Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: XFMVQ/qAmRJL5gbRkjoX9+XaIJeRKHA4KPqEOMaTVIM=
Subject key identifier: 58:C1:6A:F7:E9:F2:44:FC:05:E5:80:87:C8:FB:E2:C8:F2:FA:26:E1
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019D9961E3389B3266FBC3914595F55F9C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 15C5
Signing time: Fri 17 Apr 2026 03:00:22 +0000
Manifest this update: Fri 17 Apr 2026 03:00:22 +0000
Manifest next update: Sat 18 Apr 2026 03:00:22 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: rf815aj2S/JmACDJADrHlKmgCogBxynbOYeRVDl23Kk=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e3:38:9b:32:66:fb:c3:91:45:95:f5:5f:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Apr 17 03:00:22 2026 GMT
Not After : Apr 18 03:00:22 2026 GMT
Subject: CN=58c16af7e9f244fc05e58087c8fbe2c8f2fa26e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:9c:62:12:18:82:78:f6:37:19:4d:cf:1f:
85:57:3c:6c:f4:b0:a8:9f:0a:ea:6f:e3:53:fc:85:
48:63:ba:40:21:a1:38:c8:a3:4d:13:36:ca:b6:0a:
02:32:dd:5b:0a:e7:3c:0a:b4:f3:77:ed:90:27:41:
7d:d9:8c:2c:b3:07:4b:14:5c:a9:48:6a:6b:c8:55:
7c:11:38:d9:e6:15:2a:4c:71:f4:2c:5b:f9:06:10:
61:9e:e8:a5:e9:3f:dd:2c:09:a5:f4:9f:22:59:72:
46:85:53:82:1a:bb:3b:a1:ee:e4:eb:77:0a:fb:19:
5d:a8:f4:9c:27:e0:c9:99:95:0b:f9:3b:eb:60:a9:
b0:8c:34:e6:94:25:9e:3a:16:f1:e6:2a:cf:ce:b9:
08:56:6a:b4:61:25:8f:06:ae:22:d9:7e:f9:f8:6d:
88:1f:d4:cd:f3:04:a3:9e:60:af:9c:03:58:2c:43:
f6:d4:80:ef:55:b0:98:eb:bb:82:a0:ab:42:5c:3e:
0e:55:43:d9:38:60:e5:c7:4e:e5:56:14:80:c6:c4:
9e:4a:f3:d4:fa:7a:1c:78:0a:60:40:43:32:7c:e2:
a2:74:02:90:44:3f:fe:21:83:09:87:85:67:07:fd:
a9:78:2f:17:83:97:27:0b:10:b9:7d:3b:f5:0c:0a:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:6A:F7:E9:F2:44:FC:05:E5:80:87:C8:FB:E2:C8:F2:FA:26:E1
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:69:e6:15:54:aa:a6:2b:4f:fd:89:68:b8:44:ca:7f:20:
e2:39:c8:d4:90:9b:7d:40:7a:3f:50:83:3f:99:23:f1:6a:ca:
e9:5c:d0:a5:50:ed:f0:61:bc:09:bc:c8:8a:ca:93:e7:da:f4:
d5:cc:ac:04:7c:e4:b5:69:39:f4:1f:67:a4:c5:c8:fc:6c:e1:
7c:5f:a0:48:1b:ae:43:58:66:a2:d8:1c:d9:21:a5:18:d3:ea:
97:5e:a2:7c:be:1e:4f:55:a0:e9:e7:e3:c7:65:e4:44:11:1c:
60:3d:a7:f2:d4:49:bd:e0:31:0a:7d:73:25:20:d2:7b:3d:29:
2b:e8:ae:0f:2d:2c:16:39:3f:e2:69:ba:2e:05:c9:3c:7b:d4:
fc:45:25:79:c1:72:6e:ed:32:4c:93:8a:aa:09:b1:62:3b:e3:
c0:b5:77:98:c8:db:6e:95:cf:dd:6e:f8:07:30:b4:bd:87:94:
6e:f5:48:54:ca:98:5d:7c:53:d8:8d:e9:4f:15:fc:5a:48:f0:
a3:c4:4a:0b:42:48:e0:3a:1b:f0:61:4a:a7:a3:08:5f:a0:d4:
66:a2:b5:00:a7:a4:0e:88:61:a6:5c:6f:65:b2:33:17:ea:ce:
5f:ae:56:45:74:1d:d4:a5:07:53:2e:30:53:da:80:d5:3e:1e:
b4:d3:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:04 2026 by rpki-client