Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: ux26VllC6nnM1Ekd2VBZpypKq/WZ56RhZemFUsgXtwY=
Subject key identifier: 1A:5A:30:33:41:7A:69:83:73:67:E9:1E:B0:D9:A3:B3:69:A5:CB:81
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019D992AF32F5F557EE6E43E87ACDC63D6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:21 +0000
Manifest this update: Fri 17 Apr 2026 02:00:21 +0000
Manifest next update: Sat 18 Apr 2026 02:00:21 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: JfoDhi+VZ28ZXke1P0knspvN32HuRlarW1HvsRpyLV0=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f3:2f:5f:55:7e:e6:e4:3e:87:ac:dc:63:d6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Apr 17 02:00:21 2026 GMT
Not After : Apr 18 02:00:21 2026 GMT
Subject: CN=1a5a3033417a69837367e91eb0d9a3b369a5cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:5b:3d:0a:98:aa:f7:4d:a3:56:89:d1:f0:
8c:f5:83:90:a8:d6:76:fc:f9:a0:34:de:87:e5:a5:
41:67:30:97:a1:29:56:fc:b9:f2:04:54:95:06:02:
a3:a0:ab:de:0b:23:9f:f6:1b:cc:dd:9c:ce:a1:85:
d5:78:3e:5f:d7:fc:11:a0:41:f7:ea:21:6f:2e:0f:
82:e7:65:a6:d2:b3:ce:eb:f1:68:64:66:1b:0d:dc:
5c:0a:ce:84:b1:0c:90:bf:75:b7:7c:1c:54:4d:de:
f8:b4:61:82:cb:5e:4b:be:6d:65:98:9a:86:c4:ad:
bd:08:f3:6b:dc:d8:ce:54:ef:9b:ee:2c:f1:e6:10:
29:79:1a:7f:52:6d:b6:b6:35:a7:a6:b2:65:60:ca:
50:c0:09:fe:fe:b9:86:95:f3:b3:5e:91:bc:fc:63:
de:8c:11:eb:75:47:ed:bb:b8:71:a9:08:f7:bb:f6:
e6:bc:1f:b5:25:05:8b:6b:5c:85:82:63:18:02:0c:
1c:aa:be:e7:f2:6a:4b:15:fb:85:72:0e:ef:c7:2b:
29:2b:7c:c3:c8:34:2f:84:04:10:ba:66:79:83:cd:
00:cd:73:33:78:31:a1:86:9b:62:29:1e:33:2d:d3:
55:02:be:78:12:63:06:27:1d:67:94:42:eb:df:73:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:30:33:41:7A:69:83:73:67:E9:1E:B0:D9:A3:B3:69:A5:CB:81
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:12:bb:60:69:07:fe:a2:6f:93:70:de:02:e9:cb:16:50:
5f:ca:3c:c8:91:f0:c1:a6:88:cc:4a:27:c4:24:7d:d5:a2:a4:
b0:dc:c1:cb:21:b1:04:50:af:9c:b0:17:ea:c5:52:54:f3:47:
1e:97:2f:3f:e1:1d:cd:a6:7a:cf:f5:50:a9:58:76:57:fe:de:
9a:f8:67:59:01:82:ca:06:de:00:8f:81:a8:db:5b:5f:ec:44:
17:6a:d7:da:38:15:70:f1:c1:a0:26:be:bc:0a:96:f1:1b:56:
fa:e3:01:f2:3f:ce:cc:1b:b0:00:92:c9:46:f2:06:aa:9b:12:
8c:81:51:05:61:e2:20:f6:12:15:a2:fe:1d:0e:f8:ae:c7:00:
e0:78:9c:32:c2:1d:18:21:c7:cc:d2:7b:1f:a7:c7:5f:c5:66:
e5:d9:48:55:d9:e2:03:75:12:51:cd:96:81:c1:8f:e4:11:11:
69:76:a6:0f:37:e2:67:11:fc:34:83:73:03:89:ef:51:e8:17:
76:18:48:8e:cc:e8:6d:f2:82:6d:b5:fc:0a:93:1b:5b:e3:b7:
0f:bb:18:81:b0:c7:17:dc:b2:7b:ec:1f:67:b3:5c:4a:d4:3a:
31:29:a6:f8:b3:f9:b0:a6:a2:1c:ca:7e:32:5e:8a:7f:3d:1c:
c3:d7:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:27 2026 by rpki-client