
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: l8rujC8L78qOYujq41BQIyjiF0265fFfvjp9yU3jAHI=
Subject key identifier: F4:46:8C:EB:4A:B0:B6:91:35:A8:64:48:1A:2A:FD:49:75:34:E8:AB
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019D98BD455FDBB97E3981A1129B65FBD569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0E04
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: GjIiq94g19Y71SnSmiS9HdwksJ/IRMErjQik5T0Kk/s=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:45:5f:db:b9:7e:39:81:a1:12:9b:65:fb:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=f4468ceb4ab0b69135a864481a2afd497534e8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:71:73:a5:ae:38:4f:36:aa:f9:39:bf:b1:
4c:b4:29:e5:47:bf:75:e4:bb:08:58:fc:c8:58:d4:
83:c9:df:ad:fa:93:c4:54:14:8d:3d:bf:c9:ad:06:
75:fa:c9:f7:ed:1a:31:53:e6:2f:6c:52:e2:d8:0f:
27:91:ed:a7:e1:c8:58:d0:da:a4:c4:bb:93:e4:27:
77:7c:b7:a7:10:8b:f4:d9:2e:5c:90:e1:87:ae:7b:
c9:3f:6b:a5:8d:7c:30:0a:a2:f3:ea:52:aa:c4:8d:
d7:f4:6f:cc:14:21:fd:f6:b3:23:c7:a6:a3:1f:ff:
93:1d:58:fe:e9:05:72:86:6f:cb:65:f4:a0:dd:a3:
c6:24:8f:3e:26:56:32:89:2a:10:06:cc:7e:41:97:
c2:18:c2:4b:a9:39:86:12:b1:ae:b2:fc:db:ef:4e:
d7:1d:c3:8f:38:cc:83:41:25:61:e6:9c:93:81:dc:
bd:76:cf:6f:0c:8d:6e:90:71:79:41:0e:6c:f9:de:
a2:88:c6:48:a4:12:40:17:6f:7a:a1:38:85:78:d8:
e2:03:6b:7e:77:80:b2:ff:40:c1:a8:73:ec:30:aa:
ba:e0:c7:34:ef:ed:cc:07:0b:06:5c:b0:9d:b4:50:
94:59:d9:22:5c:1f:8e:70:ac:2e:f3:3c:c8:22:71:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:8C:EB:4A:B0:B6:91:35:A8:64:48:1A:2A:FD:49:75:34:E8:AB
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:9a:2d:21:4b:4d:57:ae:9f:13:b1:97:dc:6f:ac:45:58:
63:db:81:fe:be:47:6e:a0:8b:12:fd:ac:92:99:66:b6:64:26:
e6:15:1b:36:c4:cc:1c:70:1a:d2:27:30:35:b4:69:32:26:ea:
3e:bc:a9:84:65:7b:24:4e:13:33:cc:39:61:97:36:1f:04:c7:
48:7e:c9:f3:cb:ba:3f:3f:3a:ff:34:e0:1e:a0:c0:f6:10:fa:
49:7a:42:b2:3f:25:52:c8:9a:98:ce:ea:a1:3a:f1:90:41:d0:
e8:82:d2:be:0b:28:60:e1:21:ec:30:4c:3b:af:95:49:00:63:
f0:20:33:e8:3c:44:be:95:1c:9d:2e:f7:d8:49:d1:12:27:20:
29:dc:6f:a9:c7:e5:10:c0:2b:5b:da:8e:27:00:29:7c:3d:2d:
a7:82:9a:3d:61:54:43:04:dc:f9:bd:89:da:0a:b8:6a:e0:88:
0c:6a:2b:dc:fe:e2:b7:5d:1d:07:ba:7b:42:33:a8:df:59:0f:
fe:f5:2b:7c:f4:8d:5f:a9:54:a9:1b:18:15:ec:71:21:c4:12:
9b:98:44:2b:79:94:46:4c:2b:71:27:40:d0:d9:c9:d5:6f:ea:
ce:f3:33:5f:30:6b:3c:7c:06:32:e4:9a:b3:10:eb:fa:b4:b3:
16:c8:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:59 2026 by rpki-client