Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: L6qrlGX92mN+OzQfLZl4yttY0Ir/UXKQYRLc8gK4jNo=
Subject key identifier: 57:34:E0:8D:49:0E:AE:B4:2E:C4:E8:2E:C6:7C:B8:49:5E:41:6F:84
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019DCED09219D5909B0BC738D606187C066A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 12:01:08 +0000
Manifest this update: Mon 27 Apr 2026 12:01:08 +0000
Manifest next update: Tue 28 Apr 2026 12:01:08 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: gyqctcZf7Fr64wTOxXR0WU9EhwhhwQIM6DWZALEvMfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:92:19:d5:90:9b:0b:c7:38:d6:06:18:7c:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Apr 27 12:01:08 2026 GMT
Not After : Apr 28 12:01:08 2026 GMT
Subject: CN=5734e08d490eaeb42ec4e82ec67cb8495e416f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:17:2b:0b:e7:40:44:56:1b:75:26:6e:1f:
7c:95:c8:60:5a:7d:33:ca:fe:a6:ad:7b:21:6c:d7:
6d:70:86:ba:20:e8:3e:36:8a:9e:db:dc:7a:29:2d:
b8:12:6b:04:06:89:87:ea:33:99:9f:91:0f:4b:9e:
21:97:44:cc:b6:50:66:ec:05:4e:6e:88:0b:af:c2:
83:4b:bb:02:b2:6a:78:57:ce:ea:d2:14:77:bd:b8:
42:e6:d4:71:9b:a7:46:72:a7:44:19:5e:e2:bc:7b:
20:03:7b:a5:03:3f:60:08:97:6a:cf:8f:14:68:30:
67:ea:b0:56:7b:26:0c:63:c3:f2:53:3c:a3:4f:45:
12:9b:ca:20:10:2f:6c:85:65:ba:fb:d5:a9:e9:d5:
d5:49:1a:59:99:92:45:a4:d9:3b:03:5b:fd:7f:f6:
a7:42:74:cd:b2:56:06:d6:c6:fb:c0:48:2d:67:f0:
d5:f3:69:eb:25:b5:8b:cc:87:6e:5e:9b:18:dd:92:
43:41:c9:23:26:6f:40:54:97:b8:16:22:b3:9b:1c:
38:ee:16:41:56:02:b0:49:34:74:33:de:45:a0:6c:
fb:73:1c:2b:3b:5b:bc:af:df:4e:5d:6e:cb:4f:3b:
93:c3:59:e2:fd:12:0e:2e:f4:a9:68:d2:86:be:5d:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:E0:8D:49:0E:AE:B4:2E:C4:E8:2E:C6:7C:B8:49:5E:41:6F:84
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:75:a2:93:35:8c:1f:19:1c:ab:e7:a4:8f:d0:0a:af:d6:0d:
84:bf:57:19:b5:9a:d9:7c:1e:67:6d:60:8d:aa:9d:d0:cf:ec:
ac:bb:76:15:53:54:7f:84:d5:76:a2:36:1b:00:a7:b3:a3:26:
af:ba:fe:7e:b8:fe:6e:61:c3:e1:bd:90:a7:e4:b8:0c:5f:52:
f4:90:81:44:9d:3f:80:9f:c0:79:63:50:f8:a5:f8:18:36:ad:
98:12:9f:98:07:bc:87:dd:bd:53:60:bf:ff:10:8c:38:74:ac:
64:48:4c:82:3c:61:03:50:f3:3f:d4:53:e2:ef:f4:e3:ba:df:
a6:c7:45:a5:1f:f2:e4:f6:55:c2:73:68:56:0f:60:0e:12:73:
6d:25:0e:48:a5:30:5d:8a:ea:a9:1a:a3:d1:90:fa:a5:72:a1:
34:07:0b:26:85:e8:57:c9:6c:9f:59:76:9c:2e:28:1e:2c:97:
5b:e4:fd:08:3a:0f:a2:9b:53:e8:10:b4:4b:4a:fb:58:43:bb:
9b:ba:3b:2f:ba:d1:2a:91:98:e3:69:ed:ba:5b:82:d0:8c:e4:
9d:b4:4f:e0:48:4d:e6:25:f8:c6:b1:55:fe:9d:86:45:7c:50:
61:42:64:31:82:6a:3b:cd:a8:c5:f3:4a:1c:4e:f9:cf:aa:d3:
5b:f9:f3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0JIZ1ZCbC8c41gYYfAZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjYwNDI3MTIwMTA4WhcNMjYwNDI4MTIwMTA4WjAzMTEwLwYDVQQD
Eyg1NzM0ZTA4ZDQ5MGVhZWI0MmVjNGU4MmVjNjdjYjg0OTVlNDE2Zjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUQXKwvnQERWG3Umbh98lchgWn0z
yv6mrXshbNdtcIa6IOg+Noqe29x6KS24EmsEBomH6jOZn5EPS54hl0TMtlBm7AVO
bogLr8KDS7sCsmp4V87q0hR3vbhC5tRxm6dGcqdEGV7ivHsgA3ulAz9gCJdqz48U
aDBn6rBWeyYMY8PyUzyjT0USm8ogEC9shWW6+9Wp6dXVSRpZmZJFpNk7A1v9f/an
QnTNslYG1sb7wEgtZ/DV82nrJbWLzIduXpsY3ZJDQckjJm9AVJe4FiKzmxw47hZB
VgKwSTR0M95FoGz7cxwrO1u8r99OXW7LTzuTw1ni/RIOLvSpaNKGvl1bVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc04I1JDq60LsToLsZ8uEleQW+EMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXWikzWM
Hxkcq+ekj9AKr9YNhL9XGbWa2XweZ21gjaqd0M/srLt2FVNUf4TVdqI2GwCns6Mm
r7r+frj+bmHD4b2Qp+S4DF9S9JCBRJ0/gJ/AeWNQ+KX4GDatmBKfmAe8h929U2C/
/xCMOHSsZEhMgjxhA1DzP9RT4u/047rfpsdFpR/y5PZVwnNoVg9gDhJzbSUOSKUw
XYrqqRqj0ZD6pXKhNAcLJoXoV8lsn1l2nC4oHiyXW+T9CDoPoptT6BC0S0r7WEO7
m7o7L7rRKpGY42ntuluC0IzknbRP4EhN5iX4xrFV/p2GRXxQYUJkMYJqO82oxfNK
HE75z6rTW/nz6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:07 2026 by rpki-client