Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: Rexg1i7bXAOjsaCNMJux4SJQITzHqTROO8TLHg3aZT4=
Subject key identifier: 8D:ED:4D:9C:46:D5:9F:EE:EB:C3:3A:AA:33:D2:8E:D1:38:9C:74:94
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 019DD1D22F8CAA041D0F50D882B32BEE1974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 18E0
Signing time: Tue 28 Apr 2026 02:01:45 +0000
Manifest this update: Tue 28 Apr 2026 02:01:45 +0000
Manifest next update: Wed 29 Apr 2026 02:01:45 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: cp0Q5GncyrTYbBL21xI5NsdfiPrfigBfZB7T8C41QJQ=)
2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=)
3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:2f:8c:aa:04:1d:0f:50:d8:82:b3:2b:ee:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Apr 28 02:01:45 2026 GMT
Not After : Apr 29 02:01:45 2026 GMT
Subject: CN=8ded4d9c46d59feeebc33aaa33d28ed1389c7494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:24:d7:ec:6f:6e:aa:31:9f:62:25:fc:b5:
37:57:d4:1b:e1:64:77:8a:2f:36:2f:22:ef:95:74:
9f:04:ae:81:1a:a2:86:71:91:0a:c4:5c:ac:1e:62:
d1:8d:58:7f:3d:18:a0:92:59:7d:9c:fb:ad:49:a7:
81:b2:57:2d:8a:c9:5b:e6:87:e5:47:d5:7d:80:cc:
87:5b:ff:d6:cc:ec:79:71:72:a7:b5:b7:74:80:38:
f8:03:2b:30:0a:cb:ff:c9:58:1d:57:d7:e7:ab:14:
54:df:d2:3b:4a:ec:33:4b:24:e6:dd:87:9a:58:fc:
21:d0:6b:61:35:b6:76:2f:2e:56:f2:19:c9:cd:37:
8d:92:18:66:4f:cb:36:b3:90:a0:7d:b7:c9:c3:82:
47:87:09:a1:44:57:a6:cd:cd:65:b2:3d:46:3b:57:
27:51:96:00:38:33:2a:11:ba:32:19:4d:b7:88:62:
52:8e:de:21:19:a1:c3:70:99:f5:f7:69:b2:ed:e0:
b8:dc:9a:53:6f:ed:94:a1:09:d7:f2:3c:23:3d:96:
25:c0:92:26:ab:c0:96:99:97:af:7e:c7:90:72:8d:
f0:48:c1:21:15:f2:f8:17:42:1c:6a:e6:23:ef:c5:
5b:15:35:81:9a:70:39:51:90:f0:24:27:e5:db:ed:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:4D:9C:46:D5:9F:EE:EB:C3:3A:AA:33:D2:8E:D1:38:9C:74:94
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d9:25:19:71:f6:94:fd:ea:68:ab:63:55:2b:83:51:55:d4:
7b:99:ca:db:5b:14:94:dd:4d:f3:62:a8:dd:61:4d:98:88:c9:
42:4a:7f:e5:d0:6a:a5:25:aa:2a:49:bb:09:e0:09:93:47:62:
ba:69:40:71:2f:74:17:e7:df:0e:44:8d:6e:84:a3:d1:c7:20:
a3:ff:3d:6d:68:b7:43:00:4e:e7:ff:ab:01:c5:60:ea:1e:13:
5e:04:0c:c6:0a:0d:30:af:cd:9d:13:3e:50:8b:c2:7e:47:57:
21:08:1a:32:55:71:df:21:ac:02:96:2b:83:e0:69:03:a5:bd:
46:14:ca:03:10:2c:67:15:7b:e7:8f:44:2c:bc:d1:fc:bd:18:
e9:fd:06:9e:ea:be:07:1a:e3:1b:a4:92:6d:92:56:c1:50:50:
58:a0:25:9e:db:c7:69:68:88:3e:c6:54:f0:92:05:fc:16:5a:
a3:1f:0a:0f:c7:57:00:a4:b5:07:3c:1f:10:d7:90:e4:2b:80:
83:35:c4:9c:da:d3:c9:95:44:1d:88:14:28:c2:1d:20:bc:79:
11:0e:37:be:f1:8f:bb:03:51:09:e4:48:7d:85:5e:c1:be:be:
67:c9:31:42:ef:c0:d7:e5:68:3c:82:4d:c0:71:5b:4e:aa:24:
b6:4c:a3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3R0i+MqgQdD1DYgrMr7hl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4
OTAxNzAwHhcNMjYwNDI4MDIwMTQ1WhcNMjYwNDI5MDIwMTQ1WjAzMTEwLwYDVQQD
Eyg4ZGVkNGQ5YzQ2ZDU5ZmVlZWJjMzNhYWEzM2QyOGVkMTM4OWM3NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj54k1+xvbqoxn2Il/LU3V9Qb4WR3
ii82LyLvlXSfBK6BGqKGcZEKxFysHmLRjVh/PRigkll9nPutSaeBslctislb5ofl
R9V9gMyHW//WzOx5cXKntbd0gDj4AyswCsv/yVgdV9fnqxRU39I7SuwzSyTm3Yea
WPwh0GthNbZ2Ly5W8hnJzTeNkhhmT8s2s5CgfbfJw4JHhwmhRFemzc1lsj1GO1cn
UZYAODMqEboyGU23iGJSjt4hGaHDcJn192my7eC43JpTb+2UoQnX8jwjPZYlwJIm
q8CWmZevfseQco3wSMEhFfL4F0IcauYj78VbFTWBmnA5UZDwJCfl2+3BKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3tTZxG1Z/u68M6qjPSjtE4nHSUMB8GA1UdIwQY
MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt
NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy
LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNklGXH2
lP3qaKtjVSuDUVXUe5nK21sUlN1N82Ko3WFNmIjJQkp/5dBqpSWqKkm7CeAJk0di
umlAcS90F+ffDkSNboSj0ccgo/89bWi3QwBO5/+rAcVg6h4TXgQMxgoNMK/NnRM+
UIvCfkdXIQgaMlVx3yGsApYrg+BpA6W9RhTKAxAsZxV7549ELLzR/L0Y6f0Gnuq+
BxrjG6SSbZJWwVBQWKAlntvHaWiIPsZU8JIF/BZaox8KD8dXAKS1BzwfENeQ5CuA
gzXEnNrTyZVEHYgUKMIdILx5EQ43vvGPuwNRCeRIfYVewb6+Z8kxQu/A1+VoPIJN
wHFbTqoktkyjHQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 09:53:52 2026 by rpki-client