Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: LdDtHkIgEBZ/ig8GR55sJYL9tGWv4G/zz7zALb3xSzY=
Subject key identifier: C5:93:DD:32:2B:25:67:C9:ED:E5:88:04:0A:F8:B4:95:69:48:05:51
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 019DA45422AD694D8CC075DB35D2E99486AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 1861
Signing time: Sun 19 Apr 2026 06:01:10 +0000
Manifest this update: Sun 19 Apr 2026 06:01:10 +0000
Manifest next update: Mon 20 Apr 2026 06:01:10 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: MkyzF26smxvNi6OyHxBviHn+w73u77cvaZmfdfkNOWY=)
2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:22:ad:69:4d:8c:c0:75:db:35:d2:e9:94:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Apr 19 06:01:10 2026 GMT
Not After : Apr 20 06:01:10 2026 GMT
Subject: CN=c593dd322b2567c9ede588040af8b49569480551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:87:e3:75:4d:13:ea:64:ab:7a:8d:88:dd:
e8:ac:9e:d9:e9:f7:1a:cb:e0:d4:41:b0:6d:d1:f5:
24:47:97:58:4a:28:1c:70:bb:68:06:3e:8b:74:6b:
4c:0b:51:8a:db:c0:a1:67:7d:d3:24:5e:29:3a:c4:
a2:57:4b:68:5e:64:df:29:ac:c9:32:46:54:9c:d0:
4e:f1:ac:df:c6:dc:1a:fb:3b:26:07:c0:fc:b9:e9:
49:52:39:f8:fc:b1:34:12:90:49:b6:5b:13:17:be:
d4:90:0c:7b:79:ca:91:08:92:ab:24:1d:0f:f7:96:
7e:b7:8e:25:5f:ca:80:69:f0:a8:4e:c0:62:10:90:
f7:d0:b4:d5:39:5d:1c:f7:90:48:f7:b7:e8:81:cc:
b5:6b:4e:45:ea:be:46:44:8c:69:9a:9d:a7:ff:36:
aa:30:d0:bf:4a:81:2c:75:0b:ec:8f:a3:ea:ed:5a:
27:06:40:93:8e:65:58:a4:d7:f0:36:6a:e0:1b:76:
e1:9d:1f:53:1c:6f:b4:13:38:e7:d7:36:0d:ca:70:
34:2e:41:ad:4e:94:88:c9:a8:bc:7e:f5:7e:6c:4d:
25:6b:14:e9:37:97:eb:3a:e5:79:30:8d:df:1e:21:
2c:22:fb:27:11:ad:fc:77:95:53:e9:34:2f:80:f1:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:DD:32:2B:25:67:C9:ED:E5:88:04:0A:F8:B4:95:69:48:05:51
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bb:1b:88:b7:30:25:3c:e2:9c:20:40:44:e1:f7:c8:f8:ad:
36:bf:4c:ea:84:aa:87:71:b5:00:45:0b:18:57:a8:30:9b:6b:
84:60:51:cf:7c:52:8c:5a:da:f6:85:11:19:ef:f7:4c:b3:f7:
e9:68:bf:e1:79:af:06:5c:3e:82:55:60:75:28:a9:89:e1:c2:
04:ce:75:5e:16:26:b9:80:9d:aa:fa:a4:4e:12:a6:a7:6b:ce:
ef:fb:6a:8e:48:30:68:51:32:96:98:ab:cb:9c:04:67:16:5e:
db:a5:71:c5:b5:73:cc:32:da:20:d2:37:20:91:ae:a6:fa:8e:
ad:f6:e0:58:2b:42:56:12:84:7a:07:5d:76:e8:99:c1:0d:2f:
f3:ef:e2:56:94:0f:58:78:e6:5a:17:79:32:a9:9e:ce:cc:3f:
01:51:61:55:ee:85:f4:8a:e2:2c:df:3e:0a:74:f7:29:2a:93:
50:0b:0b:07:2f:55:67:0a:b9:4f:80:e9:63:f4:d4:50:fb:06:
b5:95:d9:b9:3f:02:32:58:1e:22:25:b5:30:7c:cc:43:b3:ce:
27:ff:c0:ee:66:98:9c:32:35:6d:cd:5a:88:f9:fa:46:df:c6:
86:3c:12:2f:39:2c:a9:52:4e:9c:ae:22:da:db:34:56:64:ed:
05:5c:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:59 2026 by rpki-client