Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: Z6JpJBf4whdeAeNRkfGBIJid1phkqy0wGDkYFhc+His=
Subject key identifier: 92:4A:D3:46:4E:A4:01:A4:87:63:4C:1E:18:4C:92:C4:80:FD:45:FE
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019D687712E992CE0A0DB8236E5AEF8A7FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 18A8
Signing time: Tue 07 Apr 2026 15:02:07 +0000
Manifest this update: Tue 07 Apr 2026 15:02:07 +0000
Manifest next update: Wed 08 Apr 2026 15:02:07 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: dF+CinG3tzqQrKQjCW7CnXgAR1hW8fmtjss0Vvwz1Go=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:77:12:e9:92:ce:0a:0d:b8:23:6e:5a:ef:8a:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Apr 7 15:02:07 2026 GMT
Not After : Apr 8 15:02:07 2026 GMT
Subject: CN=924ad3464ea401a487634c1e184c92c480fd45fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:a8:57:0a:a6:92:c4:ae:5c:54:eb:52:f5:
a4:e2:11:61:f9:68:f6:21:3a:98:c2:5f:d7:4f:75:
a6:11:72:6f:79:b5:c7:7e:74:c2:e0:9b:4c:86:97:
73:3f:96:b9:0f:c9:68:5c:04:cb:13:78:1c:eb:ce:
8c:c2:17:71:55:85:f6:03:9a:3a:ff:fb:74:e8:8b:
df:ee:01:8a:a0:3f:17:96:cb:e6:b4:78:95:f1:36:
e3:d9:fb:9a:7b:bd:8e:3a:09:a9:9c:43:74:f3:0f:
b1:49:04:10:14:8a:da:3a:81:bd:c7:b1:76:ad:d3:
7e:96:60:00:86:12:f7:2d:3d:54:01:6c:5b:02:df:
c5:6b:f0:ec:07:ae:c3:02:fa:b7:d6:a2:a3:c2:6d:
a1:1b:7f:22:24:fd:d3:32:61:e3:8b:e7:99:97:0f:
2a:08:98:6c:79:1b:f6:29:44:67:da:14:21:84:9d:
8d:50:4b:ab:0a:24:30:62:bb:6b:68:24:44:cc:66:
25:90:33:5d:53:a1:18:6b:c3:aa:0c:c0:56:0b:81:
b1:0e:e6:3a:89:33:2d:71:7d:30:2a:0e:51:b9:5c:
6b:ef:47:95:fb:02:84:07:7d:5d:92:77:79:14:37:
8b:ad:49:7a:33:f1:28:c3:72:e7:92:08:c9:3f:b2:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:D3:46:4E:A4:01:A4:87:63:4C:1E:18:4C:92:C4:80:FD:45:FE
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:37:6c:71:c3:d0:05:8a:65:23:25:76:49:cc:41:8d:e7:87:
33:b3:27:15:dd:45:b7:7f:70:60:36:23:42:2d:64:a8:83:c1:
22:ae:9e:e1:4f:fa:45:41:92:d7:78:a8:36:c9:14:8b:b3:a7:
98:74:3c:88:1c:30:71:11:f3:6e:16:80:32:bf:84:3d:cb:54:
db:3a:69:3f:90:07:4b:04:eb:f8:df:62:3b:09:6d:58:b2:05:
1f:6e:e5:01:39:7d:81:c0:54:d6:29:ee:c4:eb:1f:f5:2d:1a:
94:cb:16:92:01:52:a2:49:2d:f3:27:c2:6c:e9:3c:3a:1f:71:
52:c7:84:fd:a8:f2:20:3d:82:80:d3:19:04:0e:0b:99:16:4a:
2f:db:12:f8:77:5a:9b:ce:73:45:74:be:51:e3:57:b1:1e:2e:
5e:5a:b5:25:34:2f:7a:89:c3:95:ec:c5:0e:0a:1d:d5:15:dd:
61:35:c7:b9:3e:61:a1:86:f5:3d:15:dc:db:6a:71:d6:c9:9f:
21:2d:1c:b0:4e:5e:da:d0:4e:cb:cd:4d:77:48:da:0e:66:eb:
87:3e:8e:95:f2:16:2b:a6:5e:bc:77:19:68:de:2a:17:d5:5a:
61:c4:75:48:59:f0:fe:2e:50:ac:de:8f:bb:4b:d1:61:6c:52:
bc:46:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:11:29 2026 by rpki-client