Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: N8fvCwUnjEbO6rLMP2BnbkCgUeyyfvw7oftQkHtlRyU=
Subject key identifier: 71:28:9B:05:DD:70:7E:9C:D4:05:4E:2B:CB:69:76:CC:85:C4:1D:C1
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019DDD9EB1E6BB774C8C32B6304DBD2191E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 18E5
Signing time: Thu 30 Apr 2026 09:00:58 +0000
Manifest this update: Thu 30 Apr 2026 09:00:58 +0000
Manifest next update: Fri 01 May 2026 09:00:58 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: nrReSlM16ddYRBC/QJ7N/elNQkLbW+Wbwe3yr1+6cEs=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:b1:e6:bb:77:4c:8c:32:b6:30:4d:bd:21:91:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Apr 30 09:00:58 2026 GMT
Not After : May 1 09:00:58 2026 GMT
Subject: CN=71289b05dd707e9cd4054e2bcb6976cc85c41dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:89:dd:24:ba:d9:23:61:0a:02:c7:7f:9f:
f8:4f:22:1c:fe:dc:e8:4b:47:a6:3e:d7:d0:2e:97:
05:c5:15:07:ec:26:cc:6b:32:26:de:d8:a0:78:0f:
41:2b:23:3c:0d:6b:98:f8:f7:fd:6d:55:f0:f8:58:
17:d3:f0:28:cd:e0:1d:e6:07:2c:f0:65:42:98:1e:
cb:2f:b2:84:e9:43:81:b0:71:fc:e7:ce:08:93:b6:
ef:2a:fa:26:d7:56:e5:51:38:ae:b1:7a:16:44:08:
2f:de:50:e2:90:62:06:60:ff:9a:4c:96:13:f7:6f:
6e:8f:30:3b:57:b0:d4:a8:e7:8f:a9:27:03:01:51:
3e:6e:b8:84:bb:19:ca:5a:e0:1a:29:40:b5:0c:31:
4b:71:8a:38:76:2c:94:48:7f:06:c5:2d:89:02:00:
ec:a0:86:2c:b6:13:0a:6c:1e:23:01:a8:d8:c0:ca:
27:23:5d:cf:b7:02:61:d2:2d:ca:2b:82:62:9a:8e:
7e:e5:8e:f6:6a:1f:7b:17:9c:70:08:60:e8:96:e4:
08:fd:c6:2c:06:3f:f7:09:15:04:9b:f0:c4:c9:70:
9c:ec:0c:54:44:4a:a1:c3:b4:6b:0b:43:9f:9c:6a:
42:3e:3b:ca:aa:92:4d:d5:a5:a8:df:46:0b:8c:01:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:9B:05:DD:70:7E:9C:D4:05:4E:2B:CB:69:76:CC:85:C4:1D:C1
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:b2:70:14:c6:5f:93:22:8f:45:33:1c:30:64:77:e5:b9:
24:f6:28:81:a0:81:62:a5:2f:46:c2:bc:45:a3:68:c7:eb:ec:
88:41:40:f1:d3:df:37:b7:a6:26:13:45:14:d8:fb:92:90:e8:
aa:0d:08:59:ae:fe:22:e5:9f:ca:68:29:29:00:b7:12:2f:4f:
56:db:a1:46:75:ff:6f:53:8f:b0:a6:96:40:7c:b5:2c:64:f1:
75:1a:6b:f3:c8:f3:ef:4d:00:84:13:b2:90:0f:48:35:f5:d0:
60:1e:f1:4a:bb:5b:3a:f7:8d:97:07:47:d8:ad:54:f5:45:6b:
66:2c:d7:51:ea:85:a6:fc:97:3f:9e:98:5e:2b:cc:d4:07:1b:
b1:fc:f2:e9:3e:2a:e7:92:f4:cc:91:46:fc:77:fa:7f:b4:cd:
3e:1a:d4:1f:cc:06:96:fa:ee:7a:53:49:e0:32:e6:ff:bf:12:
f9:c6:56:25:f9:b6:c9:2c:fa:7b:61:45:d0:f7:b1:98:10:ac:
77:d6:e7:c2:7a:80:e1:a4:89:2c:30:34:89:51:82:43:5d:33:
6c:de:eb:ac:8f:fd:f9:ba:50:79:5d:be:cc:c3:06:e9:55:c6:
d7:1a:a4:4e:83:08:7f:5b:57:3a:af:b5:26:a9:58:4a:e4:7d:
87:e5:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:29:24 2026 by rpki-client