Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: /9jzQCHf74ylFcm6FNwBtSpfboqA4oHe6shGussqN9U=
Subject key identifier: 2A:31:88:32:A1:E1:3F:03:1D:67:64:7A:3D:A2:92:94:40:A5:4B:74
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019D992B238629168882E19084B7306745A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: S2ft3Hju7eljRd19SiIzVso1Px0.roa (hash: 1n+Z/NtsvIHrdvPzT0sHZqEc6avxWfJC7XJpS/clIcs=)
2: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (hash: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: VelEniNUe6S9S7uKiJjVAo6TIZztMPQjpQ5e4ohifYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:23:86:29:16:88:82:e1:90:84:b7:30:67:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=2a318832a1e13f031d67647a3da2929440a54b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:12:9f:e5:dd:80:0b:fb:e4:94:f5:b1:cd:
cf:ba:54:ac:b1:1b:82:ca:07:68:88:a0:b0:21:7a:
61:84:5f:ab:0e:47:e6:92:93:98:46:c9:fc:a2:14:
2a:6f:58:e4:50:33:bf:75:34:d8:0a:0e:69:9a:f4:
e7:97:5d:9e:e9:1a:d2:c9:3c:e2:e7:34:dc:50:dd:
3d:fc:8f:16:85:e9:5b:a5:6a:a6:4f:cc:13:d3:97:
92:e7:67:7d:91:11:54:43:60:53:c8:47:6a:87:a2:
ef:38:42:dc:dd:d0:26:45:fd:d9:1f:24:f4:53:0e:
51:e7:86:ab:10:71:69:f1:00:d4:8b:2e:d2:5f:56:
3b:81:fe:a2:5a:56:84:b1:f9:e1:d9:21:a6:bf:6b:
f1:3d:76:83:56:6c:9b:83:cc:3f:b2:0b:0a:58:1a:
b3:11:09:97:8c:54:68:c6:ff:08:74:30:81:30:a5:
99:f1:1f:21:a8:50:cd:c2:17:8e:cd:01:ed:2f:bb:
b8:a4:68:c8:21:02:59:24:5c:ca:71:02:0c:b0:e3:
ee:3b:4b:98:13:c8:30:98:8a:35:55:51:18:b4:e2:
ff:e9:ff:12:e5:1d:2c:67:7a:dd:de:07:b5:e9:d6:
08:27:fe:31:fc:8e:68:7b:06:54:d8:76:9c:96:35:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:88:32:A1:E1:3F:03:1D:67:64:7A:3D:A2:92:94:40:A5:4B:74
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:ea:65:e5:e8:81:17:68:e7:03:a2:40:b2:8f:ca:65:36:
b4:93:3c:04:4a:39:7e:54:c0:01:f2:dc:1c:07:20:54:e8:9d:
ea:12:e3:ca:46:be:77:61:e6:af:39:46:aa:32:71:02:3c:bd:
84:80:9b:0f:3d:58:d7:c3:1f:b1:ac:67:37:c6:a5:95:89:dd:
25:09:a9:46:47:c1:9b:07:6c:85:f6:9b:10:14:f4:67:fe:85:
01:88:f8:70:e3:13:7d:75:c2:93:16:36:bb:ef:f5:4e:c1:d5:
d6:f6:5c:84:b9:c2:99:1f:11:80:1d:dd:3c:47:36:5a:c3:03:
79:58:10:15:59:7a:a9:de:0e:fc:5f:3a:9a:3b:57:84:92:e9:
58:7d:58:66:b3:fc:71:40:d7:1d:37:e5:fa:6c:3a:d6:6a:09:
3a:7e:2f:55:0e:a6:e4:8b:76:cc:3c:1d:b5:a4:d0:4a:08:9b:
15:1a:57:4a:55:a5:ba:fb:a1:36:27:c9:2c:3d:66:67:0f:67:
c4:93:2c:76:d6:fe:83:76:7a:b9:d3:00:a5:70:f8:71:d0:b8:
db:39:d0:de:e9:09:f7:5c:58:74:25:e5:c3:c4:e0:ac:28:cc:
ab:9a:37:47:f1:04:57:75:f9:5a:a2:bf:3a:a5:19:64:97:1a:
09:16:e4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKyOGKRaIguGQhLcwZ0WjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjYwNDE3MDIwMDM0WhcNMjYwNDE4MDIwMDM0WjAzMTEwLwYDVQQD
EygyYTMxODgzMmExZTEzZjAzMWQ2NzY0N2EzZGEyOTI5NDQwYTU0Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0msSn+XdgAv75JT1sc3PulSssRuC
ygdoiKCwIXphhF+rDkfmkpOYRsn8ohQqb1jkUDO/dTTYCg5pmvTnl12e6RrSyTzi
5zTcUN09/I8WhelbpWqmT8wT05eS52d9kRFUQ2BTyEdqh6LvOELc3dAmRf3ZHyT0
Uw5R54arEHFp8QDUiy7SX1Y7gf6iWlaEsfnh2SGmv2vxPXaDVmybg8w/sgsKWBqz
EQmXjFRoxv8IdDCBMKWZ8R8hqFDNwheOzQHtL7u4pGjIIQJZJFzKcQIMsOPuO0uY
E8gwmIo1VVEYtOL/6f8S5R0sZ3rd3ge16dYIJ/4x/I5oewZU2HacljUeSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoxiDKh4T8DHWdkej2ikpRApUt0MB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaazqZeXo
gRdo5wOiQLKPymU2tJM8BEo5flTAAfLcHAcgVOid6hLjyka+d2HmrzlGqjJxAjy9
hICbDz1Y18MfsaxnN8allYndJQmpRkfBmwdshfabEBT0Z/6FAYj4cOMTfXXCkxY2
u+/1TsHV1vZchLnCmR8RgB3dPEc2WsMDeVgQFVl6qd4O/F86mjtXhJLpWH1YZrP8
cUDXHTfl+mw61moJOn4vVQ6m5It2zDwdtaTQSgibFRpXSlWluvuhNifJLD1mZw9n
xJMsdtb+g3Z6udMApXD4cdC42znQ3ukJ91xYdCXlw8TgrCjMq5o3R/EEV3X5WqK/
OqUZZJcaCRbk4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:27 2026 by rpki-client