Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier: jz4WGe+2rQ9oWxUOkvWkJMYdy4i6/C1YJZzKSbFcQAU=
Subject key identifier: 56:1B:5A:FF:1C:F7:12:AF:EF:AC:4A:27:F7:1B:72:51:5E:68:1D:75
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 019D9B87D13C6F6575629F1FF9C3B999093E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:02 +0000
Manifest this update: Fri 17 Apr 2026 13:01:02 +0000
Manifest next update: Sat 18 Apr 2026 13:01:02 +0000
Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: cR2DaF6JdHvHtGf5t5ul2GmSX3emD0EIE10ZyuWkyO8=)
2: fAH5HGr0FJnwVfimBME1mjRTR6I.roa (hash: JoiS3vBcWeJyqI74VLwhU1NQ94a4ip5InVm6CERVHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d1:3c:6f:65:75:62:9f:1f:f9:c3:b9:99:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Apr 17 13:01:02 2026 GMT
Not After : Apr 18 13:01:02 2026 GMT
Subject: CN=561b5aff1cf712afefac4a27f71b72515e681d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:4e:d6:3e:21:1b:17:0f:c5:c5:69:fe:c2:
15:21:a2:f9:13:ed:a0:4d:61:9e:9d:19:2d:b8:18:
58:40:cd:92:f1:2a:04:7b:de:ae:e1:c6:e6:16:b9:
e1:5e:4a:3a:2a:e6:94:e6:d8:42:4e:cf:d8:40:9c:
f4:6d:21:9f:5e:11:34:36:91:f7:04:cf:1c:74:06:
d2:84:3e:c7:bb:c5:40:84:73:33:8a:f6:0c:d9:05:
be:a0:7f:d9:91:4f:72:31:aa:5a:2d:5c:ba:98:65:
00:29:1e:1c:a1:62:5f:c6:e2:e2:1c:1a:d1:3d:b6:
a1:f0:65:fb:e1:20:0c:f8:2a:6e:23:94:a5:ff:82:
e2:f7:e2:53:da:dc:1b:f0:84:e7:0c:2f:06:be:67:
d6:85:a8:07:22:2d:7f:b4:2a:56:d6:a2:a0:26:1c:
84:af:9d:01:a0:16:2a:03:c6:ea:db:15:2b:6b:eb:
ae:6b:e9:d2:0e:52:e1:9d:03:42:79:a4:b8:74:60:
08:c9:6e:9c:4c:20:88:44:50:ca:92:7a:fa:46:29:
c5:1a:8a:d0:37:ff:7c:79:ff:51:3d:8c:92:cc:d0:
1d:45:ef:08:4a:52:79:02:85:60:1b:57:10:6a:47:
41:e3:da:9d:46:82:1d:50:0e:19:8e:42:11:da:cf:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:5A:FF:1C:F7:12:AF:EF:AC:4A:27:F7:1B:72:51:5E:68:1D:75
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9d:78:8b:d6:f7:3d:ce:cc:51:5a:42:a3:28:a0:0b:78:8f:
54:4d:ca:fa:94:8f:bb:d0:67:a1:50:f4:4b:2f:44:75:4c:c5:
49:9a:ec:88:d6:47:0f:4c:ad:98:96:1c:69:13:48:d0:8e:c6:
6f:da:fe:9f:89:68:3b:3d:17:eb:35:96:73:8d:a9:d4:d9:58:
81:b1:db:9e:e7:37:20:f2:a2:b3:85:7e:81:a4:2a:e1:c7:ce:
dc:02:06:0c:b7:a2:87:50:50:8d:4e:73:86:fb:ca:00:03:82:
46:b6:39:9a:95:93:51:24:ce:8f:0f:c5:72:2f:3d:2b:cb:8f:
0b:00:0a:f3:dd:4a:ee:a9:fe:26:dd:b4:92:34:8c:a5:e0:78:
67:67:d7:6c:9f:89:c7:2b:af:21:73:39:53:0b:d5:e6:bc:b6:
f9:1e:d0:c6:ef:07:60:b5:c5:8b:44:6c:b1:84:e8:0a:2c:8e:
c0:d4:c2:2b:50:07:32:06:e9:72:7f:f6:7c:4c:b7:1c:79:2f:
9d:51:2a:01:48:0e:b6:85:48:5d:60:77:5e:c3:ef:75:a2:2a:
c0:a1:2d:45:68:28:a6:45:89:a2:68:85:ed:6d:f5:2b:fc:1c:
9a:5b:92:fd:89:f6:d8:55:d0:e8:e8:c7:d2:96:c0:b1:8c:47:
91:4d:13:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh9E8b2V1Yp8f+cO5mQk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzdjOWE0NDJhOGI0YTRjOTEyZjExYmMyYjZkM2NmMTAw
YWRmNDIwHhcNMjYwNDE3MTMwMTAyWhcNMjYwNDE4MTMwMTAyWjAzMTEwLwYDVQQD
Eyg1NjFiNWFmZjFjZjcxMmFmZWZhYzRhMjdmNzFiNzI1MTVlNjgxZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGFO1j4hGxcPxcVp/sIVIaL5E+2g
TWGenRktuBhYQM2S8SoEe96u4cbmFrnhXko6KuaU5thCTs/YQJz0bSGfXhE0NpH3
BM8cdAbShD7Hu8VAhHMzivYM2QW+oH/ZkU9yMapaLVy6mGUAKR4coWJfxuLiHBrR
Pbah8GX74SAM+CpuI5Sl/4Li9+JT2twb8ITnDC8GvmfWhagHIi1/tCpW1qKgJhyE
r50BoBYqA8bq2xUra+uua+nSDlLhnQNCeaS4dGAIyW6cTCCIRFDKknr6RinFGorQ
N/98ef9RPYySzNAdRe8ISlJ5AoVgG1cQakdB49qdRoIdUA4ZjkIR2s85OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYbWv8c9xKv76xKJ/cbclFeaB11MB8GA1UdIwQY
MBaAFOc3yaRCqLSkyRLxG8K2088QCt9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTIt
MzFmNjAzNzNhMDkyLzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTItMzFmNjAzNzNhMDky
LzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ14i9b3
Pc7MUVpCoyigC3iPVE3K+pSPu9BnoVD0Sy9EdUzFSZrsiNZHD0ytmJYcaRNI0I7G
b9r+n4loOz0X6zWWc42p1NlYgbHbnuc3IPKis4V+gaQq4cfO3AIGDLeih1BQjU5z
hvvKAAOCRrY5mpWTUSTOjw/Fci89K8uPCwAK891K7qn+Jt20kjSMpeB4Z2fXbJ+J
xyuvIXM5UwvV5ry2+R7Qxu8HYLXFi0RssYToCiyOwNTCK1AHMgbpcn/2fEy3HHkv
nVEqAUgOtoVIXWB3XsPvdaIqwKEtRWgopkWJomiF7W31K/wcmluS/Yn22FXQ6OjH
0pbAsYxHkU0TUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:03 2026 by rpki-client