Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: Iw9/WezLIZpUi0jg7Kt+CFxCuwfoReaVPULERSneKwE=
Subject key identifier: 54:7C:37:EE:92:77:BA:CD:BA:61:FB:4E:A5:70:0F:AC:E1:7B:30:C3
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019DCE9931A46D86DF6328EFC46476699168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 11:00:39 +0000
Manifest this update: Mon 27 Apr 2026 11:00:39 +0000
Manifest next update: Tue 28 Apr 2026 11:00:39 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: TZxUkfmZNjcta9IPzVGP/EjRYBDcIiDdfUFDGY6QZ+g=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:31:a4:6d:86:df:63:28:ef:c4:64:76:69:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Apr 27 11:00:39 2026 GMT
Not After : Apr 28 11:00:39 2026 GMT
Subject: CN=547c37ee9277bacdba61fb4ea5700face17b30c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:7b:f2:c9:75:0e:5f:c9:fe:16:5a:77:15:
5f:3e:fe:27:03:88:d6:ec:c0:56:6c:0b:d7:cb:19:
e7:fc:20:bb:7a:94:c6:50:b8:60:2e:8b:34:94:91:
31:77:55:f5:8f:51:a5:c9:da:98:eb:ba:4e:d7:da:
06:d6:0b:74:f6:be:90:ba:a2:43:90:30:6f:87:62:
f6:b8:20:b8:0a:5c:34:98:3f:d3:9d:b8:1f:30:88:
c6:98:1c:bd:63:ed:d1:e2:f8:b1:56:33:d2:4c:5c:
1f:84:9c:d2:58:80:ad:7f:7f:a0:a3:d1:3e:65:78:
05:c0:82:a4:b5:38:3f:7b:ab:a6:be:4e:04:11:36:
6d:5d:a5:c7:7a:3b:82:29:a8:03:ed:44:ce:0d:c0:
62:1f:a1:63:4f:13:a9:16:88:db:22:59:11:1b:4a:
fd:11:b9:77:44:8e:7a:e1:54:13:98:aa:c2:e3:8f:
89:d7:a5:70:0e:c6:a9:b4:ce:c9:d3:9c:4b:16:e1:
29:ad:9e:f7:01:e2:cc:57:8b:f4:3a:8b:8f:e6:e3:
c2:44:aa:a6:6b:ec:a0:b0:d1:16:bb:d6:3e:b1:66:
3c:26:85:56:5f:98:f5:b9:c2:16:0a:44:f0:53:3b:
62:c3:b6:11:5a:b9:30:0a:70:e6:16:2a:3b:fa:6a:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:37:EE:92:77:BA:CD:BA:61:FB:4E:A5:70:0F:AC:E1:7B:30:C3
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:49:e8:e3:45:a2:65:56:aa:d3:fe:46:a6:79:d6:df:98:
49:5a:2f:6c:44:86:cb:e7:4e:7b:27:01:b2:8a:ae:87:be:70:
68:ab:cd:a2:d7:f0:f2:4d:ec:d0:25:b2:34:5c:d8:6d:7f:53:
9a:67:aa:eb:d2:83:40:91:b6:df:33:90:40:54:3a:e3:05:0c:
c1:fc:5b:55:1b:82:81:4c:11:f5:dd:96:62:63:cb:34:8b:65:
ce:71:7c:14:a2:af:99:b2:aa:d2:83:4f:d0:48:49:77:d9:00:
dc:7a:5c:f1:b5:ac:fc:7e:85:22:44:ad:56:d5:52:ad:02:6d:
d5:73:53:fc:29:1b:b4:85:cb:2b:e6:cf:e2:d8:48:7a:c9:0a:
ca:e9:90:1b:cf:e9:69:58:93:52:71:00:33:18:36:08:39:de:
08:35:62:0e:ea:41:ca:e4:d8:12:26:3c:45:42:ad:08:88:a6:
62:44:77:3d:b4:44:55:59:9d:2c:ec:87:c0:21:b5:74:5e:95:
52:f9:92:1b:79:8e:2c:cb:24:ab:29:02:5e:b1:5f:89:7f:fe:
2a:9a:ba:c9:46:ab:52:35:6c:0c:95:e6:9d:50:15:02:1a:ff:
86:e5:c2:24:d5:06:95:0d:4d:d4:bd:c1:7c:17:3c:43:47:5a:
0b:2f:11:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:09:23 2026 by rpki-client