Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier: i46hR7ZFlKM2R4ME1GO1RGPfAhu/rOHJ9m1Mwjx21mw=
Subject key identifier: B2:5F:2C:EB:32:FF:7F:5A:8C:38:32:57:02:7E:5E:72:F2:17:6F:4D
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 019D9BBE21AC619AA41FDB949C2B590E3097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number: 0CAB
Signing time: Fri 17 Apr 2026 14:00:21 +0000
Manifest this update: Fri 17 Apr 2026 14:00:21 +0000
Manifest next update: Sat 18 Apr 2026 14:00:21 +0000
Files and hashes: 1: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: jflbCqNhCMGpL4N3GSI9JkSGOuKqmDz9QBKGYlCTiKc=)
2: T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa (hash: oSBZkKDyohBJqXpHb4tTq8QcYaDSBgqUWsjkGIBouSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:21:ac:61:9a:a4:1f:db:94:9c:2b:59:0e:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Apr 17 14:00:21 2026 GMT
Not After : Apr 18 14:00:21 2026 GMT
Subject: CN=b25f2ceb32ff7f5a8c383257027e5e72f2176f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:4c:35:d5:3e:51:e6:4b:b2:a4:8e:6e:3f:
f1:90:3b:48:4e:7e:9a:9d:bf:90:f9:19:22:2c:9d:
42:18:f5:2c:30:48:62:57:26:dc:f8:d4:ac:81:1a:
ef:67:71:17:39:16:12:7d:1a:ca:3b:62:47:0a:1b:
c1:dd:e5:d2:d8:0c:6e:eb:57:07:45:34:3b:22:28:
68:8d:3c:6d:e6:d4:41:20:c3:8f:27:b1:86:a8:01:
a5:7d:75:ee:a3:1a:c7:5d:c7:e8:48:4f:1f:50:01:
00:e0:75:9f:6a:65:40:1b:99:80:2f:e5:34:11:e8:
2b:df:0f:0d:4a:82:35:d6:7c:3f:eb:18:b5:bc:18:
09:bc:58:6a:cc:3c:a7:2d:4c:9a:0b:29:7c:44:6f:
e1:8d:91:97:e0:ab:59:09:eb:b0:08:2c:a3:ba:43:
76:11:4c:d7:79:54:93:e5:70:c0:cb:74:7d:9d:21:
5a:33:cf:44:15:a5:27:c6:87:e6:de:f6:a2:f3:4b:
16:d8:33:47:ec:ee:42:54:f9:4c:7d:a4:aa:5b:3a:
45:06:c0:b2:d0:6c:72:17:98:47:2a:bf:9e:07:3c:
9e:4e:83:1b:ca:93:dc:11:b8:be:ef:ff:ef:c7:d1:
6e:64:92:89:ef:ae:95:4e:b9:0c:6f:b4:04:30:e5:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:2C:EB:32:FF:7F:5A:8C:38:32:57:02:7E:5E:72:F2:17:6F:4D
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:cb:b8:9f:f1:76:cc:90:04:0e:7f:d4:4a:b4:39:8d:c5:
e4:8b:4e:25:6b:de:30:33:79:cf:57:0a:3e:69:ee:60:1c:57:
3f:af:37:45:bc:e7:25:d3:b4:df:e7:12:50:d8:1d:3e:88:50:
04:4c:a7:01:10:6b:78:78:11:9c:27:4d:a6:13:99:66:4f:89:
62:51:76:58:b7:08:75:6a:e3:cd:0a:3b:15:c3:a1:e1:5f:14:
66:c2:2c:e6:74:98:ef:9c:68:94:59:23:67:6f:1e:3f:e9:a1:
ea:1b:c5:31:10:3d:9c:37:34:5e:93:92:e4:46:8f:08:78:9a:
65:04:b2:dd:79:25:4d:b5:ad:34:12:3c:99:52:b7:df:77:d8:
65:f8:f5:e0:5c:17:38:18:a2:bd:65:16:f5:98:70:f7:ca:ec:
22:2c:4f:76:df:13:d3:ec:fd:03:89:ff:7e:5c:0c:bf:1e:7f:
60:79:b6:95:45:af:b6:77:db:b5:6a:48:3a:7e:56:36:67:79:
ba:f1:d5:22:c3:c8:a3:c3:14:64:97:1c:bc:06:79:ca:c3:e0:
43:fc:96:bd:79:9a:a5:8d:32:88:2a:26:99:6e:60:2b:41:50:
aa:2f:2a:1b:e8:1c:d5:6e:c1:01:bc:2d:c3:f1:65:53:43:61:
e4:e9:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:08 2026 by rpki-client