Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: gXUuQ/gYWaOa9SqOKGx161dzOt5pWsDFkXGbvwT7FmE=
Subject key identifier: 17:BB:41:C5:7E:97:10:2B:F9:3A:61:C5:1E:56:D4:D4:15:AF:1C:56
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019D9BF5C120143697F62419273EE8F10789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 0373
Signing time: Fri 17 Apr 2026 15:01:07 +0000
Manifest this update: Fri 17 Apr 2026 15:01:07 +0000
Manifest next update: Sat 18 Apr 2026 15:01:07 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: RyNdOaP8mwjSidLJ1Akov7HUaFr3TDKKuqlfS++tuTE=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:c1:20:14:36:97:f6:24:19:27:3e:e8:f1:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Apr 17 15:01:07 2026 GMT
Not After : Apr 18 15:01:07 2026 GMT
Subject: CN=17bb41c57e97102bf93a61c51e56d4d415af1c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:98:31:8f:c3:5e:19:53:28:76:8f:98:ff:
ee:4a:21:14:f4:10:39:ca:23:bd:a7:81:1f:a3:72:
be:6f:2b:00:23:a6:eb:b8:8d:c4:80:cd:22:70:ca:
21:ce:83:4d:68:53:64:75:a1:41:1c:d3:4e:ad:49:
12:4e:8b:3f:c5:bd:86:94:2e:ce:f7:10:38:c8:b1:
97:e3:ef:83:fe:b3:33:38:f4:64:8e:06:53:2f:15:
f9:bf:44:c6:83:f0:c2:04:ab:b9:18:c6:61:16:19:
a5:9f:e4:b2:14:54:06:f4:34:6e:4e:34:d9:76:7b:
0c:41:37:78:e1:42:8b:25:18:51:3f:cf:01:65:e5:
ac:aa:90:f7:e7:15:37:bb:18:37:85:45:85:3d:b6:
36:a3:05:78:33:03:24:ee:af:b5:51:2f:41:06:f6:
71:04:3b:71:32:58:9e:00:dc:21:59:5b:f3:08:4d:
1f:fb:9d:04:c6:59:1d:0a:74:41:8e:39:29:e0:83:
f7:8d:b4:b9:c7:d1:69:29:b6:a8:76:d5:27:4f:82:
77:b7:5a:a3:02:42:db:38:8f:1f:4f:28:76:68:35:
15:da:cd:92:bd:1d:b4:01:7d:24:5e:6b:aa:61:3b:
28:92:e3:c0:fb:a2:a3:b7:c2:4d:eb:df:b5:62:61:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:41:C5:7E:97:10:2B:F9:3A:61:C5:1E:56:D4:D4:15:AF:1C:56
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d9:f4:64:3e:b7:e6:01:3d:52:04:d2:00:c6:44:32:3a:8a:
31:df:bf:1c:12:cb:ff:dd:03:49:15:fc:73:cc:b9:1d:42:8a:
1f:e0:5b:86:48:30:07:0d:b2:18:28:e9:b3:1e:77:34:51:4d:
a8:c3:1b:cf:4d:52:80:80:80:4b:fb:36:aa:c3:69:8d:6a:dc:
44:e7:02:3b:d9:39:14:f2:17:17:f3:b2:df:d3:a7:15:e9:d8:
47:ee:ac:75:54:72:00:c4:66:d1:de:39:af:9c:06:98:00:0f:
ed:ef:7f:45:c8:f3:33:09:71:53:1d:40:d0:1b:cc:7b:e3:3a:
1f:4f:01:29:60:19:4b:6f:05:61:4d:45:9a:f6:c7:cd:64:04:
f6:75:ca:2c:64:5c:ff:ab:1c:95:35:4f:b8:61:37:1a:8b:54:
b1:9e:b6:e7:2b:68:e1:24:13:18:a1:26:af:48:ec:f7:0d:91:
ed:ac:6e:20:75:40:41:fd:2d:c2:70:f5:28:d9:16:bb:2e:e9:
f1:6a:c9:92:38:7c:1a:46:34:3d:3b:1d:80:67:90:83:15:95:
1f:02:29:ed:3b:9c:50:dd:2e:f4:f5:56:4b:00:d4:55:0f:f4:
cf:18:1a:78:a4:3a:26:22:ec:e4:78:70:65:bc:85:38:3d:11:
de:25:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:12 2026 by rpki-client