Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: c/Sup7G/IgPnT0oMzdE96qJS9B6Ix5JgqqiEKtkLYJs=
Subject key identifier: 1B:D2:FF:DA:3E:42:EC:E8:8A:97:C4:22:19:2A:67:28:06:04:14:EE
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019DA45413B27A61E8BD67DDA743A1078631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:01:06 +0000
Manifest this update: Sun 19 Apr 2026 06:01:06 +0000
Manifest next update: Mon 20 Apr 2026 06:01:06 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: MXqHQK3+BM2eTmYKlHcBpAOaBjxj08wOFd8fn8HYO78=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:13:b2:7a:61:e8:bd:67:dd:a7:43:a1:07:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Apr 19 06:01:06 2026 GMT
Not After : Apr 20 06:01:06 2026 GMT
Subject: CN=1bd2ffda3e42ece88a97c422192a6728060414ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:a8:65:01:22:72:08:4c:51:8e:41:6b:0c:
86:1c:12:c8:e4:50:9c:5e:38:cd:b5:82:08:cd:d8:
b6:eb:45:07:0d:f6:b5:dd:20:c1:1c:fb:52:86:e1:
f9:76:48:38:99:b3:39:f6:55:87:e7:46:33:20:b8:
be:cc:79:b5:f3:d5:7b:62:bf:f9:f1:81:66:28:0c:
17:92:75:11:2f:4f:ab:20:19:b9:7d:c1:11:d1:8c:
d2:6b:71:3d:f7:d7:7f:57:bf:96:c8:9f:98:25:b9:
e0:74:23:cb:50:1e:cc:8e:5f:0c:bd:63:98:36:ac:
0d:18:cf:8b:59:ae:01:d5:ad:a9:bf:f1:b4:c7:f8:
dc:a6:3f:b0:09:7d:52:3a:91:d1:5a:47:dc:03:b7:
c8:a7:08:15:05:05:dd:a2:57:ce:60:6a:0f:5a:b2:
c5:7f:bf:1d:7d:fe:da:4e:27:fc:60:af:31:49:48:
b0:2c:dd:84:40:a6:b6:9b:a4:a6:dd:0f:04:af:7d:
88:b7:2b:ed:a3:17:66:68:3f:1b:55:bb:08:b5:86:
1d:32:f6:0e:77:46:91:3e:78:eb:96:27:b2:ef:cd:
b2:13:2d:92:35:99:a8:a9:52:5b:83:f7:b4:ba:f6:
63:3b:59:2c:59:65:e8:bc:ad:a4:57:8f:fa:12:51:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:FF:DA:3E:42:EC:E8:8A:97:C4:22:19:2A:67:28:06:04:14:EE
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:0d:61:0c:41:49:0e:7b:dc:33:a9:b1:8b:41:05:ce:43:
4f:06:84:9a:c1:4f:30:d3:cb:3a:10:0e:a6:cc:6b:a2:24:64:
d1:7a:ec:46:27:db:86:cc:bc:fe:86:2d:59:ca:07:b8:ff:72:
c5:e8:c6:a8:9b:af:bb:02:c0:81:39:8e:57:1b:04:85:ac:88:
57:6b:30:1c:9a:2b:6b:aa:30:b0:d5:48:20:30:d9:06:1e:80:
5c:bf:65:7c:4d:94:db:46:b5:87:42:bd:8c:51:32:bf:fa:06:
40:78:3e:33:77:7d:94:56:cd:2e:96:84:99:c7:c8:d9:bc:83:
0d:37:ad:1d:b4:bc:40:1f:06:22:e1:20:d9:18:01:1c:12:30:
a1:ee:9b:c1:cb:bd:a9:4f:1c:0d:61:eb:50:8e:8f:cd:e9:35:
49:99:7b:a5:a0:d5:17:a2:d1:b2:dc:89:af:4b:e4:78:2b:8a:
56:4d:51:cd:57:23:02:af:19:c6:ec:9a:c0:8f:2f:88:28:cf:
2f:96:8e:8f:9f:e4:94:90:2d:c6:bb:0c:5c:15:63:a4:08:78:
6e:cd:36:a3:dc:96:86:bc:89:f5:8d:c7:49:a1:b8:bb:5d:10:
31:95:eb:e5:90:9e:e4:ac:1d:bd:b3:4f:90:40:0f:52:22:ab:
80:d5:41:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVBOyemHovWfdp0OhB4YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1
YWM3MzAwHhcNMjYwNDE5MDYwMTA2WhcNMjYwNDIwMDYwMTA2WjAzMTEwLwYDVQQD
EygxYmQyZmZkYTNlNDJlY2U4OGE5N2M0MjIxOTJhNjcyODA2MDQxNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6oZQEicghMUY5BawyGHBLI5FCc
XjjNtYIIzdi260UHDfa13SDBHPtShuH5dkg4mbM59lWH50YzILi+zHm189V7Yr/5
8YFmKAwXknURL0+rIBm5fcER0YzSa3E999d/V7+WyJ+YJbngdCPLUB7Mjl8MvWOY
NqwNGM+LWa4B1a2pv/G0x/jcpj+wCX1SOpHRWkfcA7fIpwgVBQXdolfOYGoPWrLF
f78dff7aTif8YK8xSUiwLN2EQKa2m6Sm3Q8Er32ItyvtoxdmaD8bVbsItYYdMvYO
d0aRPnjrliey782yEy2SNZmoqVJbg/e0uvZjO1ksWWXovK2kV4/6ElFHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvS/9o+QuzoipfEIhkqZygGBBTuMB8GA1UdIwQY
MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt
YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj
LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaINYQxB
SQ573DOpsYtBBc5DTwaEmsFPMNPLOhAOpsxroiRk0XrsRifbhsy8/oYtWcoHuP9y
xejGqJuvuwLAgTmOVxsEhayIV2swHJora6owsNVIIDDZBh6AXL9lfE2U20a1h0K9
jFEyv/oGQHg+M3d9lFbNLpaEmcfI2byDDTetHbS8QB8GIuEg2RgBHBIwoe6bwcu9
qU8cDWHrUI6Pzek1SZl7paDVF6LRstyJr0vkeCuKVk1RzVcjAq8ZxuyawI8viCjP
L5aOj5/klJAtxrsMXBVjpAh4bs02o9yWhryJ9Y3HSaG4u10QMZXr5ZCe5KwdvbNP
kEAPUiKrgNVBug==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:09 2026 by rpki-client