Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: I8+IQL7YNZ10qQnfr7/OKJOrlVchAwpJZhRtsaC+wCY=
Subject key identifier: BC:92:7D:66:3B:AC:D9:9E:CF:F0:2E:54:13:67:C7:AA:4D:D2:A5:16
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019D97E1AA5486A2A1685D36C99A55A9D7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0844
Signing time: Thu 16 Apr 2026 20:00:41 +0000
Manifest this update: Thu 16 Apr 2026 20:00:41 +0000
Manifest next update: Fri 17 Apr 2026 20:00:41 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: UWN4oVmqohEmVQ89/YnYF/HntYQakV9Ye2311NE+8sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:aa:54:86:a2:a1:68:5d:36:c9:9a:55:a9:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Apr 16 20:00:41 2026 GMT
Not After : Apr 17 20:00:41 2026 GMT
Subject: CN=bc927d663bacd99ecff02e541367c7aa4dd2a516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:ff:79:46:48:30:92:4c:c6:95:dc:a8:e0:
83:37:7a:ee:8e:3b:7c:24:ee:69:5f:fe:a1:cc:ff:
d6:49:52:d0:9d:10:9d:88:8c:32:75:72:79:90:0b:
80:09:66:df:75:06:a7:84:cb:91:09:c9:be:1c:e7:
d8:80:1d:2d:09:f7:c1:96:3b:33:3e:75:cc:05:ef:
bf:33:6a:e1:aa:cb:c8:e5:6c:10:d4:78:17:00:1c:
cb:bf:42:55:1c:78:c3:9c:94:f9:af:b4:1b:49:d7:
49:72:b9:95:d7:f4:36:86:70:df:2b:c3:ff:84:d8:
dd:19:0b:1a:be:75:67:d9:34:2b:4b:61:83:f7:66:
14:f8:6c:f5:4b:a3:c0:85:c5:57:cc:4f:c4:f8:e5:
9e:d9:19:2f:19:26:70:25:07:d3:e1:6c:1d:6f:e8:
30:d1:09:90:96:f1:18:14:1a:69:69:f1:28:91:1d:
32:18:3b:3d:bc:7d:96:89:30:9a:4e:59:79:2c:4a:
dc:ec:5a:73:b2:fa:54:df:89:cd:45:a5:74:06:86:
7e:d8:95:53:dd:f2:2c:a1:57:6c:6b:1b:dd:8d:ef:
07:5a:e1:7c:bb:1a:8e:ed:25:b7:e4:fc:18:42:62:
a2:ed:e3:ef:d5:7f:ea:c5:99:7b:1d:de:4b:64:09:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:7D:66:3B:AC:D9:9E:CF:F0:2E:54:13:67:C7:AA:4D:D2:A5:16
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1b:51:74:9f:6a:ad:71:b4:6e:d0:de:f6:14:45:6b:67:6a:
6f:d5:1b:86:40:a6:d0:cf:11:8d:1e:b5:85:31:9e:95:e9:38:
a4:4f:eb:73:a3:8d:f4:bb:7c:f1:38:91:56:ab:aa:37:1a:b0:
75:46:22:a0:fe:90:20:d2:e8:bd:e6:5a:11:c8:10:e9:f0:16:
83:21:19:e6:b4:c4:b2:1f:09:2f:5d:27:43:3e:79:8d:21:07:
56:e7:4d:45:a0:89:3d:80:3d:94:30:75:b5:19:18:a2:9e:63:
a7:d9:c2:be:7d:08:39:56:d2:25:7f:de:9e:ee:83:4d:16:79:
ba:f5:6d:50:79:a7:b7:17:be:5f:f1:f3:04:86:b5:2b:f8:9f:
e7:0b:0b:05:71:70:ef:ab:7c:50:42:c5:15:53:95:fb:af:1d:
db:05:d1:37:5c:dc:0d:66:0b:83:0c:dc:d1:33:09:9b:42:2c:
f4:d0:44:92:52:20:7f:be:72:4c:cd:8f:ca:1c:de:96:3e:fa:
1d:2a:22:3f:29:c9:e9:96:fd:ce:8d:f1:3f:5a:ae:c7:f2:dd:
8c:c8:16:21:c8:cf:45:e8:be:71:15:6a:54:e9:49:a7:67:7e:
b0:bf:5a:48:dd:b3:c3:9f:43:ab:19:4f:48:e0:5a:17:81:b6:
af:a3:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:10 2026 by rpki-client