Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: XYvDdDF2Ong7C72X9hNP/47PXU0XblhvoYGE3fZk9iE=
Subject key identifier: B7:4A:0D:BD:E8:62:1A:71:D3:8C:22:6E:C8:EB:4A:D4:DF:73:43:0F
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 019D97E19A20947C62588BBAB16FB1C7B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 20:00:37 +0000
Manifest this update: Thu 16 Apr 2026 20:00:37 +0000
Manifest next update: Fri 17 Apr 2026 20:00:37 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: b0V9cSm+lpEFiiH4uekRS5dhRvD59wRG+c8mQlfCZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:9a:20:94:7c:62:58:8b:ba:b1:6f:b1:c7:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Apr 16 20:00:37 2026 GMT
Not After : Apr 17 20:00:37 2026 GMT
Subject: CN=b74a0dbde8621a71d38c226ec8eb4ad4df73430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:67:e0:df:62:72:d5:08:9f:65:1c:86:da:
9c:58:ef:9d:b3:8c:c6:99:d4:a4:c9:76:a3:5d:77:
27:42:ae:e0:d2:aa:90:bf:74:ba:55:82:86:7c:74:
dc:ae:41:56:4b:30:2b:f7:89:7d:31:dd:1c:87:59:
cf:46:7a:8b:38:b1:18:2e:21:da:79:a4:3a:f4:40:
7f:83:27:a7:e5:4c:31:c3:a7:85:db:92:1c:91:c0:
c9:e0:94:8a:4c:d4:bb:15:8b:5d:58:90:31:90:8b:
72:15:a0:f6:ba:15:15:fa:ed:95:24:7a:30:b0:53:
a1:a7:30:1b:93:d3:8e:3f:16:b1:e2:18:3e:14:58:
53:4e:f5:67:51:17:c1:25:cb:5e:1a:eb:9c:5c:3c:
92:5d:53:57:fb:63:57:2b:03:a2:c7:96:40:89:e2:
f9:02:7b:a5:d6:94:e1:e6:1e:a7:dd:77:ef:e7:cd:
50:29:fe:70:51:85:7d:03:02:b7:7e:cf:e7:f0:92:
f5:b8:f3:5a:51:f1:22:95:c9:9d:55:b2:cc:93:80:
f8:71:bc:3c:f5:53:64:4d:e5:96:c7:54:6a:44:8f:
f8:55:dd:85:3f:03:df:37:72:be:94:91:11:a5:79:
9a:39:40:2f:92:c6:e9:39:8d:51:d6:04:4d:07:19:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:0D:BD:E8:62:1A:71:D3:8C:22:6E:C8:EB:4A:D4:DF:73:43:0F
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:fb:44:ca:8b:3e:40:3a:38:c2:5f:e5:0a:a2:04:f7:3e:
b8:73:b6:8d:15:c6:63:ce:f4:d6:81:dd:c7:2c:8c:05:85:dc:
3e:c2:8d:65:40:7f:22:bd:24:62:8d:5e:66:56:31:36:66:cc:
8f:38:2d:ba:4a:45:20:8f:76:90:6e:17:15:dc:f4:70:60:49:
9d:9f:f9:89:7d:fe:16:60:1c:38:06:ff:87:13:a3:d1:de:78:
68:02:71:72:78:a5:5b:b1:ee:a9:87:7b:f3:12:70:62:83:51:
42:4e:41:2f:09:f6:4b:db:7a:35:51:77:fb:fb:e4:58:53:ee:
c4:59:8d:31:cd:d1:f7:56:5f:bd:5c:7c:50:df:79:04:1e:2e:
87:02:7f:bd:77:f2:3c:c3:a5:dd:53:79:fb:a0:b7:b1:77:b7:
75:4f:34:ad:45:71:2e:a8:f5:d8:56:54:f9:aa:cd:cb:c7:c3:
67:d7:49:2e:82:06:0a:53:af:83:8b:7d:dd:ea:9f:4a:56:59:
5a:05:9b:1d:26:61:37:88:8f:5a:ae:d8:9d:37:2f:6d:d6:5f:
31:a8:d5:e4:82:0b:f0:44:22:1a:23:61:84:e4:8d:67:91:4a:
0a:1a:12:5d:32:7c:8a:5a:0b:a3:9d:ce:77:a5:9d:62:90:a8:
a3:9f:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:03 2026 by rpki-client