Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: 7vhT+k4rD3TdwJZi+vTgmXhy9GCzN6cE5+fVKLGOnEY=
Subject key identifier: 74:97:23:41:D5:BF:50:84:C6:C4:EE:7B:5B:D6:41:74:A7:D8:6E:6D
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019D9A3EDADF5B3936C0F07C9EC111BEB7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0DE4
Signing time: Fri 17 Apr 2026 07:01:43 +0000
Manifest this update: Fri 17 Apr 2026 07:01:43 +0000
Manifest next update: Sat 18 Apr 2026 07:01:43 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: C1GzMRy3K0YLPOnUWuaR0aMsCiTLGixXlNl4Dl04EqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:da:df:5b:39:36:c0:f0:7c:9e:c1:11:be:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Apr 17 07:01:43 2026 GMT
Not After : Apr 18 07:01:43 2026 GMT
Subject: CN=74972341d5bf5084c6c4ee7b5bd64174a7d86e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:09:d8:ff:6a:f7:ac:c5:f2:31:f4:34:6c:
87:1e:70:96:28:e4:69:8b:2e:85:d7:60:22:b2:bd:
64:8e:37:88:db:31:a1:fa:51:dd:db:43:47:01:46:
6f:1e:89:d4:ca:89:36:ad:84:f7:a7:30:17:fe:f4:
01:45:e4:24:c6:60:c8:eb:64:03:18:ba:bb:cf:1c:
53:20:b3:c3:dc:2f:29:1e:af:0d:fa:2b:65:18:4d:
bd:28:e4:93:b9:65:2e:f8:37:6b:bf:05:e8:b7:29:
10:c5:cb:e7:ce:46:31:b1:2f:1c:8a:b4:24:3c:20:
9b:ef:59:93:db:8e:40:78:8d:df:18:a1:2c:e3:ee:
8a:f6:ff:75:9a:6d:ff:da:dd:07:35:06:f8:86:42:
6f:4c:a5:d5:55:69:6c:ea:a2:07:47:b5:15:68:b1:
17:90:a4:a2:92:24:15:2d:e8:ca:89:bf:d9:9e:26:
b4:d6:75:7e:ea:a8:40:e4:c2:bc:df:a1:b3:63:b7:
b1:3a:10:8b:63:a7:f6:17:38:11:f0:59:17:a7:a4:
23:81:61:2f:1e:d0:3a:4d:2d:c9:78:61:da:50:2a:
70:06:0b:35:da:38:19:89:5f:ab:7f:1c:3c:97:b4:
2d:27:be:d8:56:97:76:36:a9:58:f0:ad:53:16:9d:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:23:41:D5:BF:50:84:C6:C4:EE:7B:5B:D6:41:74:A7:D8:6E:6D
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:6a:fb:a4:48:99:28:4a:08:5c:ae:05:a2:d4:62:63:46:
17:54:3a:3a:13:64:05:e9:aa:2f:4d:ea:37:9d:bb:ae:24:f8:
11:79:f5:46:a6:9a:2a:5b:48:d8:97:f9:e4:de:f1:fc:02:11:
9c:82:f1:58:01:ce:10:bd:e1:af:e8:06:10:fd:4e:54:e6:e3:
b3:7e:bb:6e:14:6f:80:4e:c9:fa:82:3c:ce:d2:f4:81:dc:ec:
db:8a:f4:3a:11:f8:4c:dc:a4:f5:0d:98:ce:e9:2e:ea:17:8a:
ef:dc:3d:47:b8:5b:27:fb:28:f5:7d:27:d5:c7:87:23:86:45:
8d:38:4c:df:81:13:b9:06:9d:af:3a:17:86:7d:72:c9:54:4e:
41:a9:59:d6:52:e6:f3:8c:c2:44:3d:af:6e:21:9d:06:88:6e:
38:38:49:5a:d7:af:8d:10:22:2a:24:c2:81:90:6d:33:bb:69:
4a:60:bf:e8:06:78:b5:7a:53:71:54:ed:6d:75:56:c5:87:eb:
50:ec:c4:84:31:ee:b9:b9:4d:4f:69:e3:a8:a5:6b:4f:77:c4:
28:b9:35:df:df:26:4f:d8:49:bb:41:20:54:6f:12:e7:8a:32:
d6:c5:35:2d:c7:fc:27:88:52:37:f8:38:07:6e:ba:b8:54:90:
4c:b4:da:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPtrfWzk2wPB8nsERvrepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4
OWY5NmMwHhcNMjYwNDE3MDcwMTQzWhcNMjYwNDE4MDcwMTQzWjAzMTEwLwYDVQQD
Eyg3NDk3MjM0MWQ1YmY1MDg0YzZjNGVlN2I1YmQ2NDE3NGE3ZDg2ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDUJ2P9q96zF8jH0NGyHHnCWKORp
iy6F12Aisr1kjjeI2zGh+lHd20NHAUZvHonUyok2rYT3pzAX/vQBReQkxmDI62QD
GLq7zxxTILPD3C8pHq8N+itlGE29KOSTuWUu+DdrvwXotykQxcvnzkYxsS8cirQk
PCCb71mT245AeI3fGKEs4+6K9v91mm3/2t0HNQb4hkJvTKXVVWls6qIHR7UVaLEX
kKSikiQVLejKib/Znia01nV+6qhA5MK836GzY7exOhCLY6f2FzgR8FkXp6QjgWEv
HtA6TS3JeGHaUCpwBgs12jgZiV+rfxw8l7QtJ77YVpd2NqlY8K1TFp26ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSXI0HVv1CExsTue1vWQXSn2G5tMB8GA1UdIwQY
MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt
MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh
LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+Vq+6RI
mShKCFyuBaLUYmNGF1Q6OhNkBemqL03qN527riT4EXn1RqaaKltI2Jf55N7x/AIR
nILxWAHOEL3hr+gGEP1OVObjs367bhRvgE7J+oI8ztL0gdzs24r0OhH4TNyk9Q2Y
zuku6heK79w9R7hbJ/so9X0n1ceHI4ZFjThM34ETuQadrzoXhn1yyVROQalZ1lLm
84zCRD2vbiGdBohuODhJWtevjRAiKiTCgZBtM7tpSmC/6AZ4tXpTcVTtbXVWxYfr
UOzEhDHuublNT2njqKVrT3fEKLk1398mT9hJu0EgVG8S54oy1sU1Lcf8J4hSN/g4
B266uFSQTLTaJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:19 2026 by rpki-client