Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: /0MKJpb7lPV4kuLiW04BcuwAfQfJjJKAyoyFnh49x74=
Subject key identifier: A0:70:78:74:89:73:27:72:C9:C8:7A:A1:07:14:F8:D0:4E:09:31:82
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 019D9AAB7666F62BF18F76D7679DBC5B44E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:21 +0000
Manifest this update: Fri 17 Apr 2026 09:00:21 +0000
Manifest next update: Sat 18 Apr 2026 09:00:21 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: sA4rlsCalpsNJO4nstIREeUQ8vrQ57I2Db5+aRczJHg=)
2: DKP0PbTK1N5jCO5TTlWyX5Rw5cM.roa (hash: FTS7rWAdFS8UyAMp19YH0zdu88+Df8yK+Znwjqplx54=)
3: sA6Qf2_ToIyGcsbWCFpl1ww3zYM.roa (hash: wfbilCSxn7pd6CKUaeLQcmM0OSGs3jIpHSCViiEgaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:76:66:f6:2b:f1:8f:76:d7:67:9d:bc:5b:44:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Apr 17 09:00:21 2026 GMT
Not After : Apr 18 09:00:21 2026 GMT
Subject: CN=a070787489732772c9c87aa10714f8d04e093182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:41:6a:51:8e:47:4f:91:b3:49:51:87:02:
96:01:cb:32:6a:b3:76:ea:63:62:3b:0f:58:cc:90:
2e:33:c6:54:b4:11:fa:f9:76:ed:46:c5:90:d3:2b:
26:86:70:aa:1f:35:c7:b0:27:c1:bd:9b:6c:9d:a5:
ee:26:d0:b4:21:d9:0f:6d:5e:aa:b9:f4:48:75:96:
cc:fd:ac:a2:32:b7:31:c4:9f:d8:dc:95:b6:29:47:
b1:09:f7:57:96:a2:e2:a0:58:d1:ce:7f:cb:37:76:
83:fd:b9:17:59:c3:9a:58:c8:60:4a:5b:ba:ee:49:
fd:de:80:85:7d:3a:94:bb:a2:ce:3b:0f:1a:d1:aa:
91:58:01:dc:dd:66:9d:a2:9e:50:41:c8:0e:fa:49:
e5:f5:74:82:b5:f0:82:20:09:71:1f:52:67:67:c2:
00:35:8b:72:c8:ce:84:5b:26:6c:9d:07:88:16:5f:
56:48:49:4d:13:5e:c1:4b:8c:82:0d:35:1b:27:96:
a3:fa:20:da:09:26:cb:5e:92:fe:5e:e3:7d:c2:3e:
e1:ae:7a:69:fa:fc:1d:f8:dd:36:da:06:ad:6d:5a:
de:db:e3:10:98:51:8c:cf:e9:0d:73:3c:d8:52:2d:
38:30:66:c5:47:fd:42:01:39:30:0f:4f:77:6f:7f:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:78:74:89:73:27:72:C9:C8:7A:A1:07:14:F8:D0:4E:09:31:82
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:3f:91:be:b7:dd:c7:b3:62:d2:11:99:c7:d9:f0:5f:d5:
07:45:85:ab:da:14:2d:89:e9:4e:25:f8:1a:1f:80:55:9f:cb:
31:03:aa:23:ff:b4:43:10:6c:fc:83:73:02:be:f3:ed:0b:80:
d2:5a:7a:75:2f:f8:90:57:b3:69:a2:ee:f3:88:81:5c:9e:06:
e8:01:3d:27:f1:9f:59:c0:45:9b:d1:45:92:ed:d9:ab:f7:3a:
74:b8:0d:c9:09:d5:d9:2d:c0:b4:8b:9e:bc:23:72:d8:38:57:
90:74:0f:08:51:99:dd:76:ba:7a:d5:ed:fb:92:be:e2:69:51:
d8:03:60:bf:62:f6:8d:91:2a:e4:d9:7b:57:7b:fc:95:c0:3d:
65:d1:39:89:8a:82:c7:29:98:e0:9b:b9:7b:73:c9:07:06:79:
0c:90:80:74:d5:32:9d:78:0d:86:30:2f:f5:de:c9:51:8b:01:
1b:2f:4d:d7:12:fa:ea:42:92:88:dc:e8:1e:3d:39:04:6b:e5:
f3:cd:b5:e0:18:75:f5:45:3b:fc:a0:fe:e5:bb:d6:ee:1b:fe:
03:b2:59:d7:20:a7:d8:3d:e2:00:8c:72:59:72:a2:12:07:b7:
1f:5f:02:30:7f:0c:72:1a:d0:4c:99:2e:21:33:97:57:00:6c:
f9:ee:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:51 2026 by rpki-client