Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: /zroTLfxPfQOi+zTPJzxpMKkRTLN6o8u8e9Xw8R+AgE=
Subject key identifier: 0D:57:25:C4:FC:D6:71:D5:A5:93:7D:FA:7B:D2:DA:02:3B:56:94:91
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019D99D04487B932ACF0D79C693067D97143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 13A2
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: nKw5QR9Zfymb1OR16jANNvI4pICPNuzFVtO9IeqIJZE=)
2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:44:87:b9:32:ac:f0:d7:9c:69:30:67:d9:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=0d5725c4fcd671d5a5937dfa7bd2da023b569491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:89:f3:0d:14:2a:8a:07:17:93:92:19:56:
de:ba:90:f2:b4:36:8b:cb:a6:a0:4d:ca:3e:f0:af:
3b:69:2a:dd:4b:97:73:c2:0e:64:25:9d:b3:3f:93:
79:dc:4a:3e:65:7c:bc:75:a1:30:25:39:9a:cc:19:
11:34:02:e5:e8:1d:13:5f:9d:85:c4:0a:7e:4a:98:
e3:78:28:b5:08:c3:2c:0a:b7:13:67:f7:1c:2a:d2:
97:42:b6:c0:26:6d:9c:59:4c:87:27:a4:83:5c:41:
3a:cc:bf:c1:98:c9:7a:83:fb:46:5f:5b:72:e1:36:
d2:31:9f:e4:76:97:32:c6:ce:c8:fa:26:8d:f6:8a:
7a:01:a0:d6:2c:98:6d:22:48:0a:bd:25:49:1b:46:
e0:1d:71:3d:01:b3:cb:4c:2c:e0:e3:f3:32:cb:ee:
ec:be:63:cd:e0:99:6f:72:a0:d5:f6:41:db:6a:5f:
71:ac:c6:05:c2:11:14:14:55:ea:98:29:38:db:76:
74:d9:44:2a:27:5e:80:6b:af:49:d7:28:d8:48:ce:
b5:56:e5:3e:58:65:4c:52:eb:25:be:e4:3b:6f:43:
fe:a1:f4:da:fb:9d:41:f8:63:a5:83:be:65:6f:85:
54:00:d1:ef:2c:9a:a3:23:46:df:f2:08:2d:07:fc:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:25:C4:FC:D6:71:D5:A5:93:7D:FA:7B:D2:DA:02:3B:56:94:91
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:58:1f:ea:9c:86:b9:53:5a:0b:0f:01:c4:dd:1a:19:90:96:
b7:09:7b:9c:e2:5f:01:65:c1:e2:e9:47:d1:ed:02:fc:04:fe:
ab:df:8e:07:71:50:8c:96:df:f1:fb:7f:59:b4:6d:44:31:56:
07:5f:d2:50:ad:b9:39:c4:78:d1:96:fe:44:15:76:8a:c8:42:
ca:b0:7a:2e:a7:60:ff:bb:5f:5b:23:42:0e:55:91:e5:60:9b:
72:64:ad:0b:a0:44:28:e9:f4:d9:13:6d:03:de:9f:76:28:b1:
89:08:ae:57:c6:97:34:23:e8:50:bc:d5:2b:66:81:92:19:c1:
fc:e7:da:a5:b4:82:2f:78:13:20:f8:c7:9e:02:eb:58:0c:a7:
f1:74:5a:61:a6:c5:7a:c2:1c:54:ba:93:a1:cd:10:79:60:34:
8a:a0:bc:6d:ea:fe:53:27:35:58:45:13:aa:5d:b1:ea:98:55:
7d:13:98:1b:2b:37:b3:b7:d4:82:3f:e0:d4:bf:3e:e0:e2:92:
39:73:27:91:c7:18:b4:f4:ca:24:c5:d3:7e:56:ff:61:1b:a0:
df:96:1e:1d:bc:da:e1:df:26:b2:91:1c:fe:cb:82:26:70:d1:
90:10:e4:78:45:92:e5:ce:05:a2:f9:58:94:26:5d:3d:e8:b9:
9b:75:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:39 2026 by rpki-client