Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: VNrhvnSlh1FK0NekmuEJqIj+bMO3KpUinje6JqSDhuk=
Subject key identifier: D5:CA:11:50:65:F3:EB:A3:2B:54:61:B5:F5:79:C7:FD:92:54:68:C0
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019D9E1B5BBC51B2006CAD420835967EEB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1044
Signing time: Sat 18 Apr 2026 01:01:26 +0000
Manifest this update: Sat 18 Apr 2026 01:01:26 +0000
Manifest next update: Sun 19 Apr 2026 01:01:26 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: 8TQKWdM+WG7Y6dT6LRdG4OgUAOBjEQOAYXy2nzJ9D/M=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:5b:bc:51:b2:00:6c:ad:42:08:35:96:7e:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Apr 18 01:01:26 2026 GMT
Not After : Apr 19 01:01:26 2026 GMT
Subject: CN=d5ca115065f3eba32b5461b5f579c7fd925468c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:67:ab:37:68:2f:5e:f5:b3:f1:3d:2a:f7:
51:a9:8d:ad:29:6c:3d:79:74:4a:ba:e7:90:1f:76:
83:87:81:1a:76:9d:3a:ae:f9:ac:15:5b:79:f0:a7:
cf:04:62:c9:29:9f:da:e5:61:bd:48:a8:7c:4a:c7:
aa:3c:5d:b5:50:57:22:47:63:45:7b:63:db:d4:24:
5a:32:36:85:7a:5b:ce:82:bd:0d:c8:e5:89:86:ad:
d2:a8:7e:c8:f2:60:ac:95:dd:9c:14:34:45:ed:0c:
20:c5:37:c9:16:f8:22:9e:a3:80:3f:b1:8d:95:d9:
49:76:f5:f3:b2:88:16:2e:d0:fd:98:d1:e5:64:9d:
2a:38:3e:b7:91:6c:a6:6a:33:9d:b9:0e:f6:d8:24:
ed:d1:6d:b2:35:0c:e0:14:4d:b4:4c:07:2d:ea:d3:
38:7e:cf:b7:d1:38:cc:09:8d:ad:b4:c4:7d:5b:4f:
33:43:1b:20:68:4a:bf:56:f8:53:81:6d:89:43:d7:
c9:2a:6d:c3:e0:92:ac:5d:7b:70:a4:a6:22:3a:5d:
fe:a9:4e:c1:84:8b:56:f3:42:e9:84:87:18:f8:3c:
d4:54:d4:98:06:a7:31:58:54:90:0e:f0:d5:40:18:
00:06:87:03:5e:5a:95:ca:3e:6a:20:87:e0:03:ee:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:11:50:65:F3:EB:A3:2B:54:61:B5:F5:79:C7:FD:92:54:68:C0
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b0:c0:2d:28:4f:3d:fd:1a:e6:2b:22:61:1d:27:cb:a9:d2:
e2:42:af:8b:4a:59:aa:cd:0a:c4:18:9e:fb:0e:ab:d4:f4:0c:
a4:93:47:24:88:11:ab:6f:a2:69:2d:89:c9:19:95:70:95:f5:
62:9c:a1:34:b3:80:6a:f0:57:45:d3:12:15:fc:f2:be:1f:5a:
7b:76:84:7d:a9:08:49:81:1c:1e:2b:ab:3e:fe:9b:fc:22:4d:
17:73:8a:bc:c1:2b:41:13:67:82:97:3a:89:00:31:63:ea:f2:
7a:5d:b4:1d:ef:5e:bd:e4:2e:3f:b0:d4:49:a4:98:d1:c3:6f:
a4:40:0f:c0:04:e8:51:3e:85:81:00:ae:68:a5:f0:42:7f:c2:
b1:bd:4c:0a:f9:ff:ea:1e:78:df:c1:e0:76:ce:74:cd:7e:46:
db:2a:0c:70:bf:4a:72:d7:77:fd:6b:f0:cb:e5:03:0a:ff:1c:
2b:fb:40:d1:47:25:6c:15:11:04:be:c4:ad:9b:39:cb:0d:8d:
ed:82:3f:52:5b:6a:01:61:67:70:01:b2:40:40:52:6c:3a:18:
04:70:ca:37:5a:c5:6e:91:3e:e0:6c:7f:af:7e:a6:20:ac:da:
6d:00:4e:7e:56:24:e8:5c:72:4c:03:50:01:a2:b4:5b:b9:c4:
2b:c5:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:18:09 2026 by rpki-client