Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: RwtB7X7dwjVU3Yz4UWkcCnldWZeseJZ/nB1aB4iNPPM=
Subject key identifier: 9F:8E:CF:F8:F6:DF:8A:75:E9:FC:22:59:27:3C:EC:18:DE:AF:43:39
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019D97E24839DB10E028EDCBD7A973D980FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 052A
Signing time: Thu 16 Apr 2026 20:01:22 +0000
Manifest this update: Thu 16 Apr 2026 20:01:22 +0000
Manifest next update: Fri 17 Apr 2026 20:01:22 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: Pk6tmyCwDJy0F0MTS6sf3bt6hxuXgDej4bR7+12fC1Y=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:48:39:db:10:e0:28:ed:cb:d7:a9:73:d9:80:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Apr 16 20:01:22 2026 GMT
Not After : Apr 17 20:01:22 2026 GMT
Subject: CN=9f8ecff8f6df8a75e9fc2259273cec18deaf4339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:64:dc:fa:55:79:10:fb:7b:85:ff:21:e0:
9d:d4:80:dd:3d:55:4f:cd:f9:01:8e:6f:6f:37:8d:
b6:67:1f:93:cc:3f:7e:65:8a:49:91:db:5b:58:20:
0d:19:f6:fe:88:1b:c3:4f:2b:dd:9e:e1:26:a9:fe:
a4:ff:ed:1b:26:8d:83:3a:7e:49:6a:34:df:ef:3a:
43:56:4b:84:92:0b:1c:ea:04:c7:8e:8b:0f:6c:31:
7a:d3:28:b7:48:52:18:1b:16:1c:42:df:b5:7f:fa:
ab:57:a2:1a:d3:49:82:51:bb:ee:c0:34:26:1d:e2:
fb:fd:b9:d6:e5:a8:b2:41:15:90:bb:66:86:f6:4c:
ee:04:f4:8d:9c:33:7d:4b:f6:a1:4c:da:69:25:e4:
63:08:20:44:9c:9f:2b:3c:67:44:64:74:04:ad:92:
75:e3:12:ff:68:c1:9d:f7:3c:8a:d4:fa:0e:8f:fc:
7a:81:dd:4c:03:ca:ab:b0:05:3c:10:32:bd:e9:cc:
fa:2f:1c:75:5a:7d:90:49:58:d3:b5:a6:c7:ed:46:
7e:75:42:ab:bd:a3:01:ce:6e:4b:38:d7:b6:e0:09:
5a:dd:e3:26:80:ae:9a:f8:fa:fe:5a:58:e9:73:b9:
63:6e:6a:17:94:d2:7f:e3:67:25:96:cc:55:74:5a:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:CF:F8:F6:DF:8A:75:E9:FC:22:59:27:3C:EC:18:DE:AF:43:39
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:c5:20:47:20:7b:02:3a:9c:17:72:d8:3d:af:c4:4c:7b:
85:5d:e5:7c:fb:42:16:1b:ee:05:7d:1a:96:c2:ea:af:43:d1:
58:ca:be:a7:d4:3b:9c:54:2d:26:f2:03:2d:47:b7:b9:73:62:
d6:c4:f6:37:5f:76:11:ee:2d:e7:83:4a:31:ab:f6:5d:08:8d:
a9:51:02:2b:22:4f:0e:84:7a:f9:73:d5:1d:a7:0d:73:59:54:
5e:12:bd:d9:57:78:85:ab:d5:29:86:26:b8:19:8c:ac:3f:5e:
89:c4:ad:2e:b2:86:69:c0:2f:7d:eb:f2:0f:12:c1:e3:1b:8a:
8a:2c:ba:73:ab:8c:f7:ab:91:6c:ce:39:29:a6:bc:98:16:3d:
cd:db:c1:df:9e:11:e6:8a:d1:66:ff:cc:3d:23:84:9d:7f:ef:
6d:54:38:48:bf:80:39:38:40:5c:b6:14:f7:67:25:c0:fe:f8:
a3:8f:68:c8:12:cd:71:5b:53:fa:db:6e:59:1c:85:05:6f:42:
d4:7b:73:7a:73:f5:de:0c:c8:9c:7e:9e:31:69:9a:f8:e5:f4:
61:10:16:93:5b:50:5a:a1:9b:b8:62:a4:4e:48:67:64:19:7f:
2b:81:0f:5f:ce:61:a2:e9:dc:32:4a:ca:32:2d:9c:f1:94:21:
01:75:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:42 2026 by rpki-client