Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: nYnoO39VWhdpKYiqeQPl84vigsSry06PEiDXziCMl38=
Subject key identifier: 5C:88:F1:4D:32:FF:E1:3D:DC:C2:02:E9:13:6A:E9:FB:3B:F4:4B:D3
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019DD49C5A96BFE1308899C6573E054247EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 18EB
Signing time: Tue 28 Apr 2026 15:01:49 +0000
Manifest this update: Tue 28 Apr 2026 15:01:49 +0000
Manifest next update: Wed 29 Apr 2026 15:01:49 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: f4uUlzM8VkUel9mHRKC1TpGNSVsgXFqkS0K8FAVYRoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9c:5a:96:bf:e1:30:88:99:c6:57:3e:05:42:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Apr 28 15:01:49 2026 GMT
Not After : Apr 29 15:01:49 2026 GMT
Subject: CN=5c88f14d32ffe13ddcc202e9136ae9fb3bf44bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:02:cd:f4:17:59:f7:45:6d:ce:3a:86:ba:
21:c0:5c:fb:2f:a9:28:3c:56:56:79:3f:c8:cd:ac:
b6:49:a7:47:cb:89:04:a7:a5:35:08:45:25:4c:4f:
82:f1:84:95:c4:1e:4b:97:f1:4f:13:6e:18:e8:83:
21:69:f3:5d:85:c6:a2:cd:a1:5d:49:2e:f3:45:1d:
ef:8a:1e:04:15:e1:02:9f:b5:43:69:73:f6:3f:f8:
7b:19:b4:c0:c6:1c:95:12:00:63:9a:5c:35:7c:68:
a5:9b:07:de:5a:69:3a:83:26:36:66:61:f0:c5:60:
44:2f:f5:aa:02:e1:83:21:cd:25:e3:6a:05:f1:ac:
95:98:af:a4:ce:41:de:48:00:d2:c3:f5:a2:d2:c5:
b5:b3:f3:12:54:cd:db:e3:a5:de:a3:a9:d4:60:00:
78:c7:ac:cc:32:a0:7a:a9:e4:35:54:b9:2f:b6:e7:
80:7d:85:1e:39:90:a0:36:de:5d:ce:55:ff:3d:4e:
a9:bd:ab:ec:a6:d3:e6:d7:d1:a0:9e:00:14:e2:b5:
48:74:26:2d:68:7c:c0:89:5c:db:7f:fd:58:22:b3:
16:93:8c:dc:e7:7b:58:d5:ff:79:0b:4a:4d:c4:1c:
f6:31:c7:f3:82:b8:75:09:4b:9d:06:64:ab:e7:14:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:88:F1:4D:32:FF:E1:3D:DC:C2:02:E9:13:6A:E9:FB:3B:F4:4B:D3
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:a2:dc:67:8f:70:e9:29:a6:ab:fc:38:d8:ad:4b:f2:44:
8c:f0:62:cd:0c:05:2a:e2:83:61:32:54:eb:7a:e0:90:70:4a:
f9:c5:87:38:1b:2b:54:2a:90:39:70:65:55:e9:00:49:c1:d2:
f8:22:d8:f5:c4:f2:c8:e6:b2:af:bf:a2:62:00:9d:36:13:b9:
db:a8:bd:9c:de:df:f2:dc:cd:d9:c5:c7:65:9b:9d:3d:df:87:
7e:59:b6:11:29:3e:e6:7a:b1:3a:7a:da:f3:2e:82:4d:59:d5:
52:26:8e:82:5f:94:65:ed:90:85:5e:8e:6a:53:15:3f:7e:16:
ec:2c:f8:51:a1:51:ba:05:6e:2d:5c:55:80:95:9c:9f:af:f9:
60:d8:b9:f2:8d:af:63:a7:04:a3:7e:48:e3:8e:2a:0e:2e:42:
0c:76:ba:d7:80:1f:61:9b:3b:35:c5:bf:36:f0:61:53:93:dd:
25:02:3f:2c:be:e0:25:ee:a2:0a:9b:3f:c9:10:47:4a:c0:d6:
2e:54:ab:98:da:86:3e:03:72:8f:cc:d8:5d:2c:9d:d6:29:a2:
c9:12:c2:20:b2:16:09:b6:a1:29:5b:95:5e:93:b6:98:e7:0d:
28:96:01:61:f2:6e:68:9e:48:76:83:87:a1:6b:83:23:94:c2:
87:16:54:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3UnFqWv+EwiJnGVz4FQkfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx
YzRlYWYwHhcNMjYwNDI4MTUwMTQ5WhcNMjYwNDI5MTUwMTQ5WjAzMTEwLwYDVQQD
Eyg1Yzg4ZjE0ZDMyZmZlMTNkZGNjMjAyZTkxMzZhZTlmYjNiZjQ0YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb8CzfQXWfdFbc46hrohwFz7L6ko
PFZWeT/Izay2SadHy4kEp6U1CEUlTE+C8YSVxB5Ll/FPE24Y6IMhafNdhcaizaFd
SS7zRR3vih4EFeECn7VDaXP2P/h7GbTAxhyVEgBjmlw1fGilmwfeWmk6gyY2ZmHw
xWBEL/WqAuGDIc0l42oF8ayVmK+kzkHeSADSw/Wi0sW1s/MSVM3b46Xeo6nUYAB4
x6zMMqB6qeQ1VLkvtueAfYUeOZCgNt5dzlX/PU6pvavsptPm19GgngAU4rVIdCYt
aHzAiVzbf/1YIrMWk4zc53tY1f95C0pNxBz2Mcfzgrh1CUudBmSr5xSf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyI8U0y/+E93MIC6RNq6fs79EvTMB8GA1UdIwQY
MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt
Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz
LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZSi3GeP
cOkppqv8ONitS/JEjPBizQwFKuKDYTJU63rgkHBK+cWHOBsrVCqQOXBlVekAScHS
+CLY9cTyyOayr7+iYgCdNhO526i9nN7f8tzN2cXHZZudPd+Hflm2ESk+5nqxOnra
8y6CTVnVUiaOgl+UZe2QhV6OalMVP34W7Cz4UaFRugVuLVxVgJWcn6/5YNi58o2v
Y6cEo35I444qDi5CDHa614AfYZs7NcW/NvBhU5PdJQI/LL7gJe6iCps/yRBHSsDW
LlSrmNqGPgNyj8zYXSyd1imiyRLCILIWCbahKVuVXpO2mOcNKJYBYfJuaJ5IdoOH
oWuDI5TChxZUWQ==
-----END CERTIFICATE-----
Generated at Wed Apr 29 00:03:49 2026 by rpki-client