Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: nAUztJ5ekfinjhW9t1vuJask9XtS56Cwv+MVjAqGHTY=
Subject key identifier: 8F:7E:3E:52:62:85:D5:56:C0:65:67:79:8C:5F:15:7C:F2:8F:B3:0F
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019DCDF50DA351E3DE346056A73EEBC85494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0A14
Signing time: Mon 27 Apr 2026 08:01:22 +0000
Manifest this update: Mon 27 Apr 2026 08:01:22 +0000
Manifest next update: Tue 28 Apr 2026 08:01:22 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: jTI7ZwgwOB73a94REGH/ravezzcSRLUSvzfnJtthRU8=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:0d:a3:51:e3:de:34:60:56:a7:3e:eb:c8:54:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Apr 27 08:01:22 2026 GMT
Not After : Apr 28 08:01:22 2026 GMT
Subject: CN=8f7e3e526285d556c06567798c5f157cf28fb30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:37:62:22:26:be:58:55:ee:ea:49:2a:2c:
ef:75:62:f6:17:a7:12:cb:7b:6f:07:a7:32:77:a9:
58:e3:49:9e:4d:f2:09:e2:71:78:d4:d6:b6:95:3d:
a4:1a:94:f8:7e:d6:c6:86:51:b6:7a:4d:3a:e5:15:
a4:d5:5f:3b:de:8a:ea:ae:97:13:7a:50:49:7b:7a:
af:61:41:be:79:73:2d:23:e8:a4:48:4f:64:37:fa:
09:98:a9:3d:85:1f:06:b3:1b:4d:17:a9:48:c9:79:
6a:16:e6:ea:df:6c:ba:6a:6e:f6:fd:c3:60:d8:fd:
0b:0f:a5:68:a8:86:2e:5a:c8:e4:a8:f3:80:f2:d9:
db:6e:8d:59:03:4f:95:f5:9f:c6:8c:61:88:58:dc:
d4:4b:e4:a8:52:69:6f:1b:b0:0a:29:24:46:95:f5:
79:f4:b4:70:64:b3:af:10:54:07:bb:53:1e:ca:a6:
d3:97:9c:93:8e:24:26:a8:bc:9f:e5:65:19:62:1f:
84:3c:da:63:ca:6c:ae:35:ae:97:80:73:15:22:11:
dd:2b:e8:33:db:d4:67:fe:76:66:9d:da:8b:53:ae:
c7:52:89:5a:bd:41:73:c7:82:7b:c6:e6:b3:d0:26:
85:56:77:09:2a:f4:37:90:90:98:78:a7:03:7c:82:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:3E:52:62:85:D5:56:C0:65:67:79:8C:5F:15:7C:F2:8F:B3:0F
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ae:48:07:e5:a0:1a:a1:ff:5c:f8:db:49:80:a7:86:b8:a6:
39:f8:17:ea:db:db:71:0e:7f:82:4e:6f:c1:a3:b1:b8:73:51:
44:97:46:e6:e6:29:d0:62:cb:20:be:bc:81:02:5a:74:a2:13:
38:2d:ac:49:3f:2c:72:1a:e9:b3:14:c3:e3:28:1d:ad:c2:4a:
75:e8:c8:6c:7d:d4:66:96:c5:c6:5c:de:9d:58:1b:a0:4d:2d:
10:3d:19:eb:05:87:18:58:d3:7e:17:18:08:0d:2c:bb:7e:7f:
82:21:92:76:62:5c:fe:de:d8:5d:13:c9:9b:10:a3:b8:0f:5c:
f2:d4:09:dc:1a:43:91:31:11:08:f3:fc:27:1f:0f:c3:1f:fa:
23:67:8e:ed:7f:05:1e:c3:6c:38:65:a6:7f:b9:ea:fc:cb:18:
e2:0e:83:2e:cf:10:1d:ae:97:d0:8f:04:16:34:f4:4a:9e:df:
b3:bb:98:ad:8b:88:5a:81:40:cf:6f:98:47:f7:69:11:d7:28:
b8:01:b2:bc:6f:f7:bc:35:15:8e:ce:0f:34:4e:e8:be:50:29:
c2:ed:a2:4a:81:e2:3f:70:62:48:82:2b:67:80:d4:78:8f:b8:
a9:99:dc:c4:38:b2:a0:a4:78:52:1b:4c:88:23:60:ab:80:60:
3b:5d:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:49:17 2026 by rpki-client