Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: kX6gwbo7NpII/5khN6W2KFjaOa5whhM9l0VHXwkgxqU=
Subject key identifier: 74:51:87:1B:1C:48:16:2E:76:6B:98:E3:B3:95:71:2E:D3:3F:7D:9F
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019D9A74BA53224849843622343EF4518EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:34 +0000
Manifest this update: Fri 17 Apr 2026 08:00:34 +0000
Manifest next update: Sat 18 Apr 2026 08:00:34 +0000
Files and hashes: 1: 2SzXHkxCLVLxwqT1VXOIbH7zS1U.roa (hash: aCYVx/y4t8hASeqhW625AjPBxOCwC/8c0JG862QvXD0=)
2: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: OctpDcMOMhp3uglaWjbgMUn6q9O4WWMGXQORMUOB7u0=)
3: xprnXzLHdgCC1ErposCq6vG3jPU.roa (hash: yXNFomv+hurOUmhTIqZgZ4hQnilyhZpNY276iiDrBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ba:53:22:48:49:84:36:22:34:3e:f4:51:8e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Apr 17 08:00:34 2026 GMT
Not After : Apr 18 08:00:34 2026 GMT
Subject: CN=7451871b1c48162e766b98e3b395712ed33f7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:66:0d:3c:c4:b1:33:4d:8b:81:0b:e4:4c:
77:ce:99:64:fc:f1:13:35:f3:9c:05:d4:28:99:d9:
65:74:f4:c5:fa:8b:3f:61:d8:df:00:7b:19:9f:78:
dc:79:02:cb:80:96:a6:36:07:69:1e:03:f2:c2:93:
81:4a:80:ae:ec:f6:39:29:32:48:32:db:7d:3c:73:
f9:b5:af:5f:7e:c8:04:75:22:17:ce:89:68:7d:06:
4b:48:b5:a7:cb:d1:b7:2e:02:de:94:0a:1f:14:a6:
89:ba:f1:06:81:c0:23:9f:bf:d6:f5:eb:52:25:0b:
29:d6:d5:8c:e7:51:48:a9:6a:cc:3f:92:11:7d:d2:
3d:75:3e:6e:f0:60:8a:d9:46:70:59:c3:74:1a:ac:
42:5e:65:d8:37:1e:1e:f2:b5:00:7a:20:fc:db:ca:
e8:ed:52:05:e6:47:9b:1e:9d:4a:64:81:24:90:3e:
c5:23:99:33:32:0f:bf:9b:08:cd:c8:b0:87:b6:7d:
85:2b:69:39:90:fa:af:6f:65:57:ce:c3:45:28:af:
96:cf:72:07:67:24:7f:56:57:09:7e:c7:87:cd:21:
16:bc:cb:46:d2:0a:97:d7:2b:cd:0a:6a:1c:91:c1:
2d:39:43:7a:24:c1:eb:79:9f:0d:16:1f:af:bc:38:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:87:1B:1C:48:16:2E:76:6B:98:E3:B3:95:71:2E:D3:3F:7D:9F
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:d3:b4:35:8c:d2:14:34:a2:23:57:f8:75:64:16:77:91:
86:1c:b6:81:37:e3:79:b4:0e:15:c1:eb:8e:c1:19:4b:9d:ac:
c7:c3:b8:f9:4c:58:32:26:66:81:31:cf:b8:ff:07:ed:fd:ea:
b6:cb:05:f6:8a:e5:6e:3c:ce:c5:37:23:66:2e:75:fe:4f:ab:
58:91:c2:21:5b:fe:b3:10:3f:a4:92:87:83:f4:b7:83:6e:d7:
c1:3b:db:5e:f1:10:f9:f9:9c:25:71:6d:6c:f6:e5:73:a3:f9:
dd:72:6d:55:22:d3:58:de:43:fb:e9:02:8b:57:82:76:8b:1f:
1a:19:1a:b3:c6:5e:60:a2:d0:23:a5:ad:58:05:60:a1:e6:59:
85:42:61:e9:a1:14:26:89:8b:77:2f:28:86:33:e1:2a:5b:21:
08:a3:90:a7:62:18:f1:4a:a4:a4:db:59:21:97:58:4f:cb:4e:
11:38:d0:c3:ad:8f:44:fb:39:99:f0:11:67:c2:51:17:bf:65:
a3:a9:42:e2:25:bf:24:1d:72:a6:16:0d:ed:2f:46:c3:81:ba:
d1:e8:c2:cb:82:f9:c2:ea:5e:0e:e5:9e:ee:4a:2f:35:f4:33:
7d:5c:05:a1:66:45:2a:a1:b6:9f:5c:14:b8:b9:15:11:cf:b8:
de:5e:86:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adLpTIkhJhDYiND70UY72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0
Yjg2ZWIwHhcNMjYwNDE3MDgwMDM0WhcNMjYwNDE4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg3NDUxODcxYjFjNDgxNjJlNzY2Yjk4ZTNiMzk1NzEyZWQzM2Y3ZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjxmDTzEsTNNi4EL5Ex3zplk/PET
NfOcBdQomdlldPTF+os/YdjfAHsZn3jceQLLgJamNgdpHgPywpOBSoCu7PY5KTJI
Mtt9PHP5ta9ffsgEdSIXzolofQZLSLWny9G3LgLelAofFKaJuvEGgcAjn7/W9etS
JQsp1tWM51FIqWrMP5IRfdI9dT5u8GCK2UZwWcN0GqxCXmXYNx4e8rUAeiD828ro
7VIF5kebHp1KZIEkkD7FI5kzMg+/mwjNyLCHtn2FK2k5kPqvb2VXzsNFKK+Wz3IH
ZyR/VlcJfseHzSEWvMtG0gqX1yvNCmockcEtOUN6JMHreZ8NFh+vvDiJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRRhxscSBYudmuY47OVcS7TP32fMB8GA1UdIwQY
MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt
YzBiM2IwZjU0YmViLzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi
LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALerTtDWM
0hQ0oiNX+HVkFneRhhy2gTfjebQOFcHrjsEZS52sx8O4+UxYMiZmgTHPuP8H7f3q
tssF9orlbjzOxTcjZi51/k+rWJHCIVv+sxA/pJKHg/S3g27XwTvbXvEQ+fmcJXFt
bPblc6P53XJtVSLTWN5D++kCi1eCdosfGhkas8ZeYKLQI6WtWAVgoeZZhUJh6aEU
JomLdy8ohjPhKlshCKOQp2IY8UqkpNtZIZdYT8tOETjQw62PRPs5mfARZ8JRF79l
o6lC4iW/JB1yphYN7S9Gw4G60ejCy4L5wupeDuWe7kovNfQzfVwFoWZFKqG2n1wU
uLkVEc+43l6GZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:35 2026 by rpki-client