Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: zTeUC97UNN7sDZcHIJOcdoePzhdqwACTmhDlNq92eu0=
Subject key identifier: 6A:38:E9:41:4C:9F:27:FE:1D:5C:20:B8:A3:47:02:00:1C:9F:4E:DB
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019D65AC5DA460005352B440DC7599AEA782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 1387
Signing time: Tue 07 Apr 2026 02:01:28 +0000
Manifest this update: Tue 07 Apr 2026 02:01:28 +0000
Manifest next update: Wed 08 Apr 2026 02:01:28 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: HRfiR0l5zeDII2BmG8ugzXgVtHoUjWj2blJr4yw3GFA=)
2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:ac:5d:a4:60:00:53:52:b4:40:dc:75:99:ae:a7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Apr 7 02:01:28 2026 GMT
Not After : Apr 8 02:01:28 2026 GMT
Subject: CN=6a38e9414c9f27fe1d5c20b8a34702001c9f4edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:a6:d8:94:5a:69:ec:d5:eb:a1:d3:b7:61:
72:c3:3e:81:01:b2:4a:5c:22:18:55:57:04:54:ed:
39:ea:9a:1e:f1:eb:97:77:c0:58:6d:d8:00:e6:fc:
4b:e5:fb:03:0d:30:5b:19:ed:2e:75:7d:51:2e:19:
d2:00:52:d2:73:ea:a7:9b:8d:07:94:22:91:d9:68:
26:26:1c:43:d2:41:ed:3f:7e:41:80:8d:9e:4b:d3:
99:26:44:0d:67:da:8f:a1:41:03:2f:70:71:94:e9:
02:e3:1b:d4:5b:60:3b:49:48:48:e6:27:78:f4:bd:
76:99:50:8b:33:27:f4:66:c6:99:05:38:74:78:83:
f8:c6:0f:75:96:a4:2b:36:84:ae:cc:83:d0:68:54:
26:9c:47:64:52:1b:63:30:a7:03:a5:55:5e:a6:b0:
d9:32:95:3e:be:0a:8d:5c:cd:b6:96:1c:7f:7c:ee:
e6:de:4d:43:c7:33:01:1e:c1:85:8f:dd:80:67:b4:
b7:22:a5:dc:d1:8a:b5:5c:a9:59:0f:50:23:f4:fb:
d0:d6:b7:e6:fd:6e:b6:f7:90:66:16:5d:5b:fc:ae:
5b:5c:25:b4:81:79:27:b9:60:10:95:a5:3f:d9:ec:
42:90:33:93:45:19:b7:71:a6:fd:4e:05:0f:14:7c:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:E9:41:4C:9F:27:FE:1D:5C:20:B8:A3:47:02:00:1C:9F:4E:DB
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:22:20:b7:3f:5e:cf:f8:fc:00:53:0f:b8:a1:5e:67:57:37:
4c:eb:50:9e:51:cf:63:a2:98:7f:87:2f:3e:ea:3b:26:84:e5:
c7:78:e1:bd:de:ce:3d:18:a8:db:52:e4:9c:a1:73:97:7f:40:
6c:d4:9e:19:2b:83:b0:be:d4:4a:6f:92:3d:ad:9d:c7:10:39:
29:08:32:ea:c3:0f:e8:0b:21:45:0d:c4:fa:14:1f:d9:ac:d3:
d1:d1:27:2b:a5:3b:4e:31:83:d9:a7:f4:e3:08:54:8e:de:f2:
5a:04:f1:9c:b0:0f:7d:9d:3c:9d:33:92:37:d0:51:4f:6c:c1:
8d:be:8d:a3:7c:60:8b:34:21:c0:f5:c8:a4:1d:bb:66:65:dd:
97:b4:56:35:7c:37:9e:4c:27:c3:b6:5c:c0:ce:9d:50:38:09:
24:0e:96:d8:00:fe:4d:d6:a0:03:85:67:94:25:e2:e2:1a:9f:
f4:85:de:37:a5:ce:40:6e:4f:ef:fd:07:b5:b7:45:28:b5:89:
af:c2:b9:63:45:17:df:5b:b7:a8:9b:45:05:b5:4a:6d:36:46:
8b:1f:bc:e3:d1:82:5a:e2:b8:8a:12:d6:aa:e1:44:4a:5b:8f:
29:40:01:d7:2d:3a:5e:30:96:96:49:31:67:7f:d7:69:a9:73:
bc:e7:2d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1lrF2kYABTUrRA3HWZrqeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjYwNDA3MDIwMTI4WhcNMjYwNDA4MDIwMTI4WjAzMTEwLwYDVQQD
Eyg2YTM4ZTk0MTRjOWYyN2ZlMWQ1YzIwYjhhMzQ3MDIwMDFjOWY0ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIGm2JRaaezV66HTt2Fywz6BAbJK
XCIYVVcEVO056poe8euXd8BYbdgA5vxL5fsDDTBbGe0udX1RLhnSAFLSc+qnm40H
lCKR2WgmJhxD0kHtP35BgI2eS9OZJkQNZ9qPoUEDL3BxlOkC4xvUW2A7SUhI5id4
9L12mVCLMyf0ZsaZBTh0eIP4xg91lqQrNoSuzIPQaFQmnEdkUhtjMKcDpVVeprDZ
MpU+vgqNXM22lhx/fO7m3k1DxzMBHsGFj92AZ7S3IqXc0Yq1XKlZD1Aj9PvQ1rfm
/W6295BmFl1b/K5bXCW0gXknuWAQlaU/2exCkDOTRRm3cab9TgUPFHwFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo46UFMnyf+HVwguKNHAgAcn07bMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyIgtz9e
z/j8AFMPuKFeZ1c3TOtQnlHPY6KYf4cvPuo7JoTlx3jhvd7OPRio21LknKFzl39A
bNSeGSuDsL7USm+SPa2dxxA5KQgy6sMP6AshRQ3E+hQf2azT0dEnK6U7TjGD2af0
4whUjt7yWgTxnLAPfZ08nTOSN9BRT2zBjb6No3xgizQhwPXIpB27ZmXdl7RWNXw3
nkwnw7ZcwM6dUDgJJA6W2AD+TdagA4VnlCXi4hqf9IXeN6XOQG5P7/0HtbdFKLWJ
r8K5Y0UX31u3qJtFBbVKbTZGix+849GCWuK4ihLWquFESluPKUAB1y06XjCWlkkx
Z3/XaalzvOctfw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:07:34 2026 by rpki-client