Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: A5cF5/bf325DRiHTzHfvGPJ/r7MnJt5zh6B5NJiso3Y=
Subject key identifier: CA:90:70:A3:C9:8A:D1:8B:89:F9:BA:EE:D1:2E:30:93:69:8A:EB:D0
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019D9A0702AA61DC2AB50ED48E1A22058E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: t0IfV+1y2sYDbCo5kOVmHuSP0J/mbsYP5NvVwqAQa8U=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:02:aa:61:dc:2a:b5:0e:d4:8e:1a:22:05:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=ca9070a3c98ad18b89f9baeed12e3093698aebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:d1:7a:99:f2:26:79:5f:88:03:c3:cd:b9:
df:db:ea:10:13:5e:c1:e7:c1:1a:bb:4c:66:29:2c:
f2:a0:d2:f5:79:55:3e:bd:31:e9:51:7c:9e:a3:01:
c2:54:bb:69:75:02:f3:c3:0b:45:ba:f5:51:af:4c:
28:c0:ef:c3:6d:49:07:d9:b9:6c:32:ad:58:2f:7e:
b2:42:29:24:b4:8e:53:ef:75:3b:d5:9b:0c:96:8f:
ad:e3:71:49:17:84:55:bc:99:f8:1f:47:cd:d0:59:
05:52:da:e2:b0:e2:a2:73:2c:96:a6:65:85:4c:df:
ca:70:6e:b6:d8:e1:79:d9:15:54:64:c3:96:49:eb:
a5:c2:29:b9:82:94:1f:c1:33:17:df:a9:8b:cf:62:
e4:d8:34:d8:32:16:f3:65:56:b4:5f:d1:c1:36:a1:
14:8f:9c:1f:69:bb:b0:8c:75:06:c1:12:d5:cc:8b:
9b:69:b1:8d:74:36:a2:78:52:0a:c0:67:cc:7b:59:
24:5c:87:64:0e:91:24:04:3f:81:c7:5b:b5:fd:a5:
78:49:b0:36:84:fd:ee:97:a9:be:e8:ff:cb:5d:1c:
c2:a6:59:fd:d1:40:58:0a:50:12:db:12:c8:9e:5e:
48:9f:1c:55:08:28:b8:74:76:a3:09:19:31:04:39:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:70:A3:C9:8A:D1:8B:89:F9:BA:EE:D1:2E:30:93:69:8A:EB:D0
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:a1:16:f0:42:4d:40:87:f2:86:be:2c:84:9a:c1:a1:85:
bf:96:cd:89:48:9d:04:c7:3a:91:21:86:d8:a7:b9:2f:00:1a:
0c:91:bf:3e:a7:08:31:85:48:73:b5:cd:f7:6c:67:6e:21:d5:
3b:36:4a:ac:61:34:8f:38:1b:0a:ff:2d:d4:53:0e:8d:08:e9:
d3:0e:2e:3f:56:83:3d:b9:fe:37:32:d7:80:3f:b9:cc:4d:bd:
f1:f9:54:dd:be:12:da:30:11:94:03:08:28:e0:45:15:36:2b:
01:b1:af:7a:b2:8f:fc:fc:8d:82:b9:3f:c4:67:ab:f5:7c:c1:
ff:e9:e2:91:d5:53:fd:80:40:fd:16:cf:10:ec:a5:a9:61:39:
68:9e:15:13:5d:b9:aa:12:fa:c1:23:5a:77:c3:40:b1:bd:c7:
a3:9c:f1:68:4a:6f:1c:fd:4e:8f:12:b1:c2:c8:6e:d5:b3:00:
cd:f8:4c:26:3c:b3:0b:4f:32:ce:ba:0e:d3:fc:c6:1d:97:f0:
7c:85:63:52:49:ac:b7:ae:53:3d:b5:f8:44:49:1b:d8:68:2f:
d6:9a:18:21:d7:f3:ab:25:66:26:63:fe:f5:48:e9:81:b2:cb:
a4:0c:47:7b:b4:10:68:1e:98:41:8c:81:dc:44:33:fe:3d:e0:
96:81:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:46 2026 by rpki-client