Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: f2KOxysZarNKoUfQAP7GpUzFbF15ifBGjLRmZkeiMZc=
Subject key identifier: 3E:6E:7E:5D:34:80:3F:50:09:84:C1:02:1A:6E:4C:84:DF:70:3E:24
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019DA30A2787E3E28828367B2FCCA36783BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:00:44 +0000
Manifest this update: Sun 19 Apr 2026 00:00:44 +0000
Manifest next update: Mon 20 Apr 2026 00:00:44 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: FR1fnzsnKqe1Y/3XFA6F0MGG5sMHSZ8J67DmbII6BH0=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:27:87:e3:e2:88:28:36:7b:2f:cc:a3:67:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Apr 19 00:00:44 2026 GMT
Not After : Apr 20 00:00:44 2026 GMT
Subject: CN=3e6e7e5d34803f500984c1021a6e4c84df703e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:ac:65:de:d8:95:0d:e3:df:45:e3:d8:d2:
2b:bd:69:e9:6e:68:e2:f5:f9:25:58:00:3e:0a:e4:
9e:bf:39:63:30:f9:51:f3:6c:5d:48:9d:9b:71:49:
d4:5d:cd:b7:fd:5b:a4:e8:26:16:5d:66:f4:0e:4d:
5c:d5:9c:7e:95:b5:8c:56:3e:37:f8:39:25:de:94:
33:de:78:9c:4c:96:f4:92:87:ca:b0:e2:6b:19:a4:
1f:cd:2b:c2:72:2e:5f:c1:69:94:cf:e3:13:a0:9c:
c2:ae:62:3c:25:c2:e5:b1:8e:92:fe:85:d3:a1:82:
70:c8:11:38:5d:04:80:77:d7:00:45:77:98:06:11:
df:fa:6f:af:21:2f:9c:30:63:88:7e:ee:e3:d9:b0:
9a:a4:55:1e:74:0e:66:a9:b7:0f:26:33:40:db:98:
8d:7c:f5:00:a2:17:b4:52:04:1b:94:74:89:d3:49:
ee:b7:31:47:0f:29:c7:69:d4:8b:e2:30:9d:50:a3:
ad:2a:3a:6c:d3:6c:d7:10:71:00:10:2e:eb:b7:e9:
70:d6:91:40:08:45:7d:d5:1c:19:2a:8e:5e:de:da:
95:b8:c4:ee:65:3b:e8:07:23:39:3d:ab:a5:d0:1f:
8b:6c:6c:ed:4c:d2:d6:69:25:25:e6:e1:6d:ec:61:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6E:7E:5D:34:80:3F:50:09:84:C1:02:1A:6E:4C:84:DF:70:3E:24
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:c6:1f:cd:ba:51:88:e5:3d:3b:28:e5:07:03:ec:03:88:
2b:16:c4:92:5d:29:56:63:c1:ff:e8:fb:f3:42:04:3a:d7:dd:
70:74:93:9c:08:53:4c:8d:7d:3c:da:c0:c4:5b:3e:c9:13:71:
14:a7:35:be:1d:9c:f2:18:e0:85:77:07:21:67:01:af:30:ad:
7a:8d:09:6e:ea:40:bd:2b:52:e1:c2:cb:47:84:a0:9e:c2:76:
fd:28:30:30:76:19:40:bc:cb:ae:82:62:50:c5:b4:3f:fa:7e:
0d:e3:42:9c:63:95:48:72:18:ab:49:d5:09:70:77:15:03:6f:
0c:f2:af:28:9b:66:93:49:19:92:52:20:75:80:77:59:7c:9c:
32:d1:00:8c:98:16:bd:e0:09:21:64:39:5b:22:12:e8:72:18:
b6:1f:d0:0a:f5:69:d9:4c:82:1f:60:2f:f5:9c:55:dd:bd:3e:
e2:ff:0b:dd:b4:51:2d:40:ac:6e:37:c0:03:e9:ce:af:3b:c2:
30:fd:a9:96:4e:ac:e7:10:4a:9b:34:2a:ba:4c:83:d7:0b:fe:
93:1f:05:6a:45:fd:5b:4d:76:55:cd:9f:b2:58:47:24:e0:56:
03:9d:83:74:e1:82:dd:67:08:b3:97:bf:0c:3b:a0:b2:1e:98:
0f:40:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:11 2026 by rpki-client