Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: 8OzT8NLGxXzH7HIHzKCmGwS2U7m/MtCll0v+DiA9OoA=
Subject key identifier: 40:3E:31:41:CD:24:31:21:C5:27:4D:10:E4:86:41:26:2D:89:C9:1D
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019D98F4C4CA3620BA4C65287E0C5F361C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 1378
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: KJ7KTc+GHgFeRkwLj8pLM4E3l8bJ2DuL/f4XnlNhCdI=)
2: sZ_wJd4obInjvojttLVzF1c-iho.roa (hash: 3arQ7GDjRVulm35+QdBtPgi507F8KwHTfe7c2qEyJ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c4:ca:36:20:ba:4c:65:28:7e:0c:5f:36:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=403e3141cd243121c5274d10e48641262d89c91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:25:2e:0f:cc:dd:99:e4:92:24:d5:d5:94:
0d:eb:24:f4:86:a7:29:4c:e0:8a:54:51:4a:59:3b:
42:f3:0d:a3:1d:18:88:89:37:8f:39:01:67:1d:bd:
14:44:95:67:e1:cb:8d:17:6b:88:22:0a:19:09:73:
93:71:61:10:6c:d2:e6:dc:92:97:ac:78:fc:de:cd:
31:ce:a5:57:2f:5d:f5:84:46:1a:91:fc:08:1b:69:
c9:53:8b:13:14:a9:9f:dd:dd:9b:aa:eb:66:68:c8:
d3:73:b8:4b:d8:ca:5d:1c:30:82:2b:8d:ec:5c:9c:
c7:9a:0f:d5:79:f7:35:ae:37:4c:9b:c4:45:32:4a:
92:07:73:14:35:d5:6f:0a:9a:df:ef:47:30:b8:fb:
80:c3:6c:d2:48:62:c5:76:6a:cd:66:c7:1b:46:c1:
59:c6:73:51:fe:51:a5:2b:81:86:1d:bc:51:cf:80:
12:48:db:a7:aa:d1:e6:bb:b4:e9:41:47:e3:6f:87:
d9:51:9d:0a:51:d4:e8:73:4d:40:33:90:10:29:a9:
7b:ba:6a:7c:27:26:0d:23:0f:4f:8c:54:92:60:7a:
0b:78:b5:eb:67:70:90:ed:fb:98:1f:60:50:e3:a6:
f2:a5:a7:4f:44:88:61:15:40:b6:73:b6:cb:96:41:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:31:41:CD:24:31:21:C5:27:4D:10:E4:86:41:26:2D:89:C9:1D
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:fb:35:56:b2:5b:42:10:17:60:b8:13:5b:52:6c:ed:46:
99:3e:0a:8d:18:e8:80:9b:11:18:7b:f1:16:07:89:64:77:ef:
73:63:29:4a:ee:86:4a:1c:35:3c:45:25:82:62:65:25:e5:99:
fa:ec:f4:bb:c7:28:a6:cc:70:61:e6:e1:6e:64:13:7d:c1:e6:
cd:1e:9e:e3:71:56:f9:5f:a1:c5:60:c6:4e:82:bd:5e:f4:8a:
28:df:10:1b:a1:5f:f7:dc:20:a8:8b:f3:37:5d:bb:35:f4:00:
d0:6b:41:f4:b3:95:59:09:4c:24:cc:18:e5:db:03:56:c3:1c:
40:3f:9a:0d:ba:bb:57:74:cb:00:19:f5:36:3f:74:75:69:76:
f6:ff:f8:d2:eb:a3:84:9e:2f:f7:9f:9c:6e:86:1d:26:57:f8:
ac:ee:82:3d:5e:d3:90:a2:c5:15:46:73:8d:d0:3b:63:17:5f:
41:28:53:bb:bf:b2:4d:14:7a:7c:2b:33:91:72:d1:50:c1:d8:
37:87:be:59:5f:69:9b:7c:54:22:ed:55:91:6d:24:91:c9:de:
d4:b7:b5:c3:02:3a:f6:16:a8:1c:b3:30:f5:63:2d:71:f3:21:
e5:44:9d:72:7d:5e:b2:76:63:36:75:e9:ff:4a:0c:c7:ab:5c:
57:ee:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:35 2026 by rpki-client