Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: VkO3zVqrhf8X1b/lMI2XwNLkIcBTmbCd1HD44O17VXg=
Subject key identifier: 22:F3:2E:09:01:E9:EF:52:42:69:25:22:3A:FD:F8:54:BB:7E:79:7B
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019DA566E43650B62C8768414A367D2540D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 11:01:16 +0000
Manifest this update: Sun 19 Apr 2026 11:01:16 +0000
Manifest next update: Mon 20 Apr 2026 11:01:16 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: FtTW64+obw5K9yGT3Ixw73XnFmzY5E0iEHh/5zUBQL0=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:e4:36:50:b6:2c:87:68:41:4a:36:7d:25:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Apr 19 11:01:16 2026 GMT
Not After : Apr 20 11:01:16 2026 GMT
Subject: CN=22f32e0901e9ef52426925223afdf854bb7e797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:d8:e9:26:98:da:b2:88:3e:45:ed:78:6f:
60:0e:f5:f8:c9:14:5e:fa:82:b8:83:c0:6c:30:d9:
e4:c6:31:96:0c:0b:54:35:c0:34:fc:b4:d5:49:a4:
a5:31:e2:2e:92:c1:d0:4a:eb:7a:87:51:70:90:0a:
64:2b:96:dc:1d:b0:8d:63:d0:1e:c4:a1:cb:37:f4:
c7:98:13:fb:0a:b3:cc:c7:e1:42:5c:09:e8:47:ba:
44:2d:02:af:75:60:17:c0:87:3f:99:55:ca:8e:47:
5f:94:16:7b:8f:d9:80:13:b4:e5:29:06:eb:a1:34:
d6:29:21:58:b5:3f:e8:3c:41:12:be:4f:33:8c:64:
41:96:7f:e2:fd:1c:ed:1f:7d:d2:3b:90:cb:18:50:
70:55:f3:c2:25:c6:e9:9e:61:fd:00:c8:6f:2b:14:
fb:44:f8:12:8b:ff:09:c8:1a:41:dd:a0:8c:2a:41:
17:33:05:d0:a5:2d:7d:c4:8d:a8:62:bf:d0:1a:7f:
8c:54:c8:a0:ee:d5:9c:a4:c7:f3:29:af:6f:84:05:
d2:47:3c:5e:83:6f:ab:a4:08:87:f9:c5:60:d8:a8:
8a:9f:d5:df:77:bb:09:9a:fa:2c:3e:f4:61:d0:71:
13:71:5c:30:44:02:32:12:12:79:64:d1:d8:2a:47:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:2E:09:01:E9:EF:52:42:69:25:22:3A:FD:F8:54:BB:7E:79:7B
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:f3:b3:4b:4a:3c:af:e9:41:21:a8:2e:83:7a:d4:9a:d0:
a7:f6:9e:68:37:e9:e1:9f:f9:a2:46:05:1d:54:46:39:73:95:
4e:f0:f5:41:cc:79:5a:8b:e6:bf:f6:57:6a:c9:c3:ad:2b:a0:
ea:d6:bd:db:3a:6a:d3:f7:c6:4b:b3:27:8b:c4:81:13:e1:67:
ed:9e:c2:ac:52:45:7f:b9:c5:57:b4:9a:e3:15:09:36:0d:ed:
7c:3d:43:82:81:0d:b1:07:12:66:1d:97:35:ce:de:2d:38:6d:
24:a0:31:73:bb:ed:72:3c:a2:64:1f:e1:65:e0:60:fa:fe:42:
f2:f1:b5:06:b8:98:58:16:ae:51:2c:d3:7c:b0:6f:ee:50:64:
1c:8b:a0:78:43:61:58:7f:d6:35:60:cb:91:4a:08:1a:82:bf:
93:86:45:6b:f7:9c:4e:26:98:48:05:ad:1b:9a:2f:37:72:bc:
da:d1:23:4e:63:62:36:1e:14:da:1b:cc:c5:f9:e8:b6:56:30:
d8:0c:17:57:f9:6d:40:b3:a4:66:30:22:6c:13:a2:bd:d5:70:
a6:ce:46:5e:6d:c1:45:02:b1:70:cb:87:a3:89:d4:61:4e:2b:
14:85:b5:f9:74:fb:f4:a5:76:66:6e:8c:f8:c9:67:2c:18:c1:
f3:7c:3c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZuQ2ULYsh2hBSjZ9JUDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2JjMTJiMzY4NTcxNmQ4ZWY2NTY3ZTIxOTA0MTk0Mzc3
YmUxZTUwHhcNMjYwNDE5MTEwMTE2WhcNMjYwNDIwMTEwMTE2WjAzMTEwLwYDVQQD
EygyMmYzMmUwOTAxZTllZjUyNDI2OTI1MjIzYWZkZjg1NGJiN2U3OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZbY6SaY2rKIPkXteG9gDvX4yRRe
+oK4g8BsMNnkxjGWDAtUNcA0/LTVSaSlMeIuksHQSut6h1FwkApkK5bcHbCNY9Ae
xKHLN/THmBP7CrPMx+FCXAnoR7pELQKvdWAXwIc/mVXKjkdflBZ7j9mAE7TlKQbr
oTTWKSFYtT/oPEESvk8zjGRBln/i/RztH33SO5DLGFBwVfPCJcbpnmH9AMhvKxT7
RPgSi/8JyBpB3aCMKkEXMwXQpS19xI2oYr/QGn+MVMig7tWcpMfzKa9vhAXSRzxe
g2+rpAiH+cVg2KiKn9Xfd7sJmvosPvRh0HETcVwwRAIyEhJ5ZNHYKkdhOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLzLgkB6e9SQmklIjr9+FS7fnl7MB8GA1UdIwQY
MBaAFOZ7wSs2hXFtjvZWfiGQQZQ3e+HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEt
NDExNzJiMjQ5NzQwLzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEtNDExNzJiMjQ5NzQw
LzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMTzs0tK
PK/pQSGoLoN61JrQp/aeaDfp4Z/5okYFHVRGOXOVTvD1Qcx5Wovmv/ZXasnDrSug
6ta92zpq0/fGS7Mni8SBE+Fn7Z7CrFJFf7nFV7Sa4xUJNg3tfD1DgoENsQcSZh2X
Nc7eLThtJKAxc7vtcjyiZB/hZeBg+v5C8vG1BriYWBauUSzTfLBv7lBkHIugeENh
WH/WNWDLkUoIGoK/k4ZFa/ecTiaYSAWtG5ovN3K82tEjTmNiNh4U2hvMxfnotlYw
2AwXV/ltQLOkZjAibBOivdVwps5GXm3BRQKxcMuHo4nUYU4rFIW1+XT79KV2Zm6M
+MlnLBjB83w8IQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:28 2026 by rpki-client