Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: ITwXJ6BtZNoq0oTIvRq4jgoH2/shHyTtaUm4rVb8LL8=
Subject key identifier: B4:FF:A5:64:72:07:DF:37:B3:19:E3:32:8F:6E:C1:F0:4C:3C:3E:B5
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019D984F99B8D5D12AE857E3A1A97A84E60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0EC0
Signing time: Thu 16 Apr 2026 22:00:46 +0000
Manifest this update: Thu 16 Apr 2026 22:00:46 +0000
Manifest next update: Fri 17 Apr 2026 22:00:46 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: bOrUaJkB7uI/YJkQPXTNSP6k0YkF/4t2PGp2A0ALIkg=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:99:b8:d5:d1:2a:e8:57:e3:a1:a9:7a:84:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Apr 16 22:00:46 2026 GMT
Not After : Apr 17 22:00:46 2026 GMT
Subject: CN=b4ffa5647207df37b319e3328f6ec1f04c3c3eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:26:b1:1f:9d:d3:c1:13:3c:78:fe:ba:b9:
48:25:62:95:d1:fe:57:55:d8:66:09:dd:6e:95:c4:
3a:53:a9:7f:ce:d5:2b:27:08:dc:90:fe:43:05:99:
97:90:ee:43:a6:ec:1c:96:e3:3d:8c:a1:d2:61:ad:
e9:7d:50:7f:38:6f:2c:3c:d6:49:49:92:94:a6:f4:
5a:21:07:3b:36:a2:ef:ef:4e:d2:70:d3:28:73:df:
af:37:61:6e:d7:94:c3:d2:ac:ad:7d:7f:b1:c7:57:
4c:22:94:59:97:c9:14:ae:4a:d3:80:47:ce:b5:89:
ea:7c:c7:c6:eb:70:34:7f:ba:d4:7c:a3:3c:75:3f:
90:d9:7e:1b:bf:47:41:66:91:d6:bd:f2:86:b7:9c:
c4:ff:e7:7a:01:9e:b1:f8:9a:0e:07:2b:70:51:44:
68:cc:6e:06:cd:38:c7:d9:25:bc:e1:cf:38:ba:e0:
17:78:53:c3:50:28:56:ae:a9:00:d5:a4:b2:1f:35:
4f:a5:6b:fd:02:fb:cf:09:ce:c2:97:47:2e:1b:a3:
e1:26:99:17:e7:2d:cf:9c:bb:a4:0f:91:50:1b:f9:
89:8f:ec:92:51:df:40:44:5a:d1:c1:db:28:70:da:
5b:f4:dd:c6:11:8d:e8:4d:6c:9f:a9:5e:06:35:70:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FF:A5:64:72:07:DF:37:B3:19:E3:32:8F:6E:C1:F0:4C:3C:3E:B5
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:eb:5b:eb:b2:e2:c7:72:07:1b:db:1d:19:6a:bb:83:01:
08:e9:93:e2:59:f8:2d:13:7f:5c:be:69:e7:9e:87:27:e0:20:
b5:6d:65:32:8c:39:46:f2:d9:fb:d4:94:f8:8b:8a:de:26:d8:
20:85:a0:c5:c2:a0:28:9e:11:e1:46:8d:f8:1a:f2:0a:60:96:
b6:a7:43:99:41:8d:9a:71:39:80:2e:dc:cf:6f:63:6e:57:35:
6e:7f:c7:c7:55:dd:34:41:44:c5:a5:a2:d6:27:b6:a7:95:6c:
13:3a:67:dc:29:e8:ea:0d:a1:d8:92:1b:36:7a:90:b0:70:87:
d2:ce:5b:73:4e:e6:97:6d:c5:d3:05:06:06:92:c7:77:44:33:
f3:00:fe:00:a6:5a:3f:44:ff:78:ff:fa:8e:52:3d:e2:2f:44:
b3:15:af:d2:45:44:42:c7:67:e2:7c:b5:e5:e1:34:ba:85:a6:
19:16:1b:39:11:51:7f:62:32:c8:b4:34:3a:eb:27:f8:28:fd:
29:1a:b9:c3:d9:7a:59:de:b1:ee:ed:ea:28:ba:7d:2c:ff:8c:
89:5e:ab:82:0b:e1:92:09:65:15:7d:ad:10:56:ae:77:90:a3:
09:d1:85:8e:27:c7:2c:c8:f4:26:04:c4:2f:05:70:ea:5d:78:
0c:0f:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:53 2026 by rpki-client