Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: z1TQZzKguLAETPPP69V66eSSCWd3oyalvxcpggnYaio=
Subject key identifier: BE:56:12:FD:15:87:34:B1:93:04:27:21:EE:9A:56:5D:5A:08:81:8A
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 019DA90C3167177C9CEA9DF9511E1E8E1BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 18CB
Signing time: Mon 20 Apr 2026 04:00:41 +0000
Manifest this update: Mon 20 Apr 2026 04:00:41 +0000
Manifest next update: Tue 21 Apr 2026 04:00:41 +0000
Files and hashes: 1: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: J3gBevEnhwKpXPbWkMFVfGTyhL2MZwVBIHg2ymG+Y58=)
2: dkLJNc8YE1qupqt8vejn4yN_8pU.roa (hash: 9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=)
3: fvrmT3BDya5vUxums74XuzYqty0.roa (hash: q+hIuLuMabVUkBWiWW3pA8MFsL2LuFbfABq1AZhRA2Q=)
4: j4On1jEgDqGHCrQyanmlHTLIPfU.roa (hash: FBZAhcfJ9YrnvMKAbA0ULbxZIF42C1VrsQa2aWPitG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:31:67:17:7c:9c:ea:9d:f9:51:1e:1e:8e:1b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Apr 20 04:00:41 2026 GMT
Not After : Apr 21 04:00:41 2026 GMT
Subject: CN=be5612fd158734b193042721ee9a565d5a08818a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:b6:9a:a9:40:47:8b:04:52:5a:5c:6e:b1:
30:1e:93:fb:be:0f:a3:76:2d:41:de:be:5f:be:34:
10:15:03:f5:39:6d:c6:9e:41:05:4e:69:63:81:cc:
24:c2:80:17:54:b3:77:f6:f2:90:cf:5d:f2:cf:09:
2c:ec:f1:b9:45:96:83:75:54:41:f3:5f:0d:ad:5a:
88:2f:6a:25:5b:34:89:3f:69:3c:7c:89:82:c0:27:
0c:22:d1:4c:91:a1:c8:a8:31:f9:41:ce:43:19:aa:
59:ae:7b:19:1c:7d:c3:3a:4b:ae:a6:0b:2a:a5:72:
65:00:fc:14:8b:17:f5:24:6c:99:87:a2:3b:26:b9:
bb:36:33:92:17:fa:7e:8e:f8:65:32:dc:0c:ab:5a:
4a:05:68:d6:29:c1:44:75:29:1b:14:ff:2a:77:43:
83:6f:f3:58:d1:24:4c:18:d2:0e:32:dc:0f:bc:2b:
58:bd:24:cc:93:b9:cd:d4:37:09:81:64:92:5c:96:
7d:b8:67:fd:b0:bf:64:c6:10:1c:92:97:77:66:c8:
92:52:1d:13:0f:57:52:09:fe:8d:21:73:34:1c:bf:
40:a9:6f:2a:0c:94:01:f9:64:cf:14:fc:76:68:ff:
1a:aa:e0:ac:09:bc:91:3a:db:6e:89:cc:42:89:f2:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:12:FD:15:87:34:B1:93:04:27:21:EE:9A:56:5D:5A:08:81:8A
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:3e:81:70:4c:60:bc:5f:37:6f:d9:ab:e1:9a:af:12:2d:
c4:b8:8f:0d:88:f2:1d:45:76:b7:1f:ae:49:8b:77:d9:74:5c:
9c:c8:d0:61:be:59:10:a4:4b:83:68:5e:46:d4:d0:46:de:31:
6c:01:38:a8:bc:37:22:50:10:ef:52:9c:ac:7a:34:f8:29:3e:
26:d1:10:17:6b:5d:84:bb:a2:28:9e:25:6f:38:25:d6:0f:f3:
ab:24:9c:1d:c0:5d:19:7f:88:3b:cd:b3:45:54:61:7d:1f:8a:
7b:d4:98:7c:1e:08:6e:4b:a4:2e:af:0c:0d:bd:13:d8:df:dd:
f1:b5:a6:9e:91:31:aa:a6:bd:f9:76:f4:c0:4c:ac:8b:67:a6:
52:af:77:f3:8b:cd:bc:99:fe:e9:8a:32:75:70:a5:b7:30:ef:
c1:5c:2f:23:6f:17:c0:17:16:43:ad:60:4c:a5:b9:88:55:33:
5f:67:79:d6:cc:6e:44:07:da:88:98:3e:8c:03:33:31:66:4f:
1d:dd:60:53:9e:4b:7c:0d:12:d1:b2:ca:25:9b:bf:06:1d:64:
5f:5a:47:46:3b:84:95:a7:5e:60:ad:45:3e:07:e4:a7:7b:33:
99:ba:d3:99:b0:1f:6a:a8:67:24:c8:98:1a:ef:38:78:50:f4:
05:67:02:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2pDDFnF3yc6p35UR4ejhvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy
NmI5NmQwHhcNMjYwNDIwMDQwMDQxWhcNMjYwNDIxMDQwMDQxWjAzMTEwLwYDVQQD
EyhiZTU2MTJmZDE1ODczNGIxOTMwNDI3MjFlZTlhNTY1ZDVhMDg4MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWC2mqlAR4sEUlpcbrEwHpP7vg+j
di1B3r5fvjQQFQP1OW3GnkEFTmljgcwkwoAXVLN39vKQz13yzwks7PG5RZaDdVRB
818NrVqIL2olWzSJP2k8fImCwCcMItFMkaHIqDH5Qc5DGapZrnsZHH3DOkuupgsq
pXJlAPwUixf1JGyZh6I7Jrm7NjOSF/p+jvhlMtwMq1pKBWjWKcFEdSkbFP8qd0OD
b/NY0SRMGNIOMtwPvCtYvSTMk7nN1DcJgWSSXJZ9uGf9sL9kxhAckpd3ZsiSUh0T
D1dSCf6NIXM0HL9AqW8qDJQB+WTPFPx2aP8aquCsCbyROttuicxCifLghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5WEv0VhzSxkwQnIe6aVl1aCIGKMB8GA1UdIwQY
MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt
ZmY5NjkyOGE2ZGY0LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0
LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF0+gXBM
YLxfN2/Zq+GarxItxLiPDYjyHUV2tx+uSYt32XRcnMjQYb5ZEKRLg2heRtTQRt4x
bAE4qLw3IlAQ71KcrHo0+Ck+JtEQF2tdhLuiKJ4lbzgl1g/zqyScHcBdGX+IO82z
RVRhfR+Ke9SYfB4IbkukLq8MDb0T2N/d8bWmnpExqqa9+Xb0wEysi2emUq9384vN
vJn+6YoydXCltzDvwVwvI28XwBcWQ61gTKW5iFUzX2d51sxuRAfaiJg+jAMzMWZP
Hd1gU55LfA0S0bLKJZu/Bh1kX1pHRjuEladeYK1FPgfkp3szmbrTmbAfaqhnJMiY
Gu84eFD0BWcCZA==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:27:19 2026 by rpki-client