Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: P+NPfcxwIXRQ1HT1Y9W+PwXvLWhM89bWRJNxC0JJSq4=
Subject key identifier: 44:70:8F:8E:0E:CB:8E:8D:F0:EB:01:C8:39:CF:44:CA:94:E9:FB:1F
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 019D98F44B99F6F25EEEC39F58409886F51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 1595
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: 5xGCE6VXF/dYa0HfYcMCaF6QCTjaq+og9uSSYgj2SJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4b:99:f6:f2:5e:ee:c3:9f:58:40:98:86:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=44708f8e0ecb8e8df0eb01c839cf44ca94e9fb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:11:44:d3:17:40:a9:3c:7a:f1:13:e9:65:
ac:8f:9b:14:0e:8e:d7:6b:64:cf:d2:19:a6:54:83:
4b:7d:7c:7c:ae:be:e7:d2:1e:73:15:35:88:d2:f6:
67:c0:85:a3:d6:be:f9:81:f2:89:b4:b4:71:1a:aa:
48:3e:26:64:98:59:cd:bc:7c:41:b9:ff:31:de:12:
85:f1:f7:2d:ff:0f:56:02:3a:70:64:c5:0f:bb:58:
36:7d:af:2c:dc:17:e6:c8:ac:58:70:1e:e6:3a:2a:
f4:c6:9c:af:a8:1b:23:fa:ab:d4:47:6f:20:c8:bd:
3d:80:de:1c:3a:20:12:50:77:75:30:20:21:4b:60:
ef:86:7a:79:ca:a0:02:4b:dc:2b:83:89:e6:62:ce:
f7:d3:11:de:0a:a3:07:22:73:e6:c8:2c:4e:a0:a4:
ac:5b:c2:a5:39:6f:b0:88:c8:8e:89:95:a4:cc:5b:
a2:47:59:54:5f:4e:49:83:f5:72:02:83:ff:a7:b7:
c1:e9:d4:2e:8f:e4:17:24:77:d4:58:13:9f:70:16:
9a:eb:27:db:15:30:e3:57:c3:0e:8d:e7:f8:4d:f5:
62:bd:80:ad:80:6e:e3:2c:38:18:fa:bf:b7:1b:1f:
fe:b8:4a:4b:c0:4a:f7:61:ce:db:c1:66:1e:f9:b4:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:8F:8E:0E:CB:8E:8D:F0:EB:01:C8:39:CF:44:CA:94:E9:FB:1F
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:26:7f:c2:a8:dc:d4:30:0c:39:83:37:aa:28:60:95:7a:
ca:13:ad:cd:fe:40:d4:8c:86:3f:ca:5b:65:c6:ee:a4:ef:f3:
a1:d8:9b:ec:f2:10:f7:dd:8a:bb:97:74:ea:74:8f:b2:90:36:
cb:ad:b5:04:ed:24:b5:73:f0:19:5e:67:62:e4:bc:eb:28:17:
f1:ea:1f:7c:aa:72:6b:9a:15:21:73:9e:06:a6:61:d3:9f:e2:
27:53:d3:b6:3f:75:fd:84:83:a7:c3:61:28:b8:14:93:37:1d:
21:5f:fb:3e:03:2e:cd:e6:66:db:87:50:b2:bf:e3:29:ab:f1:
ca:84:f0:6d:ea:34:6a:b2:2d:72:e2:09:d0:45:60:fe:6a:d0:
d8:ca:d9:f8:d5:97:24:21:98:04:ac:37:3e:41:48:18:96:a7:
48:74:0b:41:0e:fc:de:11:83:d1:9c:58:d3:26:32:c9:b9:02:
f9:ee:f5:00:12:71:db:f9:e8:f0:aa:2e:08:e6:9a:f4:4a:8b:
17:da:d0:54:df:99:a8:f7:7a:2c:70:0b:6c:e1:31:a9:27:ee:
83:a7:45:b7:76:8a:22:1f:98:a4:78:01:75:df:e6:a9:70:a6:
dc:d1:87:b2:d9:55:23:14:4d:4e:e0:3b:09:ea:bc:57:4d:07:
00:f0:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:20 2026 by rpki-client