Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: A4Pe8D8sE5q5HKaguCjBiiLyVRq6QUjowkAkU8EdF9k=
Subject key identifier: 89:24:E3:DB:74:7C:58:D5:8C:EC:34:20:AD:24:43:37:5B:CA:D2:BB
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019D9B8788B5630D601BD68943184419370F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 13:00:43 +0000
Manifest this update: Fri 17 Apr 2026 13:00:43 +0000
Manifest next update: Sat 18 Apr 2026 13:00:43 +0000
Files and hashes: 1: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (hash: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: hg0sZHJKNxMeG7+VuE9t0DXn9QhP4pqFXYwVEmbX3RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:88:b5:63:0d:60:1b:d6:89:43:18:44:19:37:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Apr 17 13:00:43 2026 GMT
Not After : Apr 18 13:00:43 2026 GMT
Subject: CN=8924e3db747c58d58cec3420ad2443375bcad2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:f7:ef:6f:1b:74:62:34:f9:03:0c:ed:2e:
da:78:59:75:fe:76:ba:29:a6:b6:6b:df:8f:6e:ed:
f6:be:3a:92:45:e9:7a:53:e2:41:7d:3e:1b:26:56:
25:cf:ac:87:12:f7:d6:b1:c7:a7:e9:a0:b1:93:28:
22:2a:ce:c7:bb:fd:a5:12:d0:13:c8:0f:6e:53:8a:
ba:16:ed:cf:0c:ee:f1:2d:f9:d8:ef:14:56:9a:59:
58:79:07:d0:ae:27:5e:90:69:c8:c3:e5:25:b4:23:
94:bb:d8:b0:b3:b1:b0:d7:6c:82:d0:8e:57:ef:79:
4c:e4:24:c6:7d:76:2d:6d:68:0d:0f:17:0e:0c:e3:
31:ac:d5:a0:0a:7b:b8:a9:f2:be:4c:5d:5a:8f:4e:
91:2f:07:8c:66:79:cb:6e:93:61:2c:d1:d8:be:53:
9d:ba:e4:7f:e5:ed:28:c2:bd:43:38:70:b7:b8:ce:
37:8a:67:13:31:4d:00:9f:27:5f:09:85:12:15:b0:
d5:d8:6d:d7:b2:9c:9d:f0:86:27:4e:9a:b5:67:9a:
96:0e:2d:8f:95:55:98:a0:13:ae:f0:b2:13:36:22:
47:2f:54:d1:00:76:b7:62:78:06:a4:32:93:a2:48:
0f:97:69:83:cb:43:6f:f2:ca:49:b9:56:28:53:e6:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:E3:DB:74:7C:58:D5:8C:EC:34:20:AD:24:43:37:5B:CA:D2:BB
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:98:3b:57:bd:23:90:35:4b:9d:df:fe:8d:2b:29:05:cb:97:
3b:e1:67:7a:44:f1:a3:c8:96:96:3a:e5:3a:ed:01:32:47:4f:
18:d1:13:0b:e4:e2:ca:c2:b3:cb:45:e2:35:31:d3:0c:bd:3b:
19:92:23:70:af:64:bb:63:36:c3:ba:82:20:ad:0d:3e:f9:bd:
53:1c:f6:ff:41:b1:37:ee:45:b5:a6:8b:f6:90:33:41:e5:b3:
97:ba:a8:2d:4a:52:4f:9e:76:99:b8:7a:ce:b1:64:c5:17:de:
ed:8f:a9:d5:1c:1a:69:22:82:34:92:a2:07:4b:82:bf:7f:43:
b6:69:da:2a:b9:cc:91:0f:d8:7e:31:af:00:79:61:16:78:0c:
63:c8:cd:5a:a9:bd:96:3e:ff:f0:67:6c:e4:7d:2b:fe:99:b9:
c3:bd:ab:a4:1b:78:41:17:44:1d:23:f8:7a:1e:9c:23:25:90:
8f:4a:20:92:27:06:ec:6e:3a:3d:5c:44:23:62:d4:07:6f:c3:
38:f3:97:17:28:b2:d2:61:43:9d:5e:23:34:4e:87:95:77:b4:
73:d0:4e:b5:a9:37:ab:47:8b:82:c3:10:68:e5:27:77:e7:a7:
58:8d:0d:d0:89:1a:eb:15:6d:3d:6f:a1:6a:03:ec:b2:bc:d5:
35:6a:07:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4i1Yw1gG9aJQxhEGTcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3
Mzg5YzAwHhcNMjYwNDE3MTMwMDQzWhcNMjYwNDE4MTMwMDQzWjAzMTEwLwYDVQQD
Eyg4OTI0ZTNkYjc0N2M1OGQ1OGNlYzM0MjBhZDI0NDMzNzViY2FkMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDr3728bdGI0+QMM7S7aeFl1/na6
Kaa2a9+Pbu32vjqSRel6U+JBfT4bJlYlz6yHEvfWscen6aCxkygiKs7Hu/2lEtAT
yA9uU4q6Fu3PDO7xLfnY7xRWmllYeQfQridekGnIw+UltCOUu9iws7Gw12yC0I5X
73lM5CTGfXYtbWgNDxcODOMxrNWgCnu4qfK+TF1aj06RLweMZnnLbpNhLNHYvlOd
uuR/5e0owr1DOHC3uM43imcTMU0AnydfCYUSFbDV2G3Xspyd8IYnTpq1Z5qWDi2P
lVWYoBOu8LITNiJHL1TRAHa3YngGpDKTokgPl2mDy0Nv8spJuVYoU+bsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkk49t0fFjVjOw0IK0kQzdbytK7MB8GA1UdIwQY
MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt
ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl
LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZg7V70j
kDVLnd/+jSspBcuXO+FnekTxo8iWljrlOu0BMkdPGNETC+TiysKzy0XiNTHTDL07
GZIjcK9ku2M2w7qCIK0NPvm9Uxz2/0GxN+5FtaaL9pAzQeWzl7qoLUpST552mbh6
zrFkxRfe7Y+p1RwaaSKCNJKiB0uCv39DtmnaKrnMkQ/YfjGvAHlhFngMY8jNWqm9
lj7/8Gds5H0r/pm5w72rpBt4QRdEHSP4eh6cIyWQj0ogkicG7G46PVxEI2LUB2/D
OPOXFyiy0mFDnV4jNE6HlXe0c9BOtak3q0eLgsMQaOUnd+enWI0N0Ika6xVtPW+h
agPssrzVNWoHRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:30 2026 by rpki-client