Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: xcCVWNkn+hl2Rw3ya/g8A2MEuY3iklvVOZM7gKZpJy4=
Subject key identifier: DA:F9:72:86:38:15:20:30:6E:2B:F1:E3:B2:4C:CE:93:F5:CC:28:F6
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019DCDBDB4C9AA6728F4C6DAB02745A2989B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 07:00:54 +0000
Manifest this update: Mon 27 Apr 2026 07:00:54 +0000
Manifest next update: Tue 28 Apr 2026 07:00:54 +0000
Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: Q8d4HtLmlhtNFXukIQYT1fUyly4KPi1Pb4NvkNinXrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:b4:c9:aa:67:28:f4:c6:da:b0:27:45:a2:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Apr 27 07:00:54 2026 GMT
Not After : Apr 28 07:00:54 2026 GMT
Subject: CN=daf97286381520306e2bf1e3b24cce93f5cc28f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:f8:71:0c:5f:45:77:36:e4:af:cf:ea:91:
44:10:86:04:d5:d6:3e:dd:af:48:c4:ec:30:33:0d:
18:bc:c6:f1:e8:ff:b6:78:2f:34:2a:11:4b:26:15:
47:3f:66:20:df:7f:ef:d8:ee:5b:84:34:e4:f9:8f:
24:81:ee:d0:98:e1:31:e2:fb:30:1e:99:07:18:1f:
74:d2:87:f0:1b:dc:93:7e:72:54:42:34:41:ce:84:
ab:33:3a:9d:75:fc:e6:bf:99:b6:80:4f:81:c2:17:
93:92:89:f4:04:77:f2:05:3e:49:a1:0f:91:62:de:
8c:3b:22:04:b6:6a:ee:9f:19:ab:f4:f4:00:f9:55:
4a:00:74:2f:5f:71:14:60:c2:c3:ab:70:5e:85:4d:
41:84:d9:0b:9d:27:f0:5f:07:f0:10:95:51:44:0a:
62:e2:6d:3d:c5:be:85:4a:11:15:6b:5d:fa:0e:7c:
5c:10:25:1e:3f:ac:88:d6:c7:78:9f:15:6e:c1:e4:
fd:54:17:cb:ac:b9:ab:e9:d2:d5:f5:ba:0d:00:b9:
37:9d:c8:18:2c:48:a0:1c:fa:68:2e:2e:78:ec:c5:
3d:fd:c6:fa:5b:7f:8c:1e:d2:4d:ac:e7:7c:0d:f1:
2c:3f:50:45:2a:e3:dc:70:a9:f6:c6:67:d2:ba:dd:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:72:86:38:15:20:30:6E:2B:F1:E3:B2:4C:CE:93:F5:CC:28:F6
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1c:49:30:2f:16:b1:1d:3b:d3:48:7c:d1:01:b3:ac:e0:47:
4f:88:b7:f9:59:36:b1:ae:03:96:51:ee:42:30:5b:9b:b1:af:
c1:18:09:32:46:b3:69:a8:c4:16:d3:cc:8e:a8:16:16:52:a9:
ec:96:32:59:fa:bb:0e:a6:88:5e:29:64:bd:55:98:43:c7:95:
78:35:46:7f:ec:41:54:f0:9b:18:ac:8b:f4:d1:8c:8e:50:a2:
1a:c2:18:ac:7e:6c:0e:96:42:4f:7d:cf:85:c7:4c:e6:bf:2b:
ac:6e:2d:3b:67:79:f0:91:3c:88:0a:f9:50:8e:6d:17:fd:96:
2b:38:0f:9e:5c:d4:b9:01:2d:ce:c6:d5:6e:86:d3:c0:18:8b:
03:90:37:86:17:e8:b6:af:c8:f1:56:bc:b2:66:9c:2f:e5:8d:
44:ab:cb:d9:0d:c4:3e:66:38:63:0f:67:c4:58:61:f6:9d:00:
f5:c5:b5:8a:35:87:ce:5b:7f:c1:bb:5b:53:bd:20:22:82:05:
db:7a:ea:ef:50:2d:84:d5:8f:91:e3:c7:e9:10:cd:a7:ca:e3:
95:77:f9:2e:42:87:67:7d:44:0e:d5:d5:e2:42:c2:47:38:6e:
16:f7:41:02:33:77:0c:1e:25:fb:fe:54:b2:e4:15:a6:06:b4:
10:7f:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:13 2026 by rpki-client