Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: gCgUh15lCHvEda88H7QgqKnqWr7UaYUBfpIZPoo1DdY=
Subject key identifier: 5B:BB:1B:CC:47:DB:6D:08:15:6A:C7:B8:5D:62:AB:11:6F:4F:65:E6
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019D9AE36E711013D4D25652181BD5D1311A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 10:01:29 +0000
Manifest this update: Fri 17 Apr 2026 10:01:29 +0000
Manifest next update: Sat 18 Apr 2026 10:01:29 +0000
Files and hashes: 1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: EKwAM4W9tjYGn6g+dLiWqZr/JNxAZe8KbVx8h8cwuHE=)
2: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (hash: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=)
3: eBV3wtUeMu2mQzbDRhT7v_8FhCM.roa (hash: dfSD4t+IvLSwRtvheEfZG9CM1+g6QasEUhniYPszLJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6e:71:10:13:d4:d2:56:52:18:1b:d5:d1:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Apr 17 10:01:29 2026 GMT
Not After : Apr 18 10:01:29 2026 GMT
Subject: CN=5bbb1bcc47db6d08156ac7b85d62ab116f4f65e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:8d:64:20:bb:e4:cc:b4:f9:9a:13:19:00:
c6:dc:ce:09:ed:13:1f:46:64:d1:50:0c:64:5b:b2:
0f:a6:ec:3a:bc:87:1f:02:5a:8a:7a:ad:4f:a0:e6:
2c:04:16:dd:c6:75:2f:5b:1d:e1:be:f3:3e:f9:fc:
62:55:45:3e:b3:f6:15:8a:5c:de:74:c7:e5:a7:71:
70:20:12:ce:e5:da:07:3b:e7:29:05:ef:22:6f:bf:
42:e0:5e:4b:aa:89:19:db:78:c6:94:3d:ee:bf:84:
e0:5c:bd:6f:f3:96:fd:7a:e3:49:e1:ab:28:e9:d7:
de:c0:e0:4e:aa:3b:f6:69:5b:92:a1:46:d4:5d:0a:
b2:85:26:a2:87:40:dc:90:5e:1b:bd:8d:4c:cf:5e:
1c:5f:9d:47:65:d8:11:e0:a1:67:c7:b5:ce:df:87:
d7:3a:6c:75:7e:7b:77:28:27:b2:bc:f0:a9:74:2c:
5e:e1:69:0e:15:1a:7b:36:a3:24:34:ab:ae:2b:0a:
a7:82:f8:92:10:c5:ea:c2:0a:bb:88:f4:5c:2d:c8:
35:f9:9b:a0:8b:ca:b8:54:c4:f1:31:09:aa:6d:02:
f9:ba:c7:78:a9:eb:2a:74:14:90:11:4a:d3:02:6b:
72:5f:8e:71:20:af:6c:53:eb:d0:e6:25:dd:26:35:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:1B:CC:47:DB:6D:08:15:6A:C7:B8:5D:62:AB:11:6F:4F:65:E6
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:c7:8f:8a:2e:3a:f5:96:30:19:0e:e9:27:2c:5c:62:12:
34:fb:eb:c6:b7:1e:1a:c1:f5:62:a0:3b:78:ee:49:0d:78:89:
ef:29:83:c5:a6:e3:22:8e:62:c0:9e:e0:b2:76:4e:3d:42:4c:
da:bd:f6:fc:c2:b3:73:18:fd:05:33:36:34:10:a4:36:eb:fd:
f9:65:00:e6:a9:79:ba:6c:e6:16:13:69:c1:64:3c:b2:ff:a4:
00:9a:46:aa:d4:0c:87:f5:e3:f6:5e:2a:50:bb:0f:28:6c:2a:
99:79:9f:60:72:28:ee:2c:6c:4b:d7:a9:5c:59:c0:4f:ce:88:
fb:eb:25:dc:1b:b6:e2:b8:7e:df:35:b2:0e:23:b1:0b:24:5c:
b8:5c:69:62:ae:72:c8:cd:26:d7:f8:c9:03:97:4c:90:ef:12:
3c:71:e7:87:25:39:2d:53:82:69:78:83:ae:ae:63:e5:98:f8:
f6:dd:f2:98:cf:56:2a:b4:0d:3d:de:fa:1e:97:12:91:c3:ab:
38:00:32:9a:77:af:f2:9d:3d:54:7c:a3:1b:6b:a8:fc:25:24:
af:83:61:a5:56:16:f8:97:4a:93:2f:ed:2e:ed:0d:c3:9b:a4:
e1:00:88:4e:05:9c:d3:e9:5b:43:57:f0:1a:e3:46:1e:f9:03:
6e:a2:89:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a425xEBPU0lZSGBvV0TEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYThhYzM3Zjk2OTUxNjk2MjdmNzVlMDk4OTYzMzk2ZGU5
NjM4Y2MwHhcNMjYwNDE3MTAwMTI5WhcNMjYwNDE4MTAwMTI5WjAzMTEwLwYDVQQD
Eyg1YmJiMWJjYzQ3ZGI2ZDA4MTU2YWM3Yjg1ZDYyYWIxMTZmNGY2NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPWNZCC75My0+ZoTGQDG3M4J7RMf
RmTRUAxkW7IPpuw6vIcfAlqKeq1PoOYsBBbdxnUvWx3hvvM++fxiVUU+s/YVilze
dMflp3FwIBLO5doHO+cpBe8ib79C4F5LqokZ23jGlD3uv4TgXL1v85b9euNJ4aso
6dfewOBOqjv2aVuSoUbUXQqyhSaih0DckF4bvY1Mz14cX51HZdgR4KFnx7XO34fX
Omx1fnt3KCeyvPCpdCxe4WkOFRp7NqMkNKuuKwqngviSEMXqwgq7iPRcLcg1+Zug
i8q4VMTxMQmqbQL5usd4qesqdBSQEUrTAmtyX45xIK9sU+vQ5iXdJjUWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu7G8xH220IFWrHuF1iqxFvT2XmMB8GA1UdIwQY
MBaAFB+orDf5aVFpYn914JiWM5beljjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvSDZpc05fbHBVV2xpZjNYZ21KWXpsdDZXT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlh7Hj4ou
OvWWMBkO6ScsXGISNPvrxrceGsH1YqA7eO5JDXiJ7ymDxabjIo5iwJ7gsnZOPUJM
2r32/MKzcxj9BTM2NBCkNuv9+WUA5ql5umzmFhNpwWQ8sv+kAJpGqtQMh/Xj9l4q
ULsPKGwqmXmfYHIo7ixsS9epXFnAT86I++sl3Bu24rh+3zWyDiOxCyRcuFxpYq5y
yM0m1/jJA5dMkO8SPHHnhyU5LVOCaXiDrq5j5Zj49t3ymM9WKrQNPd76HpcSkcOr
OAAymnev8p09VHyjG2uo/CUkr4NhpVYW+JdKky/tLu0Nw5uk4QCITgWc0+lbQ1fw
GuNGHvkDbqKJbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:11 2026 by rpki-client