Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier: NXcZ7pH7NN26GXDVjkOizjZl8VIKbENON5AUkdEfxZw=
Subject key identifier: 4D:84:79:1D:DE:76:76:6E:69:DF:FC:81:F3:0C:00:86:C4:B4:6E:6D
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial: 019D9D3EBE0528276BEF13FE26313E316F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 21:00:27 +0000
Manifest this update: Fri 17 Apr 2026 21:00:27 +0000
Manifest next update: Sat 18 Apr 2026 21:00:27 +0000
Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: QdqgYnuHsxO2+FIeZS9XjjmTNCJQjBY6A3W5tKLQOm4=)
2: hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa (hash: miQnkWv8mirrfM7hx7qM+NHg3ouKJ2L8VE2wiL5w/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:be:05:28:27:6b:ef:13:fe:26:31:3e:31:6f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Validity
Not Before: Apr 17 21:00:27 2026 GMT
Not After : Apr 18 21:00:27 2026 GMT
Subject: CN=4d84791dde76766e69dffc81f30c0086c4b46e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:36:a8:88:89:5a:62:5f:46:7f:44:88:c4:
62:fe:13:cc:17:7f:92:c2:a2:1c:c6:43:49:22:0d:
6f:d6:ac:ef:99:ad:7b:5a:dd:fa:5c:df:81:58:4d:
3c:d3:bb:8e:b6:74:66:43:97:33:45:69:85:ce:c0:
26:e0:a5:23:19:09:50:46:51:bd:29:7f:4e:db:86:
b3:9f:ce:87:56:e2:be:77:1d:29:70:d2:89:59:ac:
c0:19:80:c6:73:2b:48:80:94:a5:17:73:69:59:4f:
62:1a:ea:57:f0:53:ad:dd:ac:af:af:d7:fc:67:e7:
71:e3:1e:95:b1:bb:75:0b:c2:22:df:cb:e1:74:65:
51:ce:f3:c2:51:83:5c:d0:74:7b:65:ef:52:a3:e9:
97:c3:21:c8:d6:e1:5d:7f:28:ce:b0:b1:0d:4d:64:
c9:6c:67:b0:71:ca:b0:6d:76:e3:8b:15:66:35:af:
c0:88:73:c0:d0:df:b5:c7:8f:64:f5:7a:6e:95:0b:
1a:92:2b:42:ec:f8:55:83:e1:93:64:f8:fc:55:ff:
28:3b:20:de:5b:cf:52:da:81:db:04:fc:e4:e1:31:
61:b8:25:1c:24:3c:6b:10:a8:57:a1:55:93:73:da:
80:99:00:92:cb:12:ba:d2:45:ae:f6:8c:1d:a9:4d:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:79:1D:DE:76:76:6E:69:DF:FC:81:F3:0C:00:86:C4:B4:6E:6D
X509v3 Authority Key Identifier:
keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:3d:c3:4f:1f:9e:8f:3f:f9:65:8e:4e:14:39:da:ff:bf:
b5:94:e0:d9:ef:3f:33:c1:30:22:30:29:01:ff:c2:4b:ef:b2:
ea:7a:ef:0f:cc:be:2c:59:5a:f4:71:0a:dc:11:96:24:c8:3e:
33:f5:af:6d:cf:9b:be:cf:70:d7:60:d0:90:fe:3c:56:4e:9d:
e6:2f:6f:7a:0c:ea:34:df:bf:be:f4:ec:48:27:62:04:da:c2:
08:58:5a:4c:d2:a6:00:47:62:fb:65:ec:b4:61:70:91:db:a8:
65:bb:16:5e:45:9a:b8:38:7b:d4:bb:99:83:9c:65:8d:92:17:
1f:cd:8b:4f:5a:d8:6b:c6:19:40:9a:26:24:ef:03:03:49:d9:
10:cd:ff:04:01:46:d0:ae:78:48:09:6e:28:84:cc:2a:dc:52:
a3:87:17:6f:2b:25:38:67:e1:b6:a9:48:99:b5:54:68:52:8c:
2b:af:ca:60:9a:50:0b:dd:db:86:a6:42:53:8b:1b:f6:fd:af:
3c:96:86:0c:dc:99:1a:b9:5d:76:f7:81:eb:50:f2:fc:a7:6a:
9f:0f:c3:ff:81:c2:cf:21:6c:35:15:f4:1a:84:fb:f0:7f:7d:
59:68:12:ec:b1:8c:5f:5f:70:bd:4e:24:24:c0:1c:05:c3:cb:
52:2d:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:19 2026 by rpki-client