Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: pkCmXHY1DSOTVJ6XSFQGCDbDKYpCYIPj9hNjRTLsB6k=
Subject key identifier: B6:A8:C7:31:DF:57:FF:1F:48:14:3F:C1:CF:5A:EB:90:A9:90:46:BA
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019D9A06B1E00B515E322A7481F68F3DA5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 0200
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: xr+Es8EBp6lrdQUnd7PoRQZa6f/JUYT7+emJfYz4ACY=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b1:e0:0b:51:5e:32:2a:74:81:f6:8f:3d:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=b6a8c731df57ff1f48143fc1cf5aeb90a99046ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d1:4f:ac:67:27:98:a2:39:47:7d:8f:76:
66:28:e1:d0:65:70:d6:0f:0f:f8:c8:47:24:92:bb:
3f:1a:74:24:d0:d6:6d:de:a6:24:22:c8:90:46:ca:
7e:dc:9f:e3:38:4f:bc:c0:7f:30:82:0d:52:13:da:
2e:5c:05:0c:97:b9:ac:2f:73:3f:55:78:99:a0:cf:
2a:36:de:b6:3c:1b:a3:1e:a2:86:29:7b:ab:26:c5:
0b:38:bc:61:07:b5:1e:06:5b:f7:c4:58:57:29:b9:
ca:e2:69:af:c2:12:6c:b0:f6:1a:b1:fa:79:50:d7:
bb:97:a0:7d:ee:e9:38:41:a2:11:6a:34:5a:a5:7d:
bf:3e:3f:f5:e8:c1:11:53:c4:49:4f:6c:03:ef:3a:
54:a9:54:4b:df:5f:7b:63:08:e8:13:35:31:0d:91:
85:6c:17:aa:e0:a0:ae:37:9b:15:09:a0:e3:15:04:
6c:52:b4:52:5b:6a:a7:5a:24:ed:89:db:f1:ab:ec:
ae:00:b0:5e:0b:b5:df:ce:4b:a9:91:08:32:b2:eb:
37:f8:8f:53:71:4e:c0:25:24:38:ec:11:4c:5a:b3:
2c:38:4a:19:e4:e9:ba:74:0e:d7:9d:24:17:da:e8:
85:fe:49:72:41:71:a2:9c:cc:6c:9b:fc:ab:d2:2d:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:C7:31:DF:57:FF:1F:48:14:3F:C1:CF:5A:EB:90:A9:90:46:BA
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:5c:8a:ca:4a:7f:f2:63:79:84:f1:22:79:bb:ef:23:a7:
05:f9:12:64:e7:70:43:40:47:6d:39:66:8e:a3:5f:67:86:45:
1a:40:af:e5:27:c3:aa:5b:86:43:4d:c7:72:1f:92:53:5c:7c:
e7:7c:5b:02:87:ec:5f:d8:11:cb:ba:74:dd:71:fc:60:d8:14:
f7:f1:39:2d:ce:2a:6d:03:03:3c:72:be:a6:9b:01:5e:6f:84:
aa:ea:d9:35:55:5f:04:33:54:3e:95:a9:f3:09:4c:42:7e:8d:
8c:7e:51:8c:31:7b:02:f3:13:97:53:56:29:d9:40:39:da:1b:
1f:8a:74:64:ce:cb:75:11:a0:44:70:f6:4f:3d:af:cb:55:85:
40:4e:c5:ae:dc:ad:7c:78:71:fd:0d:35:77:c0:9e:f4:b4:07:
e3:7c:ff:7d:b7:22:9f:f8:06:9e:9d:ed:e8:e5:5a:10:17:99:
ac:7d:26:bb:51:f4:da:34:a7:10:53:97:e2:01:ce:2b:7f:dd:
2a:fb:ac:dd:bb:98:e6:01:29:63:e9:43:d5:3e:de:ea:94:ff:
a1:c6:13:43:39:71:ba:bc:02:27:5f:55:4f:7e:89:13:79:e7:
77:47:56:54:8f:34:04:07:17:dc:43:e1:05:b6:ac:a2:b2:1c:
af:f2:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:45 2026 by rpki-client