Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: pLVIl/MnL7FYg/vpL2MsZ9q2Kh+2alOBr1RMCiPws+8=
Subject key identifier: 97:80:85:11:E1:C0:2F:CD:DC:B1:EC:28:06:36:7F:7A:60:F3:FB:36
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 019DAD1FC31E592E3852F141D1147D280995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 18CF
Signing time: Mon 20 Apr 2026 23:00:33 +0000
Manifest this update: Mon 20 Apr 2026 23:00:33 +0000
Manifest next update: Tue 21 Apr 2026 23:00:33 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: sNDxkyMJgUpodogvvnwlN18zQXN5SK3JBJST1gJycWI=)
2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=)
3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=)
4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:1f:c3:1e:59:2e:38:52:f1:41:d1:14:7d:28:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Apr 20 23:00:33 2026 GMT
Not After : Apr 21 23:00:33 2026 GMT
Subject: CN=97808511e1c02fcddcb1ec2806367f7a60f3fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:74:b1:1f:08:24:33:13:ed:a2:b9:9e:dc:
fb:3f:24:90:68:fe:58:8e:f4:b3:d9:73:df:69:8e:
40:f0:f1:b2:40:b3:48:31:0d:95:38:e1:35:e9:37:
ba:62:34:5a:2f:c9:17:0b:40:61:d4:f3:99:99:db:
f4:fb:df:d8:14:19:89:c3:46:f5:a4:7c:9b:6f:83:
37:a3:16:49:e4:4d:02:13:e1:87:b9:a2:6f:15:38:
05:ca:d9:5a:91:b5:20:be:b4:f6:3a:75:a9:82:f7:
89:20:b8:c1:23:41:86:9c:1a:b9:85:af:83:cd:15:
14:35:8d:2d:a1:7e:9e:92:d5:49:92:78:d7:98:94:
e8:a9:61:34:e0:ac:99:4a:fd:df:e7:3d:1a:84:74:
b8:bb:95:b8:8c:a9:d5:6b:b7:b7:23:12:e2:5c:6b:
c6:a9:96:bb:9a:27:11:c1:60:f2:37:c2:a8:f9:ec:
02:a3:03:cc:78:fd:fd:de:27:9f:5c:ef:e7:87:d8:
bd:9a:b6:a8:6b:f0:5d:98:dc:be:e5:8d:fa:21:99:
7e:7b:10:23:f9:f6:0d:09:29:5d:67:33:a2:f2:cd:
3f:c6:c5:2c:d1:30:7a:cb:4f:29:d0:8c:09:15:d3:
58:bb:32:a9:5e:d9:0f:78:01:57:cb:37:6d:a9:fe:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:80:85:11:E1:C0:2F:CD:DC:B1:EC:28:06:36:7F:7A:60:F3:FB:36
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:a2:fe:48:90:d4:48:c2:a0:9b:5e:03:7b:e9:5c:7d:17:
58:26:9c:78:00:18:36:6f:a9:82:e3:a4:b5:2c:cb:28:42:af:
33:40:77:3d:e3:85:ce:9e:a2:ff:c2:36:51:13:9d:f7:db:da:
ed:b7:f7:b0:77:fc:b4:bb:d2:28:5a:09:54:30:8e:17:b4:86:
7b:56:5f:64:5e:a6:07:a6:ab:aa:6c:d9:e1:5e:f1:a6:e2:a6:
4b:16:38:b5:63:5e:f3:b9:c2:99:8e:2f:f9:f9:95:ed:89:a2:
d9:0b:df:2f:9a:e6:a5:a6:60:22:1d:36:24:51:eb:26:29:48:
22:78:f7:ae:02:ed:63:2f:56:cc:68:9d:8e:26:ef:72:3c:95:
0a:a7:1e:e9:a8:64:4c:37:59:24:e1:e0:38:0e:7c:29:a6:30:
e3:fa:26:dc:67:55:62:97:ee:61:f4:02:b9:44:55:ba:ef:f7:
7e:62:da:44:5b:1a:b5:b8:88:d4:da:77:fe:8b:c0:d9:08:8f:
f8:e5:66:37:0d:89:d8:3c:48:51:a8:36:7a:35:f6:18:e7:f4:
4b:7b:d9:09:92:22:8f:17:ee:62:5f:18:6a:a1:8a:6b:c9:c7:
e0:39:9f:39:c0:8f:67:45:a9:fc:26:be:d4:e6:b7:c0:dc:38:
90:1b:f2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2tH8MeWS44UvFB0RR9KAmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4
MDhiYTAwHhcNMjYwNDIwMjMwMDMzWhcNMjYwNDIxMjMwMDMzWjAzMTEwLwYDVQQD
Eyg5NzgwODUxMWUxYzAyZmNkZGNiMWVjMjgwNjM2N2Y3YTYwZjNmYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaN0sR8IJDMT7aK5ntz7PySQaP5Y
jvSz2XPfaY5A8PGyQLNIMQ2VOOE16Te6YjRaL8kXC0Bh1POZmdv0+9/YFBmJw0b1
pHybb4M3oxZJ5E0CE+GHuaJvFTgFytlakbUgvrT2OnWpgveJILjBI0GGnBq5ha+D
zRUUNY0toX6ektVJknjXmJToqWE04KyZSv3f5z0ahHS4u5W4jKnVa7e3IxLiXGvG
qZa7micRwWDyN8Ko+ewCowPMeP393iefXO/nh9i9mraoa/BdmNy+5Y36IZl+exAj
+fYNCSldZzOi8s0/xsUs0TB6y08p0IwJFdNYuzKpXtkPeAFXyzdtqf5zAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeAhRHhwC/N3LHsKAY2f3pg8/s2MB8GA1UdIwQY
MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt
MjQxZWFiNjE0ODNmLzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm
LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFSi/kiQ
1EjCoJteA3vpXH0XWCaceAAYNm+pguOktSzLKEKvM0B3PeOFzp6i/8I2UROd99va
7bf3sHf8tLvSKFoJVDCOF7SGe1ZfZF6mB6arqmzZ4V7xpuKmSxY4tWNe87nCmY4v
+fmV7Ymi2QvfL5rmpaZgIh02JFHrJilIInj3rgLtYy9WzGidjibvcjyVCqce6ahk
TDdZJOHgOA58KaYw4/om3GdVYpfuYfQCuURVuu/3fmLaRFsatbiI1Np3/ovA2QiP
+OVmNw2J2DxIUag2ejX2GOf0S3vZCZIijxfuYl8YaqGKa8nH4DmfOcCPZ0Wp/Ca+
1Oa3wNw4kBvyhg==
-----END CERTIFICATE-----
Generated at Tue Apr 21 08:30:33 2026 by rpki-client