Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: tGRDSDB8DE3asYHMFkMD5mm0xJ2p+kFohJfD/lqbYEo=
Subject key identifier: CD:8F:30:EF:CD:58:19:10:D1:0B:8C:8D:65:40:5B:66:12:70:FC:6B
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019D9BBE9CDC04084DE66C63C06F3552413D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:53 +0000
Manifest this update: Fri 17 Apr 2026 14:00:53 +0000
Manifest next update: Sat 18 Apr 2026 14:00:53 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: fCDIxbm0AI2wlWN0SNSK1sLIVljXFfxi4V5W0bqpQv0=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:9c:dc:04:08:4d:e6:6c:63:c0:6f:35:52:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Apr 17 14:00:53 2026 GMT
Not After : Apr 18 14:00:53 2026 GMT
Subject: CN=cd8f30efcd581910d10b8c8d65405b661270fc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:04:e2:0f:47:26:66:43:af:67:6d:37:e0:
89:f9:64:d8:ba:de:da:5c:4e:9a:70:cf:4c:4b:32:
ff:e7:66:30:78:30:b4:ee:6a:2a:34:44:37:66:90:
2b:ba:44:6a:0f:10:ba:1e:b2:0b:bf:cf:d1:27:ba:
d1:28:b2:5f:06:ec:0a:6f:fe:36:dc:02:45:fe:e3:
c1:f7:28:14:2e:f0:32:f6:b3:07:bf:9a:66:bf:db:
84:2f:a7:57:53:03:83:f3:ce:06:83:6c:49:eb:3f:
15:2f:00:ed:b6:cf:f0:cd:36:10:d4:06:fa:9a:5a:
62:7f:8f:5d:8a:fe:a3:2f:73:4d:3c:ef:a2:a3:d6:
37:ff:f0:34:66:97:a9:ca:2b:aa:c1:1e:0b:19:55:
89:07:43:35:76:a6:7d:d1:f5:5b:6c:91:70:35:3e:
1d:57:2b:05:1d:31:4b:10:97:37:c0:82:dd:70:dd:
8e:32:ae:10:80:61:fc:d2:dc:a7:a5:bc:55:66:f0:
55:3e:92:bf:e0:af:0c:90:e3:82:c2:04:9e:2a:c3:
7d:9e:ea:28:97:84:2b:73:7e:cb:85:44:77:0a:1a:
ea:93:cc:9b:7c:a7:77:50:48:42:82:67:79:06:e5:
6c:37:e2:7a:9d:e5:26:7f:11:af:ab:1c:fc:40:9a:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:30:EF:CD:58:19:10:D1:0B:8C:8D:65:40:5B:66:12:70:FC:6B
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:74:1a:3d:88:4b:2a:4c:47:cd:f6:c5:2f:a3:dd:cc:ce:
86:20:d9:cd:d7:9f:2d:e7:31:61:90:1b:1c:c8:ef:5c:ec:8e:
41:8c:fb:d0:d3:dd:7f:0e:26:36:c9:84:d3:05:2c:2e:ff:c9:
63:6e:45:b3:5d:73:8e:d3:0b:94:f0:9f:37:ee:96:67:8b:74:
0e:45:32:98:03:db:94:d3:dc:14:17:6f:7b:70:d2:3a:78:67:
91:4e:c0:ed:bc:a3:30:bf:27:ae:c4:f1:d5:b4:2e:a1:ac:0c:
94:d8:4e:0e:ed:06:4d:cf:c5:08:23:9b:70:df:6b:75:ed:70:
af:36:41:23:28:b9:ce:f7:03:bd:f5:ac:a5:01:9e:b0:fc:1c:
15:a1:12:71:11:08:2f:c6:50:95:52:35:f2:c1:9a:f5:a0:9e:
f7:c9:08:a7:f3:a0:13:17:8e:48:ca:01:b7:4a:0a:64:65:17:
75:0d:b5:be:41:e1:04:9b:a8:17:03:34:fa:96:7e:d0:eb:28:
e1:07:e4:50:f6:e5:ca:c6:01:40:9f:cd:80:b1:10:f5:03:9b:
98:22:5b:69:97:1f:4b:1f:de:70:53:1c:cc:45:e7:15:6c:d7:
25:6b:2b:2f:29:f3:53:d4:2b:dc:31:98:f4:af:83:43:58:da:
b7:e2:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:04 2026 by rpki-client