Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File: edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier: koVSTpJeQuUAHBS37Mf09SbQwZ65MC3j4uMKjjbnt6g=
Subject key identifier: F0:F6:EC:54:F0:E2:1A:8C:B2:66:E7:93:06:F5:40:C7:4C:01:0F:51
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial: 019DA3E6C1163C923BFF9A9B49A672E177C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:42 +0000
Manifest this update: Sun 19 Apr 2026 04:01:42 +0000
Manifest next update: Mon 20 Apr 2026 04:01:42 +0000
Files and hashes: 1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: JXr40kZLJOh5B4HX18v6FF1xT4n8wQDEfgNVcaEpxcU=)
2: qI-tc_wn9NR2TJtTi_-UZ3Db4dk.roa (hash: Hna1rX01DaNLfA/1719u7etsundy10hoCtZZnTaQpt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:c1:16:3c:92:3b:ff:9a:9b:49:a6:72:e1:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
Validity
Not Before: Apr 19 04:01:42 2026 GMT
Not After : Apr 20 04:01:42 2026 GMT
Subject: CN=f0f6ec54f0e21a8cb266e79306f540c74c010f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:8e:cc:26:ad:97:07:fa:5e:2b:82:10:1c:
04:d5:d1:30:b2:3f:8f:ee:88:1d:1f:f7:47:c5:03:
82:b0:0b:b3:47:00:24:57:f6:b2:6d:f8:74:05:2f:
84:25:03:fe:1a:60:9d:4c:23:ed:ab:94:d5:3f:ef:
cf:37:f3:86:f7:e2:8e:0d:02:3f:29:9e:94:6c:99:
ec:2f:1d:dc:31:0f:6a:23:dd:90:06:f7:81:01:4f:
5f:21:fa:98:f1:cd:12:c7:65:5e:4e:35:d6:f3:8b:
a1:d5:58:db:ea:55:2f:de:91:6a:00:e8:34:e7:b7:
81:19:d9:c3:16:96:b3:95:c3:95:c3:4a:9a:19:89:
d0:70:45:34:53:5c:37:0a:14:65:84:cd:16:19:41:
8f:2e:f9:bb:22:2c:63:59:11:49:fd:f2:b9:08:b8:
27:8c:5f:83:47:87:13:39:39:13:82:7e:1b:bf:96:
48:37:ad:c5:80:38:55:3f:5b:21:1d:ed:b4:92:ed:
f6:39:be:c8:43:8c:88:8c:54:aa:06:e9:7a:65:6b:
c4:80:21:e2:12:39:1e:5e:63:fe:0a:63:85:e0:f6:
52:c1:d3:81:25:8d:fb:be:7e:62:76:bd:0e:2a:54:
90:91:85:7f:bf:61:9b:37:b6:bf:86:ea:ac:1b:1a:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:EC:54:F0:E2:1A:8C:B2:66:E7:93:06:F5:40:C7:4C:01:0F:51
X509v3 Authority Key Identifier:
keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:12:20:d7:62:5b:76:01:13:54:3a:81:c6:f8:71:8e:b3:
1a:cd:72:32:91:a4:28:5f:55:60:f8:5b:2b:24:b4:7f:7a:d0:
df:e1:52:b5:c6:58:51:99:63:b4:c9:45:87:ec:c5:60:03:86:
c9:51:fa:bf:cb:3d:ad:cb:0f:e3:8f:f8:8a:4e:95:58:06:4d:
89:10:d7:6b:97:91:11:75:c5:32:03:e3:7b:86:cb:a3:11:78:
15:20:63:58:56:06:82:5b:b3:2a:1f:3f:a9:43:77:23:40:96:
67:b7:b8:aa:1e:71:38:83:d1:2d:7c:ab:3e:54:96:7b:0e:86:
75:20:d0:c1:fb:d7:80:99:13:a0:40:fe:c7:2d:04:aa:fe:63:
d9:b4:ee:25:19:82:ab:15:fb:4b:d3:b4:ea:7a:0a:61:38:f8:
40:44:c6:d6:12:1c:a3:ee:75:78:eb:6e:b5:23:15:06:cd:9e:
0a:56:86:b8:60:1a:a0:9c:e2:d8:73:fb:9a:e1:be:57:97:bd:
13:ae:7e:ef:29:5c:10:d8:b7:a3:23:1e:12:09:1a:7e:9d:f8:
2f:7d:88:f4:1a:53:e3:79:ed:a6:e5:8e:26:cd:49:ee:25:95:
51:dc:59:e6:55:62:79:d6:dc:5a:67:6c:23:b3:93:b4:51:ff:
b8:d0:4d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5sEWPJI7/5qbSaZy4XfBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDY5ZGQ5ODMzMzU1ODQwMWVkZDFhNjAxNjgyNjVkZDFh
MGQ5NTgwHhcNMjYwNDE5MDQwMTQyWhcNMjYwNDIwMDQwMTQyWjAzMTEwLwYDVQQD
EyhmMGY2ZWM1NGYwZTIxYThjYjI2NmU3OTMwNmY1NDBjNzRjMDEwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmmOzCatlwf6XiuCEBwE1dEwsj+P
7ogdH/dHxQOCsAuzRwAkV/aybfh0BS+EJQP+GmCdTCPtq5TVP+/PN/OG9+KODQI/
KZ6UbJnsLx3cMQ9qI92QBveBAU9fIfqY8c0Sx2VeTjXW84uh1Vjb6lUv3pFqAOg0
57eBGdnDFpazlcOVw0qaGYnQcEU0U1w3ChRlhM0WGUGPLvm7IixjWRFJ/fK5CLgn
jF+DR4cTOTkTgn4bv5ZIN63FgDhVP1shHe20ku32Ob7IQ4yIjFSqBul6ZWvEgCHi
EjkeXmP+CmOF4PZSwdOBJY37vn5idr0OKlSQkYV/v2GbN7a/huqsGxqh+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD27FTw4hqMsmbnkwb1QMdMAQ9RMB8GA1UdIwQY
MBaAFHnWndmDM1WEAe3RpgFoJl3RoNlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYt
NGZkNmI3ZDc2YTJmLzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYtNGZkNmI3ZDc2YTJm
LzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXR8SINdi
W3YBE1Q6gcb4cY6zGs1yMpGkKF9VYPhbKyS0f3rQ3+FStcZYUZljtMlFh+zFYAOG
yVH6v8s9rcsP44/4ik6VWAZNiRDXa5eREXXFMgPje4bLoxF4FSBjWFYGgluzKh8/
qUN3I0CWZ7e4qh5xOIPRLXyrPlSWew6GdSDQwfvXgJkToED+xy0Eqv5j2bTuJRmC
qxX7S9O06noKYTj4QETG1hIco+51eOtutSMVBs2eClaGuGAaoJzi2HP7muG+V5e9
E65+7ylcENi3oyMeEgkafp34L32I9BpT43ntpuWOJs1J7iWVUdxZ5lViedbcWmds
I7OTtFH/uNBNJA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:17 2026 by rpki-client