
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: 4vNNg1mOqjkLC2n1458OsUUtroVh7KMQtiXOILlGun4=
Subject key identifier: 19:FB:95:BD:44:A1:F3:4B:A8:6E:30:BD:E8:18:B1:D4:FE:3B:9C:A2
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019D9BF5CC9747B3087337CFB26CDD4AE4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 15:01:10 +0000
Manifest this update: Fri 17 Apr 2026 15:01:10 +0000
Manifest next update: Sat 18 Apr 2026 15:01:10 +0000
Files and hashes: 1: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (hash: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=)
2: eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (hash: EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=)
3: gk6Oi_1ZEpbTJNkrcfzivPseRk4.roa (hash: MTngT7ag+SmUmwcOQxAC0+9glcY1SoAbKgViBkJyexI=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: INwIl4HFIACxSrY5CNewrNqUSslfoJYzS/3O2k51KbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:cc:97:47:b3:08:73:37:cf:b2:6c:dd:4a:e4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Apr 17 15:01:10 2026 GMT
Not After : Apr 18 15:01:10 2026 GMT
Subject: CN=19fb95bd44a1f34ba86e30bde818b1d4fe3b9ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:4d:23:47:92:d7:bf:83:6a:99:1e:60:86:
06:55:20:7e:e9:60:3e:88:2d:ef:e6:3d:3d:e0:9d:
85:0a:e8:1f:a2:0e:f1:a3:33:af:b1:2b:94:74:15:
03:d1:74:10:1f:fb:73:44:0b:d2:cc:dc:88:b1:16:
ed:11:91:08:6f:94:e0:64:ab:cf:9b:a7:ab:3d:81:
78:34:cf:89:9d:e9:22:12:ed:38:e5:e9:39:02:70:
1f:b9:e0:42:ee:3e:1d:90:0c:4a:82:a2:68:70:0b:
9e:8a:e8:a4:e0:89:84:9d:6b:5c:3a:c8:da:08:3f:
f9:27:72:02:92:d1:da:cb:d6:7b:b7:6e:bc:19:ed:
7f:7a:a8:be:50:db:d5:99:b0:f0:65:6d:b7:39:d7:
2c:bf:12:a4:5e:16:cb:15:65:42:ec:48:51:fa:26:
ef:6d:e3:67:30:8b:0e:7b:76:f1:6c:ef:28:55:08:
5c:50:a2:fd:98:ef:fa:dd:61:b1:60:f2:d1:4b:cd:
04:87:25:ad:4c:c4:a0:64:26:13:c1:45:a2:68:15:
5e:c0:b1:d9:17:e6:b6:88:3e:b5:f2:d5:7b:75:e2:
9c:29:bb:15:56:17:76:ec:76:4e:d3:d0:94:08:32:
cb:c5:1f:d3:43:4b:91:76:37:d2:e6:32:41:b7:5d:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:95:BD:44:A1:F3:4B:A8:6E:30:BD:E8:18:B1:D4:FE:3B:9C:A2
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:a7:03:95:a4:f0:a2:74:e6:27:90:ce:4d:0d:82:10:59:
ff:98:36:f0:5c:b7:c2:05:41:c1:0d:c1:d5:27:9f:8f:9a:fe:
3b:72:59:66:5f:ea:7b:d7:e6:54:27:74:89:75:1c:1a:57:4a:
b5:6e:07:55:60:87:6f:6d:89:7c:9f:b5:b1:9a:65:d4:d0:6b:
35:b4:8a:52:2e:af:99:13:f1:cb:b8:b7:76:71:89:57:b2:81:
52:84:b1:5e:d6:a7:bf:4f:c2:3a:a5:77:f9:8e:d0:30:1f:d7:
25:82:b3:9e:2a:d9:f3:13:51:07:c7:0b:c4:a5:32:d5:a8:d0:
49:c2:55:6d:af:73:60:d4:80:12:23:5c:e3:d6:da:45:fb:2f:
05:e1:8b:82:54:35:89:e7:74:e2:06:45:4f:3b:02:75:db:b8:
65:8b:b8:7a:a9:bc:05:f6:d4:10:c1:6a:ec:39:69:17:a7:da:
a6:93:ff:83:9a:eb:f5:d3:34:a4:bc:68:fe:47:39:e6:e2:72:
a0:4b:e2:9f:90:13:71:2c:44:46:c7:1b:c0:bb:c7:88:c5:54:
2a:a3:a8:71:41:67:c2:4f:48:65:d2:4e:2f:74:1a:08:e2:1c:
50:9c:47:d6:ad:6f:bc:1a:7b:6e:cb:89:96:c8:3f:cf:38:55:
25:c0:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:21 2026 by rpki-client