Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: boMo4g3wWf+Wzvh0jDo4vUViNFh8EvfCEW+O8TW4Bjs=
Subject key identifier: 60:5E:19:2D:5B:73:C6:67:54:56:AD:9A:F7:AB:D7:A7:66:3C:DD:D8
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019D98F43118A6636A665AF3CEB100883CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 1485
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: 2NziICk2IrRwJYGoeaLp0+koNcVxUGehlYMY4I7KDUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:31:18:a6:63:6a:66:5a:f3:ce:b1:00:88:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=605e192d5b73c6675456ad9af7abd7a7663cddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:01:e8:43:6d:7c:3a:1d:2f:b2:e5:83:3e:e0:
f2:68:ae:30:43:57:c5:6e:4d:fc:f4:c8:55:6b:f3:
f1:19:9f:7b:d6:58:c2:e7:d7:9c:cb:64:03:7d:be:
bf:ce:eb:ad:3b:7d:b2:81:61:18:b3:71:73:08:82:
9e:26:0c:8f:57:64:98:59:6e:49:33:05:a2:c2:2f:
e5:11:5b:90:aa:7d:95:2e:3a:ea:71:54:12:e5:06:
7a:b8:b2:62:70:18:16:06:3c:b7:e6:6c:c8:04:4e:
83:61:25:f6:3a:a5:25:93:c0:f6:d4:fe:9a:87:1b:
b7:63:ed:8c:2d:d2:2c:cf:05:a2:cc:66:e8:d6:f7:
0c:71:ae:59:fc:2a:51:d1:c0:79:5c:8f:67:f6:44:
72:36:29:b8:0d:5e:69:75:be:6e:dd:28:2d:a4:62:
ee:76:d8:32:b7:98:a8:2b:f8:34:76:c6:ec:98:a0:
1e:2f:4f:47:ca:02:24:12:c0:61:3a:24:0d:ef:dc:
dc:1a:93:d1:86:9c:dd:21:6b:b3:c5:97:e3:f9:8a:
83:a4:00:94:46:60:7c:ee:8c:08:bf:79:5d:38:ce:
57:a9:fd:c8:06:8e:d5:76:b9:a3:85:83:d1:6f:04:
fe:bf:e7:b1:79:c3:03:b4:08:0c:00:3e:6c:e6:ee:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:19:2D:5B:73:C6:67:54:56:AD:9A:F7:AB:D7:A7:66:3C:DD:D8
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:8c:5f:c9:86:24:37:37:1a:73:17:93:0e:37:df:bf:1a:
a9:54:3f:7f:a8:b3:af:26:98:b2:b8:1f:49:1b:a0:d4:4b:44:
e5:2e:01:83:1c:5e:e5:f9:e8:79:e5:40:ba:91:89:a1:87:59:
be:6d:dc:4c:e9:29:8a:74:09:12:e0:3e:56:68:2a:14:d0:04:
b3:9c:3a:a4:85:4e:7c:79:5f:e6:a4:54:99:62:52:a6:67:0e:
1c:f7:a0:b5:24:49:d4:95:d8:73:7d:7d:94:85:dc:96:65:3e:
c1:68:c1:42:04:35:05:ef:28:c5:12:6d:24:04:c5:cf:17:7f:
16:02:71:65:7c:40:26:d2:76:2a:d4:52:a9:64:15:de:4c:c4:
a0:6f:97:3c:11:cf:34:48:c9:74:97:0e:0c:18:26:1e:44:4e:
59:72:61:21:e4:b4:fd:05:e0:c2:c1:de:22:c9:24:17:6f:bd:
3a:90:62:c7:88:29:1a:21:f6:f2:ca:02:a1:bc:12:86:a4:67:
8c:dd:7e:2d:97:b3:3e:bb:00:12:c6:1a:d1:10:c6:99:c0:74:
50:43:10:3e:88:7e:34:57:11:8e:9d:d6:ee:b4:d1:a0:cf:39:
a7:50:61:eb:b5:28:16:da:fe:41:f3:8b:8f:71:67:e7:f9:f8:
0d:2c:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:26 2026 by rpki-client