Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json)
Hash identifier: ENIP+ujDsLrytjcNAN0XmcoSl/5+GB5dKNk1Xo1GwNg=
Subject key identifier: F5:72:A3:50:F1:09:19:FA:CC:15:09:35:A8:B7:19:B0:43:16:5C:EE
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial: 019D9BBE3E9CDDF3565E03838A7E6E4880FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
Manifest number: 0B7B
Signing time: Fri 17 Apr 2026 14:00:29 +0000
Manifest this update: Fri 17 Apr 2026 14:00:29 +0000
Manifest next update: Sat 18 Apr 2026 14:00:29 +0000
Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: zvw1pTlD+PWRqke2LjGoo8XFavAHylb3Q1b5dBG6mIw=)
2: xc5xrWodv2gFZRKSAH7N3QLmArg.roa (hash: d0lBtchfHuWBGmCrcDkn15hRm8o0/JbHM7LE2mVw2TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3e:9c:dd:f3:56:5e:03:83:8a:7e:6e:48:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Validity
Not Before: Apr 17 14:00:29 2026 GMT
Not After : Apr 18 14:00:29 2026 GMT
Subject: CN=f572a350f10919facc150935a8b719b043165cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:ce:16:3c:22:60:6f:34:a2:f7:55:05:ff:
76:82:88:2a:30:f0:0c:dc:a7:06:aa:3d:a6:ce:4a:
06:b2:68:06:27:0d:79:c9:85:e6:00:1e:85:43:ae:
18:78:cf:7e:5a:b0:8f:98:c4:0c:15:81:3b:d3:97:
3a:35:17:a0:3a:ce:8d:64:09:4f:8f:2c:76:31:c1:
7e:a1:4a:e6:7f:84:48:88:22:a5:ec:7b:e6:c3:b6:
e0:e4:90:90:44:89:8a:bf:7d:de:28:a3:1f:da:28:
80:96:af:c1:51:78:0e:56:43:bc:04:b3:d9:c9:d0:
71:dd:52:7b:87:99:8e:d8:19:2c:eb:b2:ff:cd:34:
06:46:9e:9d:69:34:f2:bc:fb:70:ee:e2:95:7d:2e:
b7:cb:87:7c:01:df:69:04:35:f9:c9:13:c8:32:6e:
a2:e5:47:41:a6:79:a1:86:97:34:f5:a3:ba:88:4d:
8b:50:df:3d:e0:2d:31:f8:37:f9:75:87:02:4f:af:
fb:c6:d0:37:cf:cb:c9:fe:83:3c:65:9c:d5:1d:6a:
39:91:5d:d2:ab:1c:41:34:ae:df:a4:03:c2:b7:28:
e5:d6:69:1f:99:2c:a1:4b:6f:2d:43:d9:0b:ad:de:
ce:8d:26:a2:e8:12:c4:fa:d7:5e:47:b0:43:3e:d9:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:A3:50:F1:09:19:FA:CC:15:09:35:A8:B7:19:B0:43:16:5C:EE
X509v3 Authority Key Identifier:
keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:68:fc:4f:c7:f8:0b:bc:f1:d0:e1:9e:cd:a8:e3:dc:9a:
92:c6:88:c6:c9:b6:47:6d:8a:e9:f1:e8:8d:f7:3f:14:96:4c:
02:f5:d0:75:1d:ad:4b:25:d2:59:15:26:01:07:db:d0:57:49:
a4:53:fd:22:3c:5a:8b:43:f1:52:20:10:2f:4d:d5:3d:5b:15:
17:14:39:f8:30:f4:af:1a:3a:13:e2:11:7a:df:f2:4c:79:97:
36:44:57:1c:dc:29:cb:59:bc:b9:62:c3:32:16:67:ea:48:77:
f3:7c:b7:cf:42:09:ed:a7:d5:fb:d1:ac:ab:d4:3c:87:b3:35:
52:52:ec:7f:a6:f3:92:0f:7f:d7:f4:3d:16:f7:78:1b:86:ad:
49:05:0b:58:70:77:94:74:ab:bc:ce:9e:07:c6:1c:bf:ca:83:
ec:0c:2f:2f:62:85:a0:7d:73:bb:52:ad:d9:05:99:d7:05:60:
a0:46:86:95:cb:ba:35:43:78:12:18:28:2d:88:e2:fc:25:85:
75:ac:f7:a1:39:da:56:25:17:8d:ae:79:d0:bd:37:67:40:d3:
91:92:93:c2:90:f6:0f:83:85:a4:64:7c:3e:14:cd:49:7e:25:
8c:4e:0f:3f:55:78:6d:cb:10:70:8b:d3:46:4a:39:d9:2c:bb:
22:8a:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:02 2026 by rpki-client