Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
File: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft (raw, json)
Hash identifier: 5OF1b7Ou7Lt0i/xb1TA9+bircyZP4x9+RUFvn3VizqE=
Subject key identifier: E6:F5:C5:9D:F2:BB:5A:66:AE:50:95:A5:A3:53:97:20:EB:E8:7B:8A
Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Certificate serial: 019D9BF5CB38ACF06B5556A31FB51F319701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
Manifest number: EA
Signing time: Fri 17 Apr 2026 15:01:09 +0000
Manifest this update: Fri 17 Apr 2026 15:01:09 +0000
Manifest next update: Sat 18 Apr 2026 15:01:09 +0000
Files and hashes: 1: 5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl (hash: 90VcjH/Ax5W1IICtOzBHqbvM3W3B08kczd/j+DJ+nRY=)
2: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (hash: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:cb:38:ac:f0:6b:55:56:a3:1f:b5:1f:31:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a
Validity
Not Before: Apr 17 15:01:09 2026 GMT
Not After : Apr 18 15:01:09 2026 GMT
Subject: CN=e6f5c59df2bb5a66ae5095a5a3539720ebe87b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:10:c9:e1:63:00:c7:00:6a:0d:cf:e1:ed:
e4:d0:81:25:58:26:45:cd:ff:44:e2:86:28:3d:b9:
83:d2:59:90:b1:c0:f6:89:ce:9d:33:de:53:bb:b8:
8a:1b:e9:62:45:62:77:75:10:0a:8a:e6:c7:22:03:
b8:bf:9f:a6:32:2c:04:41:65:3f:f0:f9:9c:bc:84:
6d:b4:6d:fb:8c:59:68:69:fd:be:51:15:af:05:71:
d1:dd:b1:90:dc:ee:3e:a7:33:cb:78:28:2b:37:a3:
a0:b4:08:db:b4:f8:9d:2f:21:d9:15:42:ce:8b:da:
2c:96:c9:99:6b:bf:0c:8b:ee:81:9f:ab:be:df:de:
ef:6d:5d:36:ea:07:f7:fa:d9:dc:90:f3:51:2f:5e:
ac:42:90:6f:62:ec:19:67:27:b6:23:21:6b:f8:74:
b8:89:61:bc:f3:52:c0:11:5c:c5:44:e5:eb:8b:2c:
46:41:2e:63:56:dc:08:03:03:04:74:a2:7a:5f:1a:
e1:c9:af:67:52:06:b5:3d:ea:16:77:80:51:c0:34:
3f:2f:36:a8:a5:2e:21:c5:2a:a0:ff:1c:05:75:c3:
71:28:84:20:f9:c0:99:c7:4a:07:10:df:0a:90:81:
89:fb:c3:8f:ab:46:8c:f0:37:7c:f5:34:a8:d7:35:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:C5:9D:F2:BB:5A:66:AE:50:95:A5:A3:53:97:20:EB:E8:7B:8A
X509v3 Authority Key Identifier:
keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:6d:0a:5d:1b:e1:b7:5d:f4:f5:5c:23:bc:09:88:54:c1:
ae:11:26:cd:74:fd:40:ea:fe:13:39:ef:de:16:67:22:8e:f5:
d3:88:f4:43:53:6e:c3:c2:70:a3:c7:52:41:75:e0:c3:aa:10:
9b:18:58:2f:f4:e9:06:dc:c5:91:f3:ef:08:9f:62:9a:17:1d:
fb:50:5c:bf:6e:0a:75:aa:cc:5d:91:69:4a:22:08:3f:8f:0e:
09:4d:11:28:50:38:e2:b5:d7:dc:f9:f4:ff:ed:5a:75:58:4a:
5e:fa:11:75:99:ce:bc:da:b3:3a:51:28:d1:d4:c1:ee:ae:89:
44:c7:97:77:60:df:f0:f3:03:ab:ee:3d:32:8a:eb:54:c2:d5:
ba:0b:66:d8:c0:72:cc:ef:26:11:0f:82:28:a5:71:09:cb:f3:
53:20:ef:b9:68:3a:ba:ae:16:85:2f:3e:19:05:f9:a9:46:e0:
75:33:39:f0:b0:49:e3:a1:87:de:e4:eb:5d:81:ec:24:44:b1:
19:44:0c:df:e0:65:66:ab:79:f7:f1:bb:73:4d:8d:83:9b:80:
a0:0f:e5:e4:67:5d:dd:7b:32:df:0e:c3:a6:2b:6d:22:ca:b7:
86:f5:a5:a6:7c:a9:ad:23:74:81:0f:5f:97:13:79:47:4d:a4:
15:c3:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:37 2026 by rpki-client