Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: vThXqKQnHrxuZEQb9OveLX0iUc34dYZrUcldK8zGgCI=
Subject key identifier: A6:B2:4E:5E:8A:78:B8:49:B2:CE:84:BC:8A:80:A1:8C:07:C7:88:65
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 019D9C2C9B98742807FA2391E397B770E13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 16:01:02 +0000
Manifest this update: Fri 17 Apr 2026 16:01:02 +0000
Manifest next update: Sat 18 Apr 2026 16:01:02 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: +t7eL/Ft7OgYY/pLrYKM/z8k3lrffjPhy/nHiAjQO3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:9b:98:74:28:07:fa:23:91:e3:97:b7:70:e1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Apr 17 16:01:02 2026 GMT
Not After : Apr 18 16:01:02 2026 GMT
Subject: CN=a6b24e5e8a78b849b2ce84bc8a80a18c07c78865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:33:6d:8d:45:d2:c9:94:bd:de:31:5e:45:
de:c1:6e:60:c4:e6:3a:b5:02:5b:56:c8:62:33:5f:
94:33:27:f9:64:7a:e3:7f:9b:bf:9b:9e:da:fc:48:
f1:10:90:6d:fb:1e:c7:31:fa:49:84:41:4d:b6:92:
f8:8d:48:bb:21:72:ab:0b:4a:cc:24:ab:4e:f0:56:
bc:0e:09:6d:f7:db:18:b6:88:58:93:b5:0b:26:10:
59:81:39:d3:49:a8:5b:76:56:57:eb:b8:c1:b9:a9:
81:54:24:01:53:fb:1b:39:58:da:56:aa:c4:52:71:
e2:09:90:5c:38:22:a1:b8:3f:d2:cf:0b:cd:89:65:
0b:41:35:b5:62:c5:61:1e:9b:0e:33:e9:3e:56:68:
fd:3d:17:bc:f9:3d:f0:d9:db:dc:e6:b3:47:df:b9:
a2:f2:58:a1:f3:4f:11:82:1c:92:01:72:c3:2d:7f:
50:d0:01:c9:3d:7c:b6:77:3e:8f:58:ce:b7:d8:7a:
6d:1c:be:cc:75:94:44:65:75:1e:46:d3:7c:92:f5:
6e:4b:d4:80:fe:02:e5:21:f4:0b:e2:17:12:5a:b4:
63:d8:de:7c:16:d3:1c:e2:73:61:78:d6:c0:4c:e0:
01:bf:76:7b:66:64:ea:05:cd:c0:af:b5:52:78:81:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:4E:5E:8A:78:B8:49:B2:CE:84:BC:8A:80:A1:8C:07:C7:88:65
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:2f:5a:f8:38:8b:e1:1f:5e:58:b2:42:13:31:93:38:81:
18:69:e6:3c:fa:1c:51:6c:c8:b2:38:1f:f8:30:f7:df:ac:7a:
32:2e:b1:a3:55:73:63:c6:3e:8a:f4:85:ae:f0:f1:b8:a8:78:
46:74:31:95:1c:62:13:c4:89:03:86:16:56:68:e9:6f:f9:96:
1a:7b:85:45:13:40:1b:42:29:28:e0:c6:8d:83:d6:84:04:28:
58:ff:8d:fb:ac:37:d1:e9:ab:59:2a:10:cb:01:00:d4:53:78:
c0:68:55:16:14:86:fa:9e:82:26:99:b7:37:82:2f:97:21:2f:
e8:ed:ec:fa:39:4c:c7:97:bc:74:61:df:cf:66:66:ab:d7:b2:
e5:3c:2a:2f:d4:33:a2:40:dd:1b:fd:83:9f:b8:44:6a:98:a0:
2b:63:49:80:ed:d1:f1:ab:27:26:37:83:8c:99:09:40:b5:f1:
c1:a7:32:4b:8b:ec:af:4d:35:8d:80:14:39:10:e3:83:01:7e:
fd:eb:15:b6:c5:95:85:81:ed:8e:9b:ab:46:06:12:c0:9b:27:
e3:c7:aa:dc:91:1c:90:1a:27:bf:c6:b5:80:0c:55:ba:04:6c:
2d:8f:c6:4d:dd:08:7a:4c:e7:40:4b:96:73:57:6c:c7:1c:d7:
90:c6:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:13 2026 by rpki-client