Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: VzPQi3Thh4Y3oIPwrT/EAm3jP3xUQF4h3LMJIr3Ga6s=
Subject key identifier: 5A:86:C8:ED:50:1B:B6:2E:ED:07:3B:90:EE:76:D5:2B:A8:45:A1:22
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 019DA453BBE259FFCAD5CE096E15679CEAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:44 +0000
Manifest this update: Sun 19 Apr 2026 06:00:44 +0000
Manifest next update: Mon 20 Apr 2026 06:00:44 +0000
Files and hashes: 1: nXzoJB4Hkxjeew0KcPqZKQRdlI4.roa (hash: Pm5c4qFslkzHfA4t7e8kYa/E3MVrB2zFs8ODUlD4vV4=)
2: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: nKsI5GSpqN2zP+SwjI+moj1haI67OtMX2cQ8OtyRiAc=)
3: s3dM0xvLl-Y9I7_sOQEZMWL8kWI.roa (hash: WHvA5QdVXhnyOdFbgWQ6INw42b6vsKso3xNl40VwuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:bb:e2:59:ff:ca:d5:ce:09:6e:15:67:9c:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Apr 19 06:00:44 2026 GMT
Not After : Apr 20 06:00:44 2026 GMT
Subject: CN=5a86c8ed501bb62eed073b90ee76d52ba845a122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:60:c7:51:64:bc:78:c6:e5:61:d0:7f:9a:
0a:64:26:8a:b7:3e:18:f5:3f:be:f9:27:5d:08:40:
15:b4:93:e4:1a:83:b8:a8:7d:92:46:db:e2:d6:b1:
0f:a0:74:06:3d:7d:ae:3c:ec:3c:be:80:12:74:56:
e0:51:44:e4:90:b8:2e:01:fe:0b:ba:3e:c1:5c:98:
5b:15:ed:f9:a6:70:52:d6:f2:75:3f:c9:32:75:47:
ec:61:18:32:5b:08:20:20:54:cc:61:e7:cb:ec:ad:
ca:25:66:a4:6b:e3:8b:a6:2c:9d:99:51:70:5e:49:
6b:d2:c7:0e:87:73:63:fc:28:19:b2:ee:38:0e:50:
3e:f1:3e:52:ed:38:76:72:78:cd:61:7b:fd:56:8c:
61:9b:69:8c:73:9a:79:23:a4:f7:63:6a:cf:58:b1:
0b:8d:79:6e:83:4e:43:b1:54:00:8f:7c:87:94:d5:
05:a4:41:e6:0c:37:5c:7b:2e:c7:df:7e:61:97:5a:
89:47:c2:77:85:45:4d:ba:4c:ed:32:d8:53:8e:68:
d4:44:ee:62:89:29:3d:01:1f:f5:74:7e:a6:da:12:
b6:d3:ed:bc:87:f4:76:80:b1:94:8a:79:ca:ea:a8:
83:c1:5a:ef:02:fb:03:f7:a0:b3:aa:4e:bc:10:50:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:C8:ED:50:1B:B6:2E:ED:07:3B:90:EE:76:D5:2B:A8:45:A1:22
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:60:b6:72:44:43:e4:75:8d:ad:81:1f:f0:01:42:b4:aa:35:
6f:c8:23:8c:ab:b7:68:67:6e:db:3f:f1:e3:92:f6:3a:18:45:
63:7f:11:c1:38:d4:4c:be:d0:27:ff:49:83:2c:5d:1e:06:4d:
da:09:b6:dc:18:5f:82:2e:12:6a:69:1e:3b:e0:8d:b3:87:b9:
e6:23:0a:21:c9:4d:36:be:ff:2e:c8:55:1a:ea:f6:9e:d4:c9:
ca:44:22:ca:18:0a:99:e1:ed:36:84:68:72:b9:1e:e8:a3:63:
8d:3e:36:40:a9:fb:39:5e:ed:79:ca:87:7c:39:e3:79:5a:44:
53:2b:42:c7:14:87:6f:96:e1:55:e4:54:50:97:e3:16:59:57:
bb:fa:40:d5:5f:3c:dc:53:5e:a8:2c:ae:85:38:38:7c:56:6e:
97:86:41:ab:77:8d:c2:39:74:d6:68:16:17:e5:55:67:ac:57:
f5:20:56:a1:ca:48:98:ad:1b:a2:0c:3f:c7:5d:98:58:e4:6e:
9a:cb:ac:4e:e2:be:79:a6:57:03:1b:82:32:f4:c7:d9:32:05:
18:97:e0:ba:ae:e1:cb:03:cc:d0:ad:6f:b0:86:0d:39:56:e1:
78:94:0b:77:54:97:df:37:37:ac:3e:83:d8:97:23:92:8e:7e:
27:de:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:36 2026 by rpki-client