Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: YXTZKXNC/kIvoelyH2xKb5ZmFutDbF2CT4YBS12isvw=
Subject key identifier: AF:88:6D:5C:43:4B:BF:C8:32:0F:98:70:14:E4:64:86:EE:85:48:74
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019DA830A195DE461D04BFF8244C0FE6FC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0D3A
Signing time: Mon 20 Apr 2026 00:00:52 +0000
Manifest this update: Mon 20 Apr 2026 00:00:52 +0000
Manifest next update: Tue 21 Apr 2026 00:00:52 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: oY20Zzob8rplcuwUW3rDI55BPvqhNt0uwNmHq6ePM1k=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:a1:95:de:46:1d:04:bf:f8:24:4c:0f:e6:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Apr 20 00:00:52 2026 GMT
Not After : Apr 21 00:00:52 2026 GMT
Subject: CN=af886d5c434bbfc8320f987014e46486ee854874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:70:6b:af:d0:23:d3:93:4b:ac:c3:dc:fe:
73:0a:a2:a9:94:63:aa:dc:c9:8e:e1:9b:ae:c9:32:
5b:85:0e:70:dc:90:bf:e5:4d:00:2f:8f:ee:6e:d6:
f9:03:be:d0:eb:b8:2a:97:9d:28:03:b5:57:07:39:
77:14:c3:4d:72:01:74:0d:7b:f3:6e:70:28:85:6a:
15:72:9c:30:ed:de:42:65:3a:1f:27:01:fc:6e:4a:
7e:c1:41:2c:ac:07:7c:27:91:1b:37:76:4d:16:df:
35:ad:73:a7:d2:ca:63:37:8a:73:2f:4e:1b:ff:b9:
79:36:30:70:c2:d6:d4:e5:8f:9d:c3:14:11:e5:e2:
38:b1:af:c5:ab:89:1c:49:3c:e3:63:89:89:3a:e4:
a4:08:b6:4a:8e:ef:a4:de:83:24:9e:cc:95:1d:d9:
45:ed:ef:4e:e1:8b:be:77:62:40:a2:ba:6f:57:5c:
bc:79:e3:17:04:c9:d9:fa:81:ba:7a:07:e2:c8:1b:
0d:ba:ac:ea:ff:48:1d:de:f9:b3:81:b3:ab:be:ea:
2b:6c:f5:e1:44:5d:1a:92:4e:83:e9:54:c0:57:df:
8f:07:ed:c5:d7:25:7e:8f:b9:99:a3:38:63:3b:48:
80:c7:84:59:04:49:33:d4:59:0f:4a:27:32:4f:c9:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:6D:5C:43:4B:BF:C8:32:0F:98:70:14:E4:64:86:EE:85:48:74
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:40:e3:03:9c:62:2b:9d:d0:b0:57:3a:f7:41:88:a4:e9:
bd:18:09:f5:ca:30:50:68:81:f6:c1:4a:b6:de:82:1b:1c:78:
b4:44:a5:45:23:81:29:bc:6b:59:e7:0d:89:de:4f:bc:c3:08:
4f:a0:f6:e5:5a:58:d7:ca:36:7e:63:d4:13:19:05:ab:14:cc:
21:ed:03:21:f6:d5:2a:c4:c9:c8:15:10:90:1a:ec:44:72:ba:
d5:c1:c2:8a:cf:ab:15:1e:d3:0f:ae:36:99:2c:bb:14:a1:40:
2f:08:e7:c8:77:09:47:d1:83:07:6b:c2:90:81:83:56:96:72:
0e:e1:08:24:24:3d:2e:6c:c2:9c:8d:69:e0:5b:ca:f4:18:ca:
bf:d7:41:60:c2:5f:d2:1e:b0:91:71:d8:f3:4c:68:b7:44:00:
4e:71:39:d0:88:cb:3b:5b:5f:32:95:b6:e6:0a:2c:eb:c0:3b:
df:c5:7e:34:56:41:be:69:15:ba:80:64:ef:13:8b:98:81:d0:
f3:5a:a8:37:51:15:ba:06:c2:cb:ba:80:b3:61:46:74:52:63:
63:35:a3:40:22:a2:1f:16:1b:55:3c:10:f2:e6:72:7d:e6:f3:
ff:c0:4c:4d:29:4e:e7:a8:a9:5a:d6:59:e8:15:61:cb:9f:0f:
0e:ef:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:09 2026 by rpki-client