
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier: vPXIoXhNvx7thOJb+NtxTR1DM431aGmRYMZlDOEj/5Y=
Subject key identifier: 65:39:25:E2:04:59:36:3C:5F:ED:7E:8C:82:BB:50:33:80:41:77:33
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019D9998DEB0604BA3B7B5D649A895C0D630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number: 18DC
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
2: 5T6muliVBW8fS-8i29q4TfjPKww.roa (hash: tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=)
3: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: RZAlmOMLEV+5mE5oiCBH9v3wt7OF9/eRHr9wixtSJYk=)
4: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
5: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
6: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
7: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
8: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
9: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
10: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
11: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
12: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
13: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
14: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
15: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
22: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:de:b0:60:4b:a3:b7:b5:d6:49:a8:95:c0:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=653925e20459363c5fed7e8c82bb503380417733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:1b:8b:01:1c:c0:18:a6:5e:61:22:3b:42:
24:84:f7:87:fc:97:db:9f:dc:1d:6e:a0:2f:3f:14:
94:13:39:7a:32:95:79:e7:4e:f2:7d:60:5f:cd:2c:
d0:98:e6:22:1e:96:12:1a:11:11:02:8c:7a:c0:6c:
d5:25:4a:db:53:96:bf:32:d9:22:75:6e:3b:e6:32:
51:7c:58:fa:01:7f:48:dd:6e:bd:e1:5a:1e:3b:1f:
78:99:fb:1d:60:cc:ab:a7:e8:7c:16:8b:ec:db:d0:
a7:45:59:5b:87:59:b2:9d:e3:e3:5f:45:13:48:30:
68:ae:5b:0b:84:43:76:60:0b:6e:97:5a:55:3a:85:
26:1a:30:34:f8:a8:ac:54:d3:fb:11:09:2a:86:c5:
b1:2c:a9:14:55:ca:4a:11:ac:97:7f:0a:de:46:6c:
b7:a5:53:90:f1:42:9a:25:0f:e7:5e:7b:6a:57:b8:
9b:12:0a:64:c2:6d:73:40:46:0b:d7:21:09:ff:3e:
e3:1e:88:3e:a8:7b:b2:61:ec:5a:97:a1:0a:a7:8c:
f1:c1:c7:ca:e8:46:25:e1:9c:3e:96:cd:98:82:80:
65:1b:e4:a2:5a:87:05:62:bf:0f:56:c1:b8:d1:0b:
46:a8:b4:4e:65:5e:22:6e:c7:b1:23:d4:a5:2b:24:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:25:E2:04:59:36:3C:5F:ED:7E:8C:82:BB:50:33:80:41:77:33
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:34:be:eb:93:3a:65:9d:89:3f:fc:8c:94:1e:76:dc:94:d7:
96:04:9f:4f:89:1c:95:15:52:8d:ec:c5:8e:6e:64:b6:e9:86:
88:e0:65:37:7d:2a:b0:34:c2:14:ba:9a:c8:6a:65:19:7d:56:
5f:d1:c2:3b:15:6f:c8:2b:15:08:af:98:b7:b4:e4:0a:53:cc:
ee:5c:00:aa:fa:7a:e1:a3:a8:67:42:60:2c:e8:07:fe:24:cc:
41:e7:6f:46:70:68:4d:82:b9:93:07:57:8a:f1:a1:23:ec:5f:
57:b9:c1:29:f6:bc:f8:6c:de:25:44:76:2d:be:e8:8c:80:6d:
ea:bf:21:5e:4d:14:05:b4:23:b8:00:67:41:1c:e6:94:8d:00:
89:12:34:16:4c:18:7f:48:25:d3:93:ea:c1:22:50:cb:21:cd:
24:7e:77:83:b4:b0:9a:f2:2b:34:f5:b9:ca:b8:9b:8f:23:89:
bf:fe:9a:e9:f3:6a:5e:b4:b0:e0:0a:b0:a3:12:3f:13:21:eb:
e0:66:6b:27:60:bd:57:dc:8e:94:56:8f:0f:ac:47:da:6e:58:
f5:18:eb:c6:bf:85:f0:ad:f2:34:89:3d:e7:70:f9:36:59:b4:
71:56:89:10:6d:1e:c3:9d:31:13:19:7c:0f:f2:29:2a:38:8f:
da:fa:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:25 2026 by rpki-client