Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: N4RqKi0GBWA1RP2DKoqUabHRG5CmDPJ1JccHSG8JJuY=
Subject key identifier: D3:10:D0:0B:06:C4:E4:13:C9:B9:2B:1F:27:29:63:85:D3:08:85:35
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019D98509587769346A5A9456EBCB6955FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0E13
Signing time: Thu 16 Apr 2026 22:01:51 +0000
Manifest this update: Thu 16 Apr 2026 22:01:51 +0000
Manifest next update: Fri 17 Apr 2026 22:01:51 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: rlcD+7euqJuVkGApAEFUzfb/QSceFXc+16L3N/zKf+c=)
2: kkPGy3M1-5xu9OIRpXmU25SAI2Y.roa (hash: cyrjAwqc3oU6K0wTg1ctpzSIWyDuDU/OKlnASWiAbYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:95:87:76:93:46:a5:a9:45:6e:bc:b6:95:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Apr 16 22:01:51 2026 GMT
Not After : Apr 17 22:01:51 2026 GMT
Subject: CN=d310d00b06c4e413c9b92b1f27296385d3088535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:4f:00:28:ea:77:b0:b6:99:8e:ac:9f:fc:
1f:8e:e9:45:b3:bd:cf:66:e4:05:be:0a:78:35:42:
ea:1b:c2:3a:11:1b:07:e1:12:97:4b:9a:03:b6:4b:
cc:e2:07:ef:f7:44:2a:89:ce:75:5f:bd:74:af:4b:
72:53:47:3d:15:15:71:b1:38:1f:15:9f:96:68:33:
59:37:48:0d:d6:1d:db:db:fd:5d:94:0c:6f:93:c3:
a8:0b:c7:5f:23:6a:8a:b6:6e:a5:6f:37:c1:48:d2:
9a:95:4a:45:6b:cf:45:78:3d:4d:71:c8:eb:9d:28:
bc:67:e0:b0:75:4a:3c:4f:0b:5b:d8:f1:24:45:48:
76:d2:09:20:59:55:6d:fb:46:bf:a6:78:2f:80:c4:
3d:88:9b:4a:d4:e8:6a:b0:5c:ca:35:e6:77:02:03:
23:34:a8:50:e1:75:66:8a:27:53:86:4e:68:ed:a6:
11:18:30:6c:20:a6:8f:34:48:42:38:93:30:0f:7f:
9e:d3:18:64:ed:5d:d4:b2:ff:0e:b7:a6:83:bf:b0:
6d:20:e9:a1:a2:20:f4:be:aa:71:26:44:e0:17:b9:
53:4a:a0:8e:fe:f9:56:44:57:96:d9:d4:86:b1:8b:
92:42:46:ae:be:04:0f:5a:20:46:8c:a9:ca:10:0f:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:D0:0B:06:C4:E4:13:C9:B9:2B:1F:27:29:63:85:D3:08:85:35
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:69:a4:06:ed:03:3c:3f:c5:e6:be:67:4d:7d:65:08:c1:57:
bf:36:4b:bd:c9:fb:55:41:d3:8e:39:bf:28:a7:25:49:d9:23:
1e:3d:8a:69:a9:f6:d1:3a:d4:bc:cc:7f:cb:73:81:0b:7a:e7:
e8:89:11:5d:5e:37:96:fb:dc:1c:b4:40:8e:64:20:1d:f6:85:
3f:97:66:98:56:e6:80:c5:73:f9:71:4e:af:48:41:2e:2b:02:
78:6a:d1:11:e7:83:1a:3a:ca:c5:88:a5:a2:df:70:c1:36:42:
cb:85:ba:f7:eb:e4:58:d6:d1:52:73:c8:58:bb:ea:34:6a:ec:
03:82:81:d3:fa:c0:d1:b5:39:80:57:1c:b2:69:6c:2e:35:4d:
29:59:66:03:40:eb:a6:fe:bd:16:35:68:af:4a:27:b6:25:0c:
ce:53:5e:08:44:24:a6:d0:03:f5:17:a1:54:e8:25:f4:65:88:
60:5a:77:a7:c9:ba:2b:3b:16:63:d3:6e:1a:78:66:db:2e:8a:
2b:20:bd:8c:c5:fd:b6:3d:aa:ac:34:dc:67:d4:ac:b9:46:28:
e3:ce:5e:4d:b5:b4:08:8d:c4:39:bd:a7:65:2d:61:c7:18:d3:
97:28:48:ec:b5:b1:24:4a:fd:24:1e:5b:28:32:54:a3:f0:de:
f7:27:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:52 2026 by rpki-client