Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: ucjOI9SKLvd0OC5cQlQMUdPenVPkHG9GmKsnRlNEuWI=
Subject key identifier: 04:2F:D3:88:71:25:3D:BE:4B:2A:C7:08:3B:D4:8D:41:9C:9A:E2:92
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019D984FDFBA9185B420F0EDB5AEF03755C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0BA4
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: tx3cS1sXf5zEXtuQcPBfvC3FZc/z37vTnumDPIyttII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:df:ba:91:85:b4:20:f0:ed:b5:ae:f0:37:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=042fd38871253dbe4b2ac7083bd48d419c9ae292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:64:0d:94:0c:49:4b:6d:65:7a:36:5c:c4:
eb:28:d0:1c:11:ea:3c:9e:d5:ff:f3:95:32:ff:e3:
92:64:51:27:57:fb:80:98:2d:54:82:8a:66:c4:f4:
59:52:1e:34:47:47:32:ed:ef:e8:c5:2c:84:9b:46:
6a:24:da:f0:ee:d4:42:10:38:d6:f3:36:5f:5f:92:
3b:19:b2:47:33:2d:73:de:f0:55:96:f7:c8:90:22:
56:8b:7b:ec:50:a6:30:b3:69:45:6c:d4:c0:ad:6e:
34:6d:22:b7:47:54:18:98:e8:47:7c:ca:dd:bb:3e:
c2:55:26:e5:0b:b7:fa:1d:f2:69:a6:cb:38:d8:fd:
2f:e2:ca:48:f5:79:1b:ab:d8:c0:da:0a:6e:5b:8d:
7f:29:d1:76:b3:9d:4c:67:47:81:8f:17:eb:9d:86:
35:75:9a:ce:39:17:a6:2a:bc:49:ad:ad:7a:04:98:
5f:2f:fc:9c:0a:a0:25:a0:42:fc:30:b6:7e:e2:ff:
b1:43:61:bd:9e:d8:9d:85:7e:3c:58:17:12:48:de:
39:57:14:7b:f6:07:c7:38:72:80:9f:5e:f7:ab:70:
ee:e4:9b:39:ae:3e:37:0a:f3:e1:da:2c:a6:f2:5e:
4c:30:d0:a7:43:aa:b0:56:87:69:b3:97:70:88:35:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:D3:88:71:25:3D:BE:4B:2A:C7:08:3B:D4:8D:41:9C:9A:E2:92
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:95:bc:79:38:b4:8b:ca:7a:fb:72:1d:bb:74:7a:6a:d3:8f:
7f:1c:b5:62:b6:ee:ad:c4:fe:85:8c:9f:e3:70:da:3c:06:5e:
49:5d:d1:4c:83:0d:9a:ff:ca:8b:18:3b:c1:66:6f:86:1f:60:
68:bf:46:f4:ea:3e:73:9a:15:44:b0:6e:de:83:59:97:9c:af:
ec:58:b0:bd:1f:5a:4e:d0:19:c9:2e:ef:34:ac:bc:67:4d:a6:
ae:f1:e1:ac:eb:d6:06:39:25:37:47:65:e5:ee:b4:1e:b1:9c:
7f:55:d7:05:70:75:1f:dd:5e:fe:2a:db:8a:97:02:58:0e:99:
f6:16:96:bb:ad:60:6f:68:fd:c6:2e:1e:cd:cb:a5:62:8f:40:
78:9b:5a:a4:d5:f6:16:fa:b9:81:d8:c5:af:dc:b4:43:56:da:
7c:ba:8d:b3:ad:a5:95:55:dc:92:65:2c:12:88:15:dd:4d:52:
65:ba:0d:1c:c7:17:7b:08:50:fd:c6:18:2a:a7:06:eb:6d:c8:
63:46:04:c4:32:02:39:95:94:e4:7e:d4:1c:d9:d1:e1:e1:7f:
d9:3b:1e:e7:f2:66:67:50:08:f1:7b:e7:3d:71:21:a7:52:93:
83:23:35:c6:d7:ff:b0:f3:dd:b7:06:53:4c:24:98:72:15:e4:
c0:f4:3c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:00 2026 by rpki-client