Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: YYg7I6Gdq9cVK5/z4EVgnCIvpUSbSrq5VI1JarZpa/E=
Subject key identifier: 12:73:CF:73:68:47:67:94:AF:D0:0C:F9:C4:DE:20:CE:E0:2E:55:2E
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 019DCF74EB7B62B373E4C1D1497D7EBAB877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 15:00:39 +0000
Manifest this update: Mon 27 Apr 2026 15:00:39 +0000
Manifest next update: Tue 28 Apr 2026 15:00:39 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: mXvU9zf4a4+qR9KOLiRHLYCaedhC+eL0trXH1nR8/8I=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:eb:7b:62:b3:73:e4:c1:d1:49:7d:7e:ba:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Apr 27 15:00:39 2026 GMT
Not After : Apr 28 15:00:39 2026 GMT
Subject: CN=1273cf7368476794afd00cf9c4de20cee02e552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:66:74:07:10:ae:5a:b3:1c:d9:a9:93:1f:
75:19:3c:b8:94:20:66:83:f5:1f:c6:28:10:30:6f:
43:09:16:0d:ff:26:47:f9:79:6f:07:81:3b:84:e9:
0e:4e:2e:b5:53:a2:c2:10:78:61:0b:61:4f:07:9d:
e5:6d:ad:ba:11:e5:f9:8f:7e:06:4d:c9:d0:42:8e:
69:06:90:2a:ad:16:a7:76:2b:a5:83:d7:f3:25:c8:
5a:17:50:db:e8:b0:9f:f9:36:83:c2:39:5c:57:5a:
3c:99:4c:fe:7f:0b:90:8c:5c:42:d0:53:8c:3a:12:
51:83:11:31:87:15:31:5a:03:d9:5c:f8:42:0b:1a:
be:36:43:1f:ce:4d:92:42:2f:45:36:35:5b:b1:1d:
ab:b4:7b:ab:8b:14:4f:13:f6:8a:d9:45:82:14:98:
07:44:f7:40:1a:b4:d0:27:4d:fa:eb:e5:b6:12:88:
74:b1:d1:74:83:c8:23:da:93:6a:f6:7e:db:34:23:
9f:0b:a4:62:f3:e3:40:b4:b1:08:82:19:52:c4:63:
50:95:b0:7d:f8:e5:e5:0b:f8:24:40:87:0c:ab:c3:
a5:21:e6:2f:e6:f4:28:ba:67:70:2c:51:35:ac:48:
37:77:3f:79:26:f2:13:1a:57:e1:ef:f4:5a:f9:1f:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:CF:73:68:47:67:94:AF:D0:0C:F9:C4:DE:20:CE:E0:2E:55:2E
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ca:00:6f:31:b7:b6:8f:20:f2:a4:27:67:a2:a6:4f:c7:40:
15:ac:51:d6:62:88:19:88:6c:ef:b2:10:47:43:3a:d4:d5:5a:
d9:ef:83:bc:63:a1:30:77:30:ce:ec:0c:2f:7b:38:dc:07:57:
8f:a2:1b:66:84:ba:40:6c:6f:2f:71:32:e6:93:c0:38:3c:64:
b4:3e:14:c2:09:78:53:00:46:bd:1e:eb:63:48:4b:d7:9b:0a:
34:7c:ef:0a:30:7e:cb:7e:b1:64:01:95:88:61:7d:b3:e4:60:
46:4b:9f:50:9a:e3:70:f3:cb:ab:8e:d8:08:a0:c6:05:af:bb:
55:52:b3:e2:aa:f5:a9:f1:04:ec:c0:0e:20:de:77:56:b4:cf:
25:9f:1e:cd:39:a8:b8:f9:1e:b2:99:03:63:e4:b5:49:21:95:
92:48:41:45:62:95:1c:4a:4d:57:1c:0c:0c:dd:76:67:bc:7d:
e6:9d:99:e2:32:86:f6:cc:21:70:f2:5e:02:c4:58:6f:d8:f7:
35:69:d8:3e:b2:f8:75:bc:05:42:bb:3f:bd:06:cc:18:a4:2e:
f7:15:07:2f:3b:e1:53:93:5b:69:81:fc:6a:bd:e0:dc:cf:ca:
ef:38:2f:05:9e:a1:a3:27:99:d4:0e:b7:e4:86:c5:5b:9e:d1:
93:59:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:29:26 2026 by rpki-client