Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: Ef6ZeF7bCoL/AHHtdU6vNwYtHZQaI3UcGfJm3ojlrsU=
Subject key identifier: 3E:8E:D2:03:41:1A:AF:34:9A:0A:39:28:ED:23:C1:59:44:7E:F8:49
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019D99CFDCEAF4B20E83EBB35EE8048A43DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: 52GpFQ50DEI3Nf7ARHqz4bUpoUEcV4DZ748hBHyhlP0=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:dc:ea:f4:b2:0e:83:eb:b3:5e:e8:04:8a:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=3e8ed203411aaf349a0a3928ed23c159447ef849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:52:24:16:77:51:11:56:b9:b9:f7:20:fe:
d1:67:b3:75:cc:42:33:46:fa:e9:f4:be:41:7e:a5:
d1:4e:b8:80:28:17:65:bc:35:f4:3b:ee:4e:a2:be:
36:f4:d1:72:ac:db:74:4e:84:0f:35:5b:16:eb:44:
70:fc:50:72:3d:93:3e:6e:d9:0d:0f:af:22:d2:4d:
14:a6:6e:0a:82:c6:9b:14:cf:0a:77:a9:50:88:25:
5e:69:83:84:78:b6:57:fe:0a:3a:fb:61:8f:66:5b:
00:94:10:96:a6:ab:e4:68:2a:30:f2:a8:1a:99:fa:
a8:32:b4:b8:9f:06:c0:d0:26:67:2c:7d:c7:4e:80:
13:73:48:95:90:cf:a1:84:7e:7d:91:1f:02:ef:15:
e1:3c:8d:c8:e6:42:75:f8:10:d4:aa:bc:bd:2c:75:
68:ac:d4:90:57:ee:6c:db:d5:9c:19:41:7e:2f:44:
e1:42:1e:d4:a8:a8:f2:90:35:b1:04:8e:2a:a9:24:
f4:de:47:df:ab:8a:5b:1f:85:c7:2a:a0:14:da:dc:
1b:8d:78:ab:f4:1a:db:1c:43:8c:a1:82:e9:6e:72:
bf:89:47:24:d1:00:61:2f:d9:76:1e:58:c6:4b:db:
e2:f9:04:6f:bc:e6:f6:d1:85:b9:ca:bd:8c:60:94:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:D2:03:41:1A:AF:34:9A:0A:39:28:ED:23:C1:59:44:7E:F8:49
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e5:01:8b:52:a6:b6:f1:33:ef:94:3d:f3:17:ee:8d:03:22:
e8:c7:6d:d5:f0:d2:12:b4:82:37:c1:b0:3e:cc:93:68:dc:33:
66:eb:ab:d9:94:ec:46:7f:88:46:9d:8d:ab:c8:e9:92:a9:02:
bd:7f:27:ea:44:b0:91:fb:e6:7a:33:3f:bb:75:05:a5:c0:95:
de:b0:0d:a1:8b:05:49:32:af:9a:d0:f3:2f:72:f8:c7:d0:20:
ed:20:06:fa:9b:33:73:f7:84:9e:c7:08:3e:75:7c:cf:a4:53:
f1:3f:b4:02:09:fe:98:4c:68:ea:70:a9:93:43:0f:a9:86:8f:
7c:8b:c8:0f:36:04:11:02:ab:1f:e5:ef:d2:f9:6e:3d:04:d9:
42:4b:a5:13:df:1f:f2:c9:3d:fe:c3:9a:19:0f:94:d0:3c:87:
7c:d0:70:81:5c:16:e0:e4:86:b9:61:1a:c2:9e:db:d0:33:e1:
71:6a:2d:67:3d:e4:73:f4:25:b2:9a:ad:8f:78:53:7c:11:ae:
cf:1f:c8:a4:2a:18:88:3a:4e:bf:8d:92:7a:38:c0:da:1b:bd:
3d:85:80:f1:b3:e7:77:76:91:2a:96:82:e4:95:c6:79:f8:e8:
54:f7:58:4d:09:7d:c6:ac:a9:03:03:60:33:5e:0b:73:13:6c:
24:c6:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:00 2026 by rpki-client