Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File: FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier: dh9V3mM1bCatMHEdFr+8jQgzDuSF691/dpW5IM+UTFU=
Subject key identifier: D5:F5:F2:E2:29:1C:98:DD:90:6D:E7:93:B4:AA:74:F1:8A:1A:7F:ED
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 019DCD1978B0C2BA1F5BDCBD6D64F8F0DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number: 130D
Signing time: Mon 27 Apr 2026 04:01:31 +0000
Manifest this update: Mon 27 Apr 2026 04:01:31 +0000
Manifest next update: Tue 28 Apr 2026 04:01:31 +0000
Files and hashes: 1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: dxXgvGbDJLzh4nLfhuUVDkQQQP/GoO1PbeZ3+Icpj2E=)
2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:78:b0:c2:ba:1f:5b:dc:bd:6d:64:f8:f0:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Apr 27 04:01:31 2026 GMT
Not After : Apr 28 04:01:31 2026 GMT
Subject: CN=d5f5f2e2291c98dd906de793b4aa74f18a1a7fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:1a:20:c1:54:a2:14:58:04:a4:ac:ef:4a:
7e:8c:a0:5c:64:24:5b:42:02:e3:e6:75:2d:80:dc:
5f:2d:54:21:e9:33:44:d6:80:26:cb:1c:f5:0f:a9:
96:81:38:f9:92:47:30:63:d5:e1:8d:77:b9:49:ef:
e0:29:31:f5:91:5d:9c:df:a2:41:39:52:ac:68:a4:
e0:f7:48:05:d1:76:32:cc:eb:8e:86:ed:d6:da:e6:
22:17:b6:4c:11:52:5b:d1:c4:a6:4e:29:fa:0a:eb:
8e:c5:b5:8a:89:a9:fc:43:78:a1:4f:15:4b:5d:72:
87:46:5a:f6:9a:25:39:a0:dc:f4:8e:78:a5:94:0b:
21:04:10:56:40:46:97:fc:73:ef:ad:e4:c9:bf:0f:
fc:2c:9b:56:2e:fb:1a:79:24:b3:c8:1e:29:a0:c4:
1b:54:6e:91:eb:f2:85:6a:30:f4:39:6d:f6:6d:2f:
5c:ac:72:1a:90:2b:5a:94:bf:22:d5:c6:e9:35:88:
00:cb:95:b9:20:dd:68:79:51:ab:34:ac:3d:3a:36:
ac:aa:d6:8a:cc:54:e7:b2:0e:ad:7d:09:4f:2e:00:
80:79:44:44:a2:70:c5:28:16:2a:e6:7e:df:65:e3:
bb:63:a6:41:db:77:29:a7:38:4b:31:b7:11:99:22:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:F2:E2:29:1C:98:DD:90:6D:E7:93:B4:AA:74:F1:8A:1A:7F:ED
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:5d:10:3a:5c:a5:bb:49:ee:cb:9c:c4:0f:6e:6e:49:58:
f1:18:3a:0e:48:1d:9d:65:9f:3a:a7:dc:01:3f:ab:37:4b:f7:
9b:2a:e1:79:01:cd:85:ea:ed:c1:54:44:52:98:e8:db:99:e7:
d5:51:4e:0c:82:b5:09:c6:4e:78:c3:60:55:bb:7e:85:20:d6:
5e:58:82:eb:aa:b1:d2:97:c0:9b:37:93:a4:24:dc:33:dd:9c:
22:b7:05:0a:0d:2c:fb:89:9a:36:c1:72:a2:7d:83:99:1b:b0:
fb:b4:4b:59:9a:45:3d:9c:d8:60:b7:c3:66:09:27:c9:0d:24:
de:fd:81:48:4f:69:d0:0f:23:b0:96:cd:85:4c:6f:75:e6:d4:
5f:d4:a3:ab:b2:3c:5a:fe:07:bb:a3:f4:e0:b1:02:53:62:de:
b8:ca:ff:2a:3e:77:30:19:ee:ee:dd:3a:7a:33:1e:fa:b3:21:
81:e2:22:50:5d:6f:cd:c1:52:b3:c7:55:fb:49:d4:bd:35:04:
67:f7:ec:2d:2f:c2:bb:14:0c:ef:2c:fb:64:c6:fa:18:ca:02:
dc:17:e6:9d:24:3c:07:8d:f6:57:e0:2b:bc:16:09:00:ad:36:
10:41:1a:10:c3:52:a0:02:41:5e:84:0c:45:80:15:6c:bd:7a:
86:be:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:44 2026 by rpki-client