Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: Ezbp8IhXJcuZDdZ/huYseRMuMlUqVznjdHXb9iaMz/E=
Subject key identifier: 45:BE:E0:FA:57:54:8E:2B:12:8F:7A:C5:9D:00:27:38:1F:C6:C0:5A
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019D9B87CBA3773D7616291697B022F5FDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 13:01:00 +0000
Manifest this update: Fri 17 Apr 2026 13:01:00 +0000
Manifest next update: Sat 18 Apr 2026 13:01:00 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: S8fD74g4vpg+T2Xi/dM80r2Rsv3HeXZoR3VEIWsvHUs=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:cb:a3:77:3d:76:16:29:16:97:b0:22:f5:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Apr 17 13:01:00 2026 GMT
Not After : Apr 18 13:01:00 2026 GMT
Subject: CN=45bee0fa57548e2b128f7ac59d0027381fc6c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:1d:0c:27:88:f2:d0:0d:59:2f:76:4c:7c:
71:11:e5:64:bd:9e:81:ae:b3:94:dd:85:0d:ec:5d:
b5:ba:1c:ac:63:10:dd:0d:25:c3:10:6d:da:20:50:
c6:97:fb:f0:b1:cb:52:34:57:29:2a:23:68:9c:40:
de:ea:95:91:60:bd:e1:7a:73:c9:0b:ff:19:cf:4e:
fc:ac:08:a8:34:d0:e5:0a:64:d1:e0:0d:12:13:ce:
ff:a5:d3:1c:79:74:59:49:6f:a6:2e:49:db:2e:c9:
f2:b0:44:af:37:e9:8e:e3:f4:3d:67:a2:32:41:6a:
15:cc:c2:96:df:04:77:fa:61:f0:55:42:62:0b:10:
66:35:75:4d:ee:ce:0b:8a:4b:cc:04:12:74:90:47:
d1:b9:3e:f2:0a:35:96:0f:56:d8:e4:05:fe:82:33:
00:ed:cb:5a:cc:06:62:e2:f4:43:f4:ce:d7:31:fc:
c8:b8:17:34:6a:bf:f4:cb:1d:6f:c2:b8:31:67:27:
7b:de:5c:6f:c1:8d:42:5c:3e:69:0f:a4:21:f4:91:
14:4e:c5:c6:a6:f9:d3:38:a8:77:ca:3f:29:09:47:
1b:85:96:5a:85:c4:0c:94:b0:39:08:98:33:11:3a:
52:eb:84:80:55:bd:a5:1c:9d:8c:ea:70:51:37:8e:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:E0:FA:57:54:8E:2B:12:8F:7A:C5:9D:00:27:38:1F:C6:C0:5A
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:af:fa:d7:29:28:ed:d4:df:6f:72:c3:b7:9d:9b:f1:9d:88:
4f:58:83:41:19:ed:84:7f:9a:9b:81:f6:7b:f1:5e:76:2f:7b:
7d:71:8d:46:fd:d1:ed:33:ec:8c:2e:f4:d8:a5:91:5c:e7:a8:
b2:2e:70:1f:54:0b:63:ec:3f:fc:1b:a6:95:93:e2:e9:a8:06:
38:80:36:5e:fa:e1:34:5f:39:eb:65:8b:5a:15:3c:d7:c1:a0:
8f:ca:b3:c0:df:70:ca:02:a6:6d:00:ed:09:7b:eb:50:03:67:
ac:a3:a6:46:cf:a4:2e:fe:3c:9f:e0:de:bc:13:66:4e:c1:84:
f7:2b:1f:f6:72:28:82:0b:cc:89:8b:82:1a:e9:ef:fb:62:28:
9a:17:63:88:d2:b7:63:5f:ad:0e:14:e5:54:30:c0:ea:5f:64:
f2:99:44:19:d7:26:29:b2:a8:f1:66:b2:1f:1b:f1:6c:9e:23:
8d:07:b0:eb:99:ba:84:69:50:ce:f9:df:5d:6c:15:cb:b8:83:
78:07:3c:67:6f:ea:c2:5e:94:ef:a2:04:fb:11:fb:9b:65:af:
2a:10:6e:3a:c1:ad:66:79:99:69:4c:75:32:49:1a:f7:5f:46:
47:95:59:34:81:a4:f0:26:2c:0a:10:ab:39:aa:91:93:4f:93:
42:9b:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:04 2026 by rpki-client