Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: WzoCQ8tb7dkGOpq8CNJ5EM7g/dbrLh7UTSzocJ3QIds=
Subject key identifier: F2:5E:AF:49:F8:3F:77:66:B1:F5:AF:7C:FA:5E:E2:AD:09:8C:47:FF
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019D99D02D57F4D955116F695871D4D1E271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 15C9
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: OawgqQGPtlwEMOxGkAtl6L82H4Q.roa (hash: K2gpWslD9/HiQy1xYHGfxNVNM4NYrBOnVdVEvGdhuWM=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: uzaHLFpaPv/79Tf4sDT0aGrtrl9+waffHa/QqbobQE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2d:57:f4:d9:55:11:6f:69:58:71:d4:d1:e2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=f25eaf49f83f7766b1f5af7cfa5ee2ad098c47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:be:3f:74:5d:30:21:b6:05:6f:3b:56:c9:
dd:db:6d:f4:01:a9:90:05:d0:a9:16:87:bd:b1:54:
7f:ce:c5:59:6e:46:89:49:d0:29:f4:02:15:b9:8e:
c9:ee:b6:87:e8:ad:d8:71:50:3c:1e:8b:3f:64:3f:
e3:69:d3:84:7c:4d:ba:75:fb:89:11:79:5a:dc:7e:
dc:c2:e4:d0:4d:48:e9:44:58:9d:84:43:82:89:0e:
e0:7a:a9:94:22:4a:8e:7d:05:25:38:62:98:f9:92:
52:2c:32:ca:88:32:08:30:29:70:e5:32:6b:e7:e3:
83:cd:d4:04:59:5a:cd:3a:48:e8:af:95:8c:e6:6c:
fa:6c:7f:02:9c:b2:94:2c:26:29:f7:e9:33:ed:9f:
b4:e6:71:fc:29:dc:6f:fb:ce:d7:ec:f3:d5:5e:43:
e3:4c:62:35:00:da:44:5b:41:e7:1c:c9:b5:e2:5b:
3a:80:cb:88:7b:dc:8b:57:e5:ce:23:75:a0:c7:ae:
5f:43:1b:dc:dd:d8:e3:fe:71:47:17:bb:68:65:71:
d7:00:e2:e5:a7:43:a5:c8:1e:27:aa:12:cb:42:d9:
4f:3f:5c:97:20:b8:5e:9e:39:d1:5b:2d:70:3f:88:
01:63:64:7c:06:ca:6e:3d:57:cc:1e:9b:a3:9a:a9:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:AF:49:F8:3F:77:66:B1:F5:AF:7C:FA:5E:E2:AD:09:8C:47:FF
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8f:3c:1c:30:51:79:f8:c5:58:ec:ce:16:fd:7a:ea:83:e3:
66:03:ef:0b:5b:e9:10:1e:42:8f:54:4f:a6:2f:71:28:3c:6b:
c6:a2:be:96:af:c5:21:75:d7:39:fd:d7:9e:be:a2:16:5b:1e:
41:88:ea:33:ad:c4:e9:77:05:6f:33:f5:c0:3e:de:2e:a5:0c:
8a:06:b1:45:ed:76:cf:9b:30:67:25:ee:58:c8:7b:76:56:b9:
77:17:9f:8b:5a:32:62:31:63:67:2c:0d:50:84:59:2a:97:31:
f7:1e:19:bb:80:eb:39:1b:cf:73:1b:84:41:28:d6:9d:5d:6e:
28:b5:4d:98:ab:88:72:8b:b9:d2:ee:db:8e:09:39:42:49:38:
c8:0d:26:3f:e4:7b:b5:d5:82:26:50:6c:cb:a1:74:7e:2a:69:
31:91:89:1b:0b:23:6c:58:7a:63:d7:28:f0:22:39:79:eb:84:
ca:8d:12:90:11:e3:60:09:5d:86:6a:10:05:12:2d:15:53:d2:
90:fc:cf:66:22:25:23:86:2b:5a:03:d9:6b:0e:b7:94:30:0c:
af:5d:10:9c:d6:97:39:af:d1:7a:73:24:a4:0f:4c:43:93:ab:
95:0b:aa:e5:47:ba:b5:65:b5:2e:56:3b:79:ed:33:18:d8:1a:
ad:35:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:38 2026 by rpki-client