Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: J3+UOEGMSDGuyuNEmoy7w5LMsdj9sUAVgP7xNXYxezk=
Subject key identifier: C8:41:61:8C:9B:DD:E7:12:4C:FF:BF:41:5C:DD:DD:61:23:1F:37:91
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 019DCD865912ED2C4E53F796C181B8C95285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: F5
Signing time: Mon 27 Apr 2026 06:00:27 +0000
Manifest this update: Mon 27 Apr 2026 06:00:27 +0000
Manifest next update: Tue 28 Apr 2026 06:00:27 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: RXz1GtAamb5qHoagz46KDWxs3m087ZLG3WhBicZtmYg=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:59:12:ed:2c:4e:53:f7:96:c1:81:b8:c9:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Apr 27 06:00:27 2026 GMT
Not After : Apr 28 06:00:27 2026 GMT
Subject: CN=c841618c9bdde7124cffbf415cdddd61231f3791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:d4:d2:14:71:bb:19:f6:35:9a:2e:01:ba:
68:ba:97:b2:04:d3:d8:91:a1:c4:9a:18:57:df:4c:
09:b3:78:8b:f6:07:72:b7:6a:7b:b3:0a:03:5e:36:
50:61:8f:bf:99:8a:be:d4:71:77:27:78:62:98:42:
6b:8b:78:fd:64:fa:b6:64:de:f7:0b:b9:33:ac:34:
a7:69:8d:c5:ce:7d:62:8b:63:b9:20:22:a4:19:cb:
bf:cd:52:5b:d7:56:73:be:e5:49:7a:a3:84:e1:49:
26:30:dc:2a:90:b5:7c:c4:75:27:73:4d:cf:ef:41:
bc:a4:93:76:0a:74:14:e5:db:fc:50:2e:1c:25:68:
bb:f4:cc:b6:14:28:b0:d6:ac:15:d3:e5:c3:82:d8:
13:8b:a2:e6:dc:11:d2:fe:5f:3d:a7:5d:98:1e:3b:
68:aa:29:6f:2c:0d:00:42:f4:61:ab:bd:e1:0b:62:
17:06:68:c1:8e:3c:86:e5:bb:18:fa:42:f5:7e:8e:
1c:59:b6:c2:07:00:d2:2d:64:57:f6:e5:34:3e:be:
00:e8:64:fd:11:f3:7a:c5:b2:c3:20:72:9e:67:97:
74:0a:ef:e1:ec:fc:24:d3:da:25:00:a1:93:cd:36:
55:ed:f7:9f:de:21:7c:16:8c:0e:5f:bb:64:ac:31:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:61:8C:9B:DD:E7:12:4C:FF:BF:41:5C:DD:DD:61:23:1F:37:91
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:0f:50:13:88:20:d8:84:56:42:3a:33:64:ee:f8:a1:36:
24:5f:95:b7:92:42:83:a8:d8:05:a0:a2:9d:73:46:cb:5c:89:
1b:0b:1e:42:81:6a:87:f5:33:96:62:dd:e4:5a:13:25:72:b0:
d9:2e:f7:fd:7f:24:09:ff:0a:d9:bb:58:f0:1e:48:4a:5f:4f:
93:ed:c6:32:25:d7:5f:0b:57:25:d5:70:fa:92:52:65:39:f9:
50:72:b3:11:61:5a:41:a7:62:6d:d1:f5:49:26:40:47:df:c5:
43:89:40:d2:83:60:0d:fc:0c:79:99:ca:16:ef:83:e4:10:c9:
62:c9:b4:07:27:8a:1a:ae:e6:26:e4:b7:4f:66:cd:38:13:f2:
54:97:6d:b0:c1:c8:8e:60:89:8e:ca:47:97:ef:06:10:6a:9c:
12:0e:cd:4c:4a:93:d1:87:2a:83:2c:79:b4:3d:41:e8:5a:9f:
3f:9b:6e:26:92:d9:b5:ed:b6:79:66:82:5d:52:92:f2:0d:d2:
12:7d:a1:d4:0f:1b:b8:35:b3:3f:63:6d:78:44:0b:c4:80:08:
d1:37:14:39:41:6e:54:8a:59:8b:61:70:10:f7:8c:4f:e4:55:
e2:2a:12:7c:97:42:29:fa:77:84:3d:40:fb:aa:90:06:21:ab:
78:37:b5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:02 2026 by rpki-client