Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: 1auA2GtRQIu+52+xy4LPKYqWHDEfUWXzGirpWEFqJh0=
Subject key identifier: 2A:D6:9B:B5:8A:4F:D5:F4:1B:EF:C4:B1:04:2B:CE:A1:BE:03:43:F9
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019D98507F9DBCF10252458A7E06FAA3B2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 1293
Signing time: Thu 16 Apr 2026 22:01:45 +0000
Manifest this update: Thu 16 Apr 2026 22:01:45 +0000
Manifest next update: Fri 17 Apr 2026 22:01:45 +0000
Files and hashes: 1: 04FSpzq4m-1XB6Xit5U77C8a4zQ.roa (hash: mIEzNAi8bCdeISsLWc2pP3wecbIvm3THnuOD2ckxOcM=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: K0Wt0p+C892tWYh4g5gJk9V6PSEh4zUng7D1R+gy5J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:7f:9d:bc:f1:02:52:45:8a:7e:06:fa:a3:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Apr 16 22:01:45 2026 GMT
Not After : Apr 17 22:01:45 2026 GMT
Subject: CN=2ad69bb58a4fd5f41befc4b1042bcea1be0343f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:01:8f:e1:83:8f:53:13:45:06:c9:c8:bc:
3f:6d:18:6f:fd:a2:3c:d9:b9:34:21:cf:11:c9:f8:
2f:a3:d2:b4:02:a0:49:98:48:62:f6:d9:50:ab:60:
42:03:50:bb:63:35:cc:ee:0a:1a:db:f9:45:12:8a:
72:d8:32:19:81:c6:be:b3:89:a5:53:5b:ad:03:10:
9f:e5:e3:1a:57:37:5a:b2:38:f4:df:58:84:96:a9:
51:5b:fa:27:ec:54:4a:c0:5a:e6:6f:a5:a0:bf:6b:
91:df:2a:bc:3a:41:ce:1c:d1:ac:e1:79:fd:1e:a9:
a2:59:a6:d3:a3:a8:0b:87:cf:08:cb:73:6d:0d:8e:
95:f8:46:8a:fe:0e:1b:64:a5:0f:29:ac:de:ed:8a:
f4:4a:18:b0:2b:4f:e1:3e:1f:ac:68:46:1f:47:ee:
42:c4:bb:32:ea:bf:04:4c:87:cb:17:b0:5b:22:b3:
08:bf:16:9d:19:7d:1e:58:2c:b2:77:b6:78:0b:88:
ee:58:ba:49:00:4c:e5:06:53:ef:29:fa:e0:49:2a:
a1:e5:ef:db:0b:7c:43:34:50:eb:50:14:db:61:3c:
d6:4c:59:44:59:c9:1f:0b:37:70:cf:bc:4b:13:9a:
31:63:c6:6a:76:98:5e:74:4a:7c:d9:89:3b:82:07:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D6:9B:B5:8A:4F:D5:F4:1B:EF:C4:B1:04:2B:CE:A1:BE:03:43:F9
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:55:09:f0:4d:6b:94:96:79:07:93:db:44:23:c6:e4:0a:05:
13:eb:3d:79:86:29:06:19:c9:dd:d5:2d:44:fb:db:37:70:9f:
2e:72:3f:94:31:ed:fb:cc:32:fa:90:98:ce:0f:f5:7b:28:1d:
11:58:75:5b:c1:18:b7:91:84:ab:fc:4a:5a:c3:df:e3:33:11:
d7:fa:98:14:6e:c7:be:e8:79:7d:6b:11:99:2c:8c:b7:30:dd:
68:50:ff:47:f3:51:a3:f1:96:fe:ae:df:7a:85:0d:87:a5:ea:
41:01:85:47:24:f9:49:f4:c7:22:34:48:04:77:ac:b3:9f:79:
eb:eb:a8:e6:7b:6e:07:7e:69:c5:90:0a:e0:83:1a:7d:e5:14:
39:a3:d8:d6:39:a2:41:5b:d0:ca:cd:3a:8a:cf:5f:3e:66:7f:
13:73:83:19:79:52:5d:cd:48:eb:86:d4:ab:61:30:77:90:79:
b3:12:0d:7a:b2:40:1f:9f:fc:f1:d8:05:94:69:7f:be:1f:d5:
dc:8d:95:70:c2:3e:04:ab:9d:79:b0:fc:8c:4e:2e:ea:b5:f1:
69:5a:c6:a2:9e:87:cd:52:fb:89:67:8c:8c:54:b6:4f:5a:05:
a3:e9:f4:42:a6:6c:dd:a2:19:71:ed:e4:20:57:39:84:f7:dc:
47:1e:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:17 2026 by rpki-client