8c:06:ca:3c:0d:46:41:91:a6:9e:d9:
af:1e:f2:ad:32:9f:f8:ee:1b:a4:d7:f8:95:9b:93:
15:d7:64:75:a6:18:f1:8c:3c:f6:5e:71:cd:6c:60:
a0:da:03:39:ec:bf:98:d3:1e:a1:c2:ba:d4:91:0e:
bd:86:61:67:d5:bc:43:d5:b6:21:a4:18:97:2d:af:
23:01:5d:39:c2:ff:ef:57:71:72:08:90:98:0a:0b:
33:27:5f:ad:76:78:72:a0:58:cf:db:a9:33:75:d0:
93:01:2f:94:75:65:64:00:5d:7c:41:04:38:8b:00:
38:8f:ca:ef:eb:33:27:b3:b2:49:f0:b3:d1:83:3e:
83:f1:5e:45:8f:08:f8:e1:b9:8a:57:99:d4:4c:85:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7A:69:A0:D3:FF:DA:99:E1:F0:CE:AD:E4:2D:BD:02:E9:D6:5B:84
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b0:e6:99:3d:9f:25:13:0b:4f:49:2d:98:d7:c9:ab:7e:78:
42:ba:62:95:1b:48:d4:47:24:e5:75:a8:66:8c:59:b9:d0:4e:
66:00:76:20:58:b6:f8:78:8a:92:ba:29:07:d5:53:a0:56:6b:
d1:3d:f3:b7:7b:0b:63:ce:88:6b:f0:50:6d:10:6a:fd:90:3b:
40:8b:63:df:14:77:a4:f6:3a:33:c8:db:e4:ff:ed:2e:db:09:
73:c5:20:ec:c9:61:37:9b:14:8f:0f:51:ba:b8:01:69:e8:34:
47:29:85:44:59:71:5f:e0:4a:41:67:4a:0b:7a:b9:19:c4:89:
c0:eb:b8:5d:ca:44:44:be:8f:8e:cf:3e:05:58:85:12:cb:c3:
46:66:60:5f:69:07:89:9d:9c:df:38:48:99:ee:de:9e:48:45:
31:a1:37:9c:1f:42:b7:a2:b3:23:15:8e:16:5d:f7:ea:e9:98:
58:3f:a3:e8:13:d5:e9:9d:f9:e0:1c:a9:94:57:50:16:d6:4c:
ec:43:f1:91:e0:f0:27:b5:44:89:6c:d2:a1:b5:b0:56:e6:96:
28:04:b5:ba:0c:a5:27:b9:14:9e:d1:ef:a2:a2:47:c5:30:df:
ed:98:a4:99:33:07:b5:6a:6f:ec:7e:cd:35:bc:97:ff:16:91:
11:da:b0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yht8V8LkpFc36bpS/vyUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTgyNWNlOGJmNTQ0MTcwMjgyZjcyMGEyNDg0MTQxNTY4
YjBlN2QwHhcNMjYwNDE2MjMwMTA4WhcNMjYwNDE3MjMwMTA4WjAzMTEwLwYDVQQD
Eyg0YTdhNjlhMGQzZmZkYTk5ZTFmMGNlYWRlNDJkYmQwMmU5ZDY1Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyZyEcOevgfZtvJ/xj9Et8yva6M/
9+rFZZ12LxZQHamA7c2Xx9+zkBGeUGawp3CVWpcfSSFZ4r5RNOyvZikHYbNpRjap
UYZ6Dj1owSe/fW3j5IM5joJBhQXShPc1VSvQviFKEbdCU2j2ADi7jAbKPA1GQZGm
ntmvHvKtMp/47huk1/iVm5MV12R1phjxjDz2XnHNbGCg2gM57L+Y0x6hwrrUkQ69
hmFn1bxD1bYhpBiXLa8jAV05wv/vV3FyCJCYCgszJ1+tdnhyoFjP26kzddCTAS+U
dWVkAF18QQQ4iwA4j8rv6zMns7JJ8LPRgz6D8V5Fjwj44bmKV5nUTIV1fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp6aaDT/9qZ4fDOreQtvQLp1luEMB8GA1UdIwQY
MBaAFFNYJc6L9UQXAoL3IKJIQUFWiw59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUt
NTE0NmFiN2VhMDE1LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wMWY3MzYtYWY4My00NTZjLThiNDUtNTE0NmFiN2VhMDE1
LzEvVTFnbHpvdjFSQmNDZ3ZjZ29raEJRVmFMRG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabDmmT2f
JRMLT0ktmNfJq354QrpilRtI1Eck5XWoZoxZudBOZgB2IFi2+HiKkropB9VToFZr
0T3zt3sLY86Ia/BQbRBq/ZA7QItj3xR3pPY6M8jb5P/tLtsJc8Ug7MlhN5sUjw9R
urgBaeg0RymFRFlxX+BKQWdKC3q5GcSJwOu4XcpERL6Pjs8+BViFEsvDRmZgX2kH
iZ2c3zhIme7enkhFMaE3nB9Ct6KzIxWOFl336umYWD+j6BPV6Z354ByplFdQFtZM
7EPxkeDwJ7VEiWzSobWwVuaWKAS1ugylJ7kUntHvoqJHxTDf7ZikmTMHtWpv7H7N
NbyX/xaREdqwiw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:33 2026 by rpki-client