Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: vG9E9U0Es/DlQMAEOZfUIDi630B9mQKNT0uhdsvpvwU=
Subject key identifier: B5:67:9A:1D:12:54:FF:DE:A5:5D:18:B2:EF:2F:8C:03:DC:23:0B:8D
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019DA4F85D2A1E97C59E90D6D63892F2B06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:00:33 +0000
Manifest this update: Sun 19 Apr 2026 09:00:33 +0000
Manifest next update: Mon 20 Apr 2026 09:00:33 +0000
Files and hashes: 1: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: WT/dtvJsvvLx9VBlXjskjxLJnAnoWcpa2Vht1DSDGJE=)
2: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (hash: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:5d:2a:1e:97:c5:9e:90:d6:d6:38:92:f2:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Apr 19 09:00:33 2026 GMT
Not After : Apr 20 09:00:33 2026 GMT
Subject: CN=b5679a1d1254ffdea55d18b2ef2f8c03dc230b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:4f:d9:62:14:33:ae:55:4d:76:9a:da:72:
dc:9e:c0:1e:d9:82:3c:36:e8:9e:3e:fc:47:57:f6:
e4:52:73:1a:9b:a7:45:a8:a3:22:db:cd:19:ad:37:
53:3c:c3:32:fb:37:72:ac:40:60:f5:3c:92:73:87:
9c:56:38:50:ec:99:42:d8:00:23:6a:2d:e4:7a:64:
d2:2d:19:94:88:c5:ff:3f:c5:4c:6c:b0:7b:0a:ff:
ff:08:a6:4f:6e:fe:40:e6:8a:23:71:8a:71:3a:d8:
bd:ca:eb:09:8e:31:f3:29:87:ac:d2:4b:f9:fa:5a:
3f:df:4c:3d:86:e7:58:f8:1f:b5:e4:78:78:57:56:
74:6e:3d:44:9d:27:19:61:68:cd:ed:d1:47:ae:9f:
ec:29:42:9d:02:e5:27:47:59:4e:de:2e:de:20:9e:
ca:b6:42:36:80:02:1d:07:95:c9:6b:ef:a2:b8:d5:
4d:c5:8d:17:b6:ea:88:a1:bf:07:89:78:b4:bf:4f:
dd:ea:77:37:89:65:aa:b1:5d:c8:fb:e2:37:5d:9b:
ed:24:82:a8:c5:b5:68:38:59:97:6f:f1:54:a6:42:
f6:c9:e3:cd:c7:37:52:93:1c:15:4e:83:a7:74:a2:
00:56:0e:d2:8a:c8:4c:2f:d7:35:a6:d6:cc:ff:1e:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:9A:1D:12:54:FF:DE:A5:5D:18:B2:EF:2F:8C:03:DC:23:0B:8D
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:14:86:69:a2:c6:bc:56:48:81:76:3e:c8:65:0a:ba:d9:
35:13:24:6a:19:af:80:d2:18:8a:e4:14:dd:97:16:57:b4:26:
71:a6:66:be:05:02:56:fd:34:ed:73:2c:f8:88:35:a4:d7:26:
db:1e:38:c5:9f:2e:af:2e:05:8c:e4:98:63:22:aa:d4:05:dc:
8c:5e:00:e4:8d:61:1e:59:9a:ad:28:5a:f7:f2:da:d7:3c:8c:
ae:51:99:3f:87:20:df:ba:ea:ae:af:75:c9:82:e5:50:39:20:
0a:d9:88:2a:31:75:b7:15:17:7a:db:44:c1:69:b5:4e:2e:66:
bd:ed:4a:d4:3e:26:f6:15:73:b4:ab:91:2f:8d:59:dd:d2:15:
9d:62:17:5d:46:e9:0e:2a:ec:34:ed:0a:31:86:ed:90:a5:f6:
8b:13:e6:8e:22:14:9c:6b:33:4c:1d:52:54:d6:da:de:d6:ab:
3c:20:d4:1c:1a:b8:83:eb:49:22:fe:e0:9c:e8:3d:b7:a6:40:
a1:38:18:53:f6:87:24:d5:46:c1:50:3b:05:f2:67:81:60:2e:
c7:d8:45:78:f1:f9:09:53:b5:0b:92:93:1e:7e:18:b9:0e:d6:
29:97:53:2e:b0:ed:36:dc:15:c4:1c:44:a6:05:62:a7:4a:dd:
82:15:db:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+F0qHpfFnpDW1jiS8rBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjYwNDE5MDkwMDMzWhcNMjYwNDIwMDkwMDMzWjAzMTEwLwYDVQQD
EyhiNTY3OWExZDEyNTRmZmRlYTU1ZDE4YjJlZjJmOGMwM2RjMjMwYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnBP2WIUM65VTXaa2nLcnsAe2YI8
NuiePvxHV/bkUnMam6dFqKMi280ZrTdTPMMy+zdyrEBg9TySc4ecVjhQ7JlC2AAj
ai3kemTSLRmUiMX/P8VMbLB7Cv//CKZPbv5A5oojcYpxOti9yusJjjHzKYes0kv5
+lo/30w9hudY+B+15Hh4V1Z0bj1EnScZYWjN7dFHrp/sKUKdAuUnR1lO3i7eIJ7K
tkI2gAIdB5XJa++iuNVNxY0XtuqIob8HiXi0v0/d6nc3iWWqsV3I++I3XZvtJIKo
xbVoOFmXb/FUpkL2yePNxzdSkxwVToOndKIAVg7SishML9c1ptbM/x7aIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVnmh0SVP/epV0Ysu8vjAPcIwuNMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu0Uhmmi
xrxWSIF2PshlCrrZNRMkahmvgNIYiuQU3ZcWV7QmcaZmvgUCVv007XMs+Ig1pNcm
2x44xZ8ury4FjOSYYyKq1AXcjF4A5I1hHlmarSha9/La1zyMrlGZP4cg37rqrq91
yYLlUDkgCtmIKjF1txUXettEwWm1Ti5mve1K1D4m9hVztKuRL41Z3dIVnWIXXUbp
DirsNO0KMYbtkKX2ixPmjiIUnGszTB1SVNba3tarPCDUHBq4g+tJIv7gnOg9t6ZA
oTgYU/aHJNVGwVA7BfJngWAux9hFePH5CVO1C5KTHn4YuQ7WKZdTLrDtNtwVxBxE
pgVip0rdghXbSQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:47 2026 by rpki-client