Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: J9LJKMNcIWRjP9GrwRzxxjELqjxxDPqRrm9izWjgjVA=
Subject key identifier: 46:56:CE:AA:6A:C2:56:D4:91:BA:3A:9A:0D:9E:B8:7E:B7:2E:E5:3C
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 019DCFE3224870D92A5F7C0365282F3DAF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 17:01:02 +0000
Manifest this update: Mon 27 Apr 2026 17:01:02 +0000
Manifest next update: Tue 28 Apr 2026 17:01:02 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: 5Ap43uKS9uxUsAFTBvBzbbj7J/IcR/nvlIvJ2Xbmqmc=)
2: Ctsfhc1buhjsP-LDtiYQgEeAvsM.roa (hash: IcpxSZEbw6wlN8c6BwrewScxYORBAdj6421Et1q2/ak=)
3: QyLxV1GsI9UZiOqN--9VZ1wCfac.roa (hash: p/jV8Bz6xxYxD+AW9prSPsf+g1XW829odlRFlONQHfw=)
4: _HACinjTIxRkle58_-0RVGUxyaY.roa (hash: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:22:48:70:d9:2a:5f:7c:03:65:28:2f:3d:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Apr 27 17:01:02 2026 GMT
Not After : Apr 28 17:01:02 2026 GMT
Subject: CN=4656ceaa6ac256d491ba3a9a0d9eb87eb72ee53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:03:d3:e1:c5:b7:1d:ed:6c:3c:5b:a4:83:
5a:f5:84:d0:b5:eb:e4:f2:5d:ed:d7:07:76:f9:5a:
37:d0:a7:95:1f:48:f4:46:88:bf:22:8f:ae:24:89:
8a:4d:1d:6b:19:c4:89:69:ad:66:55:1a:e1:e0:01:
2f:3e:82:07:3f:64:61:96:95:0f:33:8a:c8:9b:de:
83:d7:00:6a:ca:79:d1:e9:70:53:dc:1f:fc:75:03:
7f:50:d5:54:64:47:0f:d9:af:32:9a:dc:21:a4:be:
eb:9c:9c:76:bc:36:68:89:39:c7:f0:9a:3a:9a:a9:
7d:ed:ef:c8:af:25:cc:b3:23:bd:8b:f2:f2:54:8b:
e9:52:ef:cc:c8:ff:27:40:c4:66:79:5a:de:fb:0f:
05:0f:4f:3b:8c:dd:a0:51:3a:8d:d6:d5:0a:7a:26:
7e:4f:c6:f6:b9:9f:91:b5:46:0a:f9:01:80:db:1b:
90:59:5b:60:e7:9b:b9:77:4b:c4:0b:09:e5:77:2b:
f2:9c:70:a8:a4:c5:aa:58:77:7d:c1:d7:3f:7d:3b:
87:ec:29:77:61:60:42:9c:39:82:17:08:0d:a9:e6:
43:61:e1:2f:4a:70:e1:2f:9f:c6:70:45:b8:05:d1:
f3:75:9c:1c:4f:f9:ce:87:f1:60:d4:ff:04:31:dc:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:CE:AA:6A:C2:56:D4:91:BA:3A:9A:0D:9E:B8:7E:B7:2E:E5:3C
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:fb:e3:bd:e9:db:9c:8c:32:a7:a2:bf:d6:c7:a1:4c:7f:
8a:de:29:bd:4f:49:0e:16:11:f2:5d:f6:52:16:d6:cb:cd:51:
41:46:7b:94:5e:9f:03:4c:a5:05:15:15:23:e8:ef:8e:64:b1:
92:fe:61:49:f5:27:2c:cd:9e:d2:42:c9:73:fc:59:d5:f3:6a:
22:65:b1:98:b5:bb:b8:de:e8:e5:30:4e:da:24:f9:3e:32:1b:
ff:e2:f0:c0:3e:a1:05:fe:ef:d2:5d:94:44:33:86:be:98:bf:
cc:dd:30:33:0b:97:b7:5b:1b:f8:f3:e2:59:2a:32:7d:4f:f1:
df:e1:4b:ff:02:6b:00:82:ab:15:81:20:c9:9d:10:6e:8a:ce:
5c:a5:e5:0e:ff:33:39:48:97:0d:19:9d:83:06:1d:b6:5a:29:
da:ae:31:5f:0d:a5:2d:a5:ff:67:cf:a9:ad:0b:bd:fb:3d:bd:
a1:d7:53:94:b4:c2:6c:64:95:a5:5f:f0:d5:2b:78:9f:b6:14:
14:35:02:5d:7a:c4:c1:f9:8a:9c:c5:d5:88:c5:d3:02:be:ca:
4b:79:b4:a1:21:0f:e1:f0:15:c1:8b:1a:95:e1:e1:45:53:9f:
c3:1a:7b:11:96:ac:78:90:2c:29:76:08:7e:0e:00:49:64:0c:
70:6f:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:50:27 2026 by rpki-client