Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: NCX5rlV54OwPEtl9IRSvlZV9qEteJUt1CQ1yy9bYrws=
Subject key identifier: 01:FC:30:BC:9B:19:4D:74:9D:51:1E:4A:9D:5D:6C:60:CA:1F:4F:5A
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019D9A748DFDD817990F82B947F4C166141E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: phLwEPXMhRehU8OGTATC+qaroQkeT4O2xlU7+Fd7Qw4=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8d:fd:d8:17:99:0f:82:b9:47:f4:c1:66:14:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=01fc30bc9b194d749d511e4a9d5d6c60ca1f4f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:b3:c1:04:f2:74:86:cb:98:64:21:d3:03:
36:cc:ac:cc:32:7b:1e:0b:c3:9d:ac:4d:4b:49:48:
5d:55:9c:0d:77:ed:64:f5:de:da:91:a1:a3:03:b6:
51:f3:31:2b:79:bf:69:32:0d:33:67:3a:87:61:8a:
ee:7c:f2:f1:ab:37:e8:89:0e:78:4a:5b:c6:d9:05:
5d:b1:d3:37:47:00:d8:24:0f:05:b1:6a:94:fd:2a:
f6:41:85:9a:e8:cd:00:59:46:a2:ab:63:4e:1d:38:
37:59:7c:6b:c7:7a:4a:65:7c:17:ee:ab:b5:34:7f:
fc:66:de:14:82:f6:93:4f:74:26:bd:7c:a4:36:9b:
34:ca:0a:16:30:17:6f:df:3b:dc:78:43:bc:c0:2a:
5c:b6:29:2e:c5:a8:d6:85:99:1d:2e:4d:81:80:4f:
ce:72:93:74:4e:f5:27:58:95:4d:91:66:bd:da:0c:
54:e8:8a:a3:4f:a9:95:9b:fe:0b:72:90:e3:ba:7a:
bd:03:16:d1:cb:53:34:8a:93:9b:2d:e6:24:dc:7e:
b2:c2:45:42:6f:b4:8d:11:48:6b:64:7b:f5:c3:c0:
0e:2a:11:aa:8f:90:47:e2:83:ff:2d:e8:43:68:e0:
19:a0:d5:15:ac:3d:dd:94:bb:c4:30:06:d1:eb:c4:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:30:BC:9B:19:4D:74:9D:51:1E:4A:9D:5D:6C:60:CA:1F:4F:5A
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:52:99:ef:10:d5:66:7f:4f:a3:be:c2:6e:c8:43:12:8c:ab:
c4:b8:18:07:71:7c:8e:a9:33:2a:5f:c9:c8:44:38:cb:40:af:
08:e6:4e:b0:02:44:85:82:6a:9d:fa:07:e6:50:28:b1:96:84:
cd:ed:e7:12:bf:bb:cb:3c:6f:d9:b5:10:84:93:1c:ff:c9:4a:
cf:a6:36:b1:42:48:a0:10:e8:17:23:b4:30:80:7d:e4:78:1e:
95:d3:ea:1d:a7:80:94:a6:17:ab:6d:aa:05:4f:f2:7b:d6:18:
65:14:6b:d7:b3:28:c8:d0:d6:e2:3c:49:cb:3d:3e:58:1b:8a:
12:62:a4:7f:fc:ba:9a:1d:07:74:87:56:b9:a5:7e:5f:c8:67:
00:b1:ef:79:39:f6:5b:53:40:40:d0:2b:a8:7d:ca:96:43:19:
c1:3e:2c:d6:91:3b:76:82:a7:6e:e7:e5:42:e5:d2:a1:4a:15:
c7:e5:01:d3:22:b0:1c:32:e0:06:b3:e1:58:21:7e:b2:34:ed:
d1:a0:9c:2f:af:50:2a:90:1d:ba:5b:9b:62:39:8c:7e:d8:2f:
f9:dc:9d:3f:c4:be:a9:e0:1a:11:ba:70:ad:dd:90:63:18:1e:
3b:29:8c:54:99:c7:4b:c0:fd:26:c9:a0:36:8f:22:fe:1e:b7:
e0:d8:5a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adI392BeZD4K5R/TBZhQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz
MmEwNWQwHhcNMjYwNDE3MDgwMDIyWhcNMjYwNDE4MDgwMDIyWjAzMTEwLwYDVQQD
EygwMWZjMzBiYzliMTk0ZDc0OWQ1MTFlNGE5ZDVkNmM2MGNhMWY0ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJSzwQTydIbLmGQh0wM2zKzMMnse
C8OdrE1LSUhdVZwNd+1k9d7akaGjA7ZR8zEreb9pMg0zZzqHYYrufPLxqzfoiQ54
SlvG2QVdsdM3RwDYJA8FsWqU/Sr2QYWa6M0AWUaiq2NOHTg3WXxrx3pKZXwX7qu1
NH/8Zt4UgvaTT3QmvXykNps0ygoWMBdv3zvceEO8wCpctikuxajWhZkdLk2BgE/O
cpN0TvUnWJVNkWa92gxU6IqjT6mVm/4LcpDjunq9AxbRy1M0ipObLeYk3H6ywkVC
b7SNEUhrZHv1w8AOKhGqj5BH4oP/LehDaOAZoNUVrD3dlLvEMAbR68RhfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH8MLybGU10nVEeSp1dbGDKH09aMB8GA1UdIwQY
MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt
NWEwNmY3ODg3ZGJkLzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk
LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1KZ7xDV
Zn9Po77CbshDEoyrxLgYB3F8jqkzKl/JyEQ4y0CvCOZOsAJEhYJqnfoH5lAosZaE
ze3nEr+7yzxv2bUQhJMc/8lKz6Y2sUJIoBDoFyO0MIB95HgeldPqHaeAlKYXq22q
BU/ye9YYZRRr17MoyNDW4jxJyz0+WBuKEmKkf/y6mh0HdIdWuaV+X8hnALHveTn2
W1NAQNArqH3KlkMZwT4s1pE7doKnbuflQuXSoUoVx+UB0yKwHDLgBrPhWCF+sjTt
0aCcL69QKpAdulubYjmMftgv+dydP8S+qeAaEbpwrd2QYxgeOymMVJnHS8D9Jsmg
No8i/h634NhalQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:26 2026 by rpki-client