Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: zeYaf+NnL/SJNnCjds94vuSJnKZEDz4zrUwovyrm4NQ=
Subject key identifier: EF:85:6E:14:AD:DE:DD:DB:33:03:EE:B3:73:95:4D:21:C3:F2:38:9C
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019D9818F90408872536B2069E29EFFE27CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 21:01:06 +0000
Manifest this update: Thu 16 Apr 2026 21:01:06 +0000
Manifest next update: Fri 17 Apr 2026 21:01:06 +0000
Files and hashes: 1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: iIMtq6/fwFZ9nBQA76FaJfMCXN/tnnj+peJbO/KVlBw=)
5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f9:04:08:87:25:36:b2:06:9e:29:ef:fe:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Apr 16 21:01:06 2026 GMT
Not After : Apr 17 21:01:06 2026 GMT
Subject: CN=ef856e14addedddb3303eeb373954d21c3f2389c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:4d:5c:fc:46:d4:df:aa:1d:69:8b:27:2b:
3a:f9:56:c6:c8:51:64:89:55:53:ca:eb:d7:0c:dd:
8a:58:05:78:22:ea:fe:10:34:8e:c1:45:f1:b5:37:
69:16:87:00:a0:dc:8c:66:a3:99:27:c7:14:ad:8e:
a4:e1:71:52:51:61:be:5a:e2:af:cd:c6:06:04:c0:
bb:e3:5e:48:44:f0:04:cc:b2:c3:b2:04:19:8b:e8:
a1:21:45:3f:c8:74:03:46:2e:50:34:b2:14:0a:90:
f8:c3:90:e7:d4:34:31:b2:36:bb:0f:9a:e3:33:bc:
fe:c3:08:ae:43:fe:c2:f1:31:ed:8f:3d:c1:58:86:
bd:a1:34:20:66:0b:35:74:6c:d4:a0:27:b5:14:c5:
a5:a3:f8:78:c7:cc:4f:c7:43:55:5b:c7:43:47:25:
8e:70:57:aa:b1:ab:fa:d4:e4:4d:42:63:ac:9c:7d:
99:0c:2a:7f:2b:36:69:ca:ae:4e:86:99:03:8b:eb:
3c:69:bc:15:b9:a5:76:0b:df:b3:f1:28:4f:17:cd:
d6:b3:9f:57:bb:1b:0c:9a:97:92:5a:c4:8a:fe:67:
f4:a9:7b:86:17:3f:98:c4:2f:20:e4:4c:f4:47:99:
61:7b:67:0b:fe:ce:4a:21:de:b9:8d:0b:ff:a1:26:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:6E:14:AD:DE:DD:DB:33:03:EE:B3:73:95:4D:21:C3:F2:38:9C
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:f2:94:56:19:a9:9e:e4:b7:ab:1d:fc:af:ad:35:74:a7:
b4:d3:f3:9b:01:a2:c6:21:66:f8:60:c8:6e:e4:ca:cd:c7:4c:
b5:1d:ad:56:6b:47:6e:e6:aa:e3:85:81:e0:bd:74:30:ea:46:
97:c3:2b:01:79:06:b0:09:b2:00:cd:d6:ad:48:70:e9:6b:b3:
42:c4:d3:bf:ef:41:51:ef:79:be:42:27:c5:90:57:a6:35:e5:
60:82:a3:4e:8b:f5:02:9d:c4:a7:09:6d:8e:8a:e4:e9:64:da:
d2:fe:2b:41:df:24:0a:2e:39:b2:b8:4b:e0:cc:d5:e3:f2:68:
41:1d:ae:cd:ef:94:e2:ea:4b:fa:c8:f6:60:d0:79:33:6c:13:
6b:3c:3e:27:be:08:68:b4:43:5f:4c:2d:64:bb:c9:26:84:7a:
fc:e6:c4:54:91:22:a3:dd:d9:9f:e8:aa:ce:9c:92:6c:9f:f1:
fa:72:9f:c3:71:b3:60:4b:2f:5b:51:a5:fa:fa:fa:84:69:62:
c5:ab:ff:c0:f3:42:34:f4:4d:f3:fe:6c:c9:c6:c1:c2:9a:ed:
1c:3a:a8:44:ed:60:dc:de:b2:c0:62:6f:3d:5e:50:f7:a5:63:
87:e3:12:fc:b2:fb:41:d9:e1:b8:d1:db:db:80:21:ec:ce:44:
d8:ec:37:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGPkECIclNrIGninv/ifLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi
MDMzNmQwHhcNMjYwNDE2MjEwMTA2WhcNMjYwNDE3MjEwMTA2WjAzMTEwLwYDVQQD
EyhlZjg1NmUxNGFkZGVkZGRiMzMwM2VlYjM3Mzk1NGQyMWMzZjIzODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPdNXPxG1N+qHWmLJys6+VbGyFFk
iVVTyuvXDN2KWAV4Iur+EDSOwUXxtTdpFocAoNyMZqOZJ8cUrY6k4XFSUWG+WuKv
zcYGBMC7415IRPAEzLLDsgQZi+ihIUU/yHQDRi5QNLIUCpD4w5Dn1DQxsja7D5rj
M7z+wwiuQ/7C8THtjz3BWIa9oTQgZgs1dGzUoCe1FMWlo/h4x8xPx0NVW8dDRyWO
cFeqsav61ORNQmOsnH2ZDCp/KzZpyq5OhpkDi+s8abwVuaV2C9+z8ShPF83Ws59X
uxsMmpeSWsSK/mf0qXuGFz+YxC8g5Ez0R5lhe2cL/s5KId65jQv/oSbtSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+FbhSt3t3bMwPus3OVTSHD8jicMB8GA1UdIwQY
MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt
NjU4N2Y3NmZkODEwLzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw
LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRPylFYZ
qZ7kt6sd/K+tNXSntNPzmwGixiFm+GDIbuTKzcdMtR2tVmtHbuaq44WB4L10MOpG
l8MrAXkGsAmyAM3WrUhw6WuzQsTTv+9BUe95vkInxZBXpjXlYIKjTov1Ap3Epwlt
jork6WTa0v4rQd8kCi45srhL4MzV4/JoQR2uze+U4upL+sj2YNB5M2wTazw+J74I
aLRDX0wtZLvJJoR6/ObEVJEio93Zn+iqzpySbJ/x+nKfw3GzYEsvW1Gl+vr6hGli
xav/wPNCNPRN8/5sycbBwprtHDqoRO1g3N6ywGJvPV5Q96Vjh+MS/LL7QdnhuNHb
24Ah7M5E2Ow3lw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:12 2026 by rpki-client