Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: 2P8X+DhsXekq979kC9vf3uOfUKqV4KVdATgCNDoNkLs=
Subject key identifier: CB:CA:19:7D:AB:7B:87:CB:0C:83:3A:FA:28:DE:95:8D:3B:9B:1A:BF
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019D98BDA1C34E0B9C399A9426DCC745ED65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 14BA
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: cLFBCviO5uWaeKzfcwgM949yL5hyiV3UnFqLk5jN2fI=)
2: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (hash: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a1:c3:4e:0b:9c:39:9a:94:26:dc:c7:45:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=cbca197dab7b87cb0c833afa28de958d3b9b1abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:7a:c0:cf:8d:c9:a8:24:10:e3:80:a6:51:
01:90:77:e6:fc:9c:7d:71:8f:64:6c:33:12:f2:ab:
28:1b:23:f8:cb:a1:23:18:52:d4:57:81:55:b5:e6:
a7:4e:ab:23:e4:57:ed:43:7c:ae:ce:3d:fb:62:54:
28:d9:2c:01:86:6f:a8:cd:90:bb:44:8c:61:a6:25:
8d:59:df:59:95:d3:7e:2c:ec:bf:cf:6d:c9:8b:f7:
40:5c:ba:d2:ce:0f:b6:9f:68:28:6d:4f:26:e6:9b:
4d:ee:39:8d:7d:b2:64:14:7f:fa:cd:95:fc:bb:d1:
12:76:f0:82:55:9f:11:6c:78:21:51:c3:40:56:a0:
57:3a:66:3c:4a:5d:fb:1e:f2:9c:e4:f6:76:7e:c3:
01:80:3d:7f:a7:94:d7:d3:99:1f:a4:42:77:41:3a:
20:93:34:d8:8b:3e:78:aa:71:ce:3f:e8:9a:de:6b:
2d:63:59:7d:a8:e9:50:6e:c3:9c:e0:e1:50:92:36:
10:4c:ff:8f:d1:65:15:5f:54:ab:32:03:62:8f:51:
9f:d8:ee:18:83:41:7e:7a:89:ee:bb:63:73:f1:db:
9f:80:02:bc:ba:73:94:c4:a8:40:85:14:33:d5:fc:
b8:26:dc:1c:72:96:8a:c6:a5:54:cf:fa:ca:30:79:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:19:7D:AB:7B:87:CB:0C:83:3A:FA:28:DE:95:8D:3B:9B:1A:BF
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bf:d2:ef:92:83:26:52:c5:2d:d1:09:ce:cb:38:cc:60:66:
6a:2e:f5:7c:51:dc:d8:4d:65:f1:67:f2:76:da:50:62:18:88:
7f:19:9d:08:77:d2:7d:0e:15:31:33:01:69:78:3c:fe:2f:c6:
24:b2:39:b1:1b:3d:e1:69:03:14:b2:7d:42:40:af:b9:cd:40:
ac:73:eb:41:1d:ef:1e:27:67:f7:96:21:0d:f0:71:75:78:de:
d5:65:59:e8:43:b7:4a:79:40:ed:b9:10:f4:5c:60:ef:98:c6:
d4:3d:61:d6:18:86:8b:00:8b:72:da:61:ac:f4:62:0f:4a:23:
fc:54:f8:6e:58:fe:13:41:d6:10:6d:9c:00:37:b0:d9:f2:c7:
7f:e9:8d:61:c3:e1:a3:23:f4:71:8b:ea:7b:81:70:3d:12:12:
79:6d:7f:4a:9c:34:2c:e9:2f:ac:10:06:66:3c:d2:e1:a1:f6:
41:d9:0a:cd:e2:6f:24:4a:2b:ff:8a:1c:97:a2:7d:76:8f:84:
84:69:41:bd:53:71:d3:24:43:b9:85:84:40:d8:6b:21:fa:a4:
ef:06:fe:91:f5:9b:82:35:81:79:33:6b:c3:67:84:6e:15:b5:
72:a1:41:97:0e:7a:a6:9a:57:6b:d0:86:ee:84:b7:f2:d3:36:
4f:27:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:07 2026 by rpki-client