Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: +mm+BxfhrjhDlobQgDDgYrHs5A2Fs+RnFYlJlIZLyNs=
Subject key identifier: 36:78:23:2F:D1:3E:81:E9:B7:4A:94:0A:59:3E:68:9B:98:CB:D2:C1
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019DB13424D5B88D212FD92B5E0A34C650E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 18EC
Signing time: Tue 21 Apr 2026 18:01:17 +0000
Manifest this update: Tue 21 Apr 2026 18:01:17 +0000
Manifest next update: Wed 22 Apr 2026 18:01:17 +0000
Files and hashes: 1: EScHO_hZczomCnoprBz9oYDooAM.roa (hash: 4MTuC1uLMwXcp3WrNDw8r2lfD4JCPG95ZOo//y7/h8o=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: lme0N2kloJkZdUUlLi2dKjZkXyzyu92pzDvfhdjY0WE=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: hzpr_u9unsG0Rewb6bfBUcdWDgs.roa (hash: WPtNLpfSEpgZKPMkhjXJCGT0MeFGLs8w0HKZG2+CsUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:34:24:d5:b8:8d:21:2f:d9:2b:5e:0a:34:c6:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Apr 21 18:01:17 2026 GMT
Not After : Apr 22 18:01:17 2026 GMT
Subject: CN=3678232fd13e81e9b74a940a593e689b98cbd2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:db:87:64:4b:40:ca:d0:41:e6:22:75:1c:
30:ed:d1:38:b9:e8:39:88:50:2b:02:83:a9:1e:93:
cc:b4:0c:e0:b6:d0:97:fe:3c:32:9a:5a:1c:06:0a:
78:78:42:9b:90:71:51:e0:2e:f5:e2:b3:e7:90:22:
f4:da:2f:c5:9c:69:d4:dd:7c:d0:e8:1e:01:75:05:
91:05:c7:5e:f4:82:c4:18:30:1f:cd:9d:f0:17:84:
ad:8e:00:db:1c:37:25:17:91:2f:33:00:b6:e5:1e:
58:96:29:bb:b3:a0:c4:79:7b:6b:15:4e:82:f6:e3:
40:c6:06:b1:30:53:ff:fd:01:bf:60:e9:5e:12:65:
db:9c:61:ee:a3:3f:14:63:2a:9d:2d:f1:d4:6a:08:
69:4b:f0:7e:43:e7:9d:d8:d6:f2:fe:08:4e:1a:fc:
17:d8:fa:51:a2:21:6b:30:9f:4f:41:f9:3d:62:df:
7a:f6:b2:67:86:ff:a5:6f:1f:17:65:3d:f5:26:be:
ca:f1:18:e0:02:c2:96:f1:fd:fe:3c:f5:09:3a:94:
a9:a4:4d:05:a6:74:c5:f2:d0:39:bf:f9:44:5c:34:
3e:1f:d2:74:b8:4a:13:ef:f7:87:7f:a7:81:42:d5:
26:cc:96:ee:e8:2b:c8:e0:c3:92:d7:6f:c9:28:71:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:23:2F:D1:3E:81:E9:B7:4A:94:0A:59:3E:68:9B:98:CB:D2:C1
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:05:dc:98:33:42:bf:94:9a:8d:28:4d:00:ff:2d:c7:2b:63:
c2:87:4d:63:5a:0f:f6:1d:39:45:60:4c:7f:95:a2:07:cd:88:
33:7d:32:ac:ae:28:fc:20:a3:0c:dc:81:3a:8a:89:6c:77:f0:
c0:aa:79:82:4a:98:ce:61:83:37:ed:88:f2:7b:66:79:58:82:
2a:19:71:7d:64:ed:f4:09:69:47:ba:42:88:8a:50:31:1b:7f:
fd:ca:0f:7a:35:3c:6c:00:c5:43:f5:ad:fa:3b:b3:10:fe:d4:
be:e7:ce:49:b0:f0:68:b8:48:fc:85:78:bf:e6:da:49:dd:90:
54:7b:37:61:e2:06:1b:51:af:92:5c:87:67:1c:a2:cc:35:06:
67:cf:a7:ca:29:69:15:4f:b4:9f:fc:48:95:eb:36:a6:4c:d2:
49:e1:12:e5:7b:98:b6:df:e5:70:e8:85:47:26:5b:a7:38:7c:
37:00:4c:b6:4d:d4:4a:07:6a:55:97:d9:94:39:8f:d8:f4:a5:
f7:54:f5:2e:1d:03:ca:0f:e5:01:94:86:16:27:20:f8:d9:79:
5a:43:8f:f7:18:63:79:bc:5c:ef:cb:9b:3d:a1:86:62:e5:2b:
b4:d4:1c:c5:3b:d1:6d:14:31:e0:81:3d:43:35:53:9a:e2:ad:
5e:6c:a8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xNCTVuI0hL9krXgo0xlDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm
NTg2YzcwHhcNMjYwNDIxMTgwMTE3WhcNMjYwNDIyMTgwMTE3WjAzMTEwLwYDVQQD
EygzNjc4MjMyZmQxM2U4MWU5Yjc0YTk0MGE1OTNlNjg5Yjk4Y2JkMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Lbh2RLQMrQQeYidRww7dE4ueg5
iFArAoOpHpPMtAzgttCX/jwymlocBgp4eEKbkHFR4C714rPnkCL02i/FnGnU3XzQ
6B4BdQWRBcde9ILEGDAfzZ3wF4StjgDbHDclF5EvMwC25R5Ylim7s6DEeXtrFU6C
9uNAxgaxMFP//QG/YOleEmXbnGHuoz8UYyqdLfHUaghpS/B+Q+ed2Nby/ghOGvwX
2PpRoiFrMJ9PQfk9Yt969rJnhv+lbx8XZT31Jr7K8RjgAsKW8f3+PPUJOpSppE0F
pnTF8tA5v/lEXDQ+H9J0uEoT7/eHf6eBQtUmzJbu6CvI4MOS12/JKHF49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ4Iy/RPoHpt0qUClk+aJuYy9LBMB8GA1UdIwQY
MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt
ZjYyZjM1YWY0MzcxLzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx
LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAXcmDNC
v5SajShNAP8txytjwodNY1oP9h05RWBMf5WiB82IM30yrK4o/CCjDNyBOoqJbHfw
wKp5gkqYzmGDN+2I8ntmeViCKhlxfWTt9AlpR7pCiIpQMRt//coPejU8bADFQ/Wt
+juzEP7UvufOSbDwaLhI/IV4v+baSd2QVHs3YeIGG1GvklyHZxyizDUGZ8+nyilp
FU+0n/xIles2pkzSSeES5XuYtt/lcOiFRyZbpzh8NwBMtk3USgdqVZfZlDmP2PSl
91T1Lh0Dyg/lAZSGFicg+Nl5WkOP9xhjebxc78ubPaGGYuUrtNQcxTvRbRQx4IE9
QzVTmuKtXmyoMA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:25:31 2026 by rpki-client