Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: O0Pznm5vF1eYBxnWwrU53hFj5Cxsw2XY7gpy9KV0d6A=
Subject key identifier: 2B:DD:3B:01:51:D4:13:37:0E:65:9C:BA:6A:B3:8C:0E:E5:A5:92:23
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019D98F431217CBC6BCFE031E802A2F8F624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: 2VgtI72RJF46cE5YXmZPBKY7g4bOB/onnNRldXsOUmI=)
2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:31:21:7c:bc:6b:cf:e0:31:e8:02:a2:f8:f6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=2bdd3b0151d413370e659cba6ab38c0ee5a59223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:bf:84:5c:41:5c:88:30:70:52:d2:76:62:
fa:0d:e6:02:0c:81:a7:66:1b:21:63:45:4f:c2:49:
b2:ba:e6:ed:41:ab:81:a5:0b:b4:30:b3:9f:49:0d:
36:70:78:cc:95:d3:23:17:80:5a:e3:d1:8f:2e:f3:
1f:e3:47:ee:22:d2:4e:96:49:94:f2:3a:82:45:a7:
4b:fa:37:05:ba:b1:34:01:fe:fb:6f:1d:45:0c:05:
ae:a5:9e:b1:55:1b:87:cb:c0:d2:c8:81:42:05:c5:
28:12:52:d8:f0:2a:ed:f9:f7:81:b6:53:37:23:f5:
92:d5:f2:67:93:f7:b4:34:86:7a:14:a5:05:c9:06:
9f:8a:ea:41:87:84:ff:a3:15:c7:06:d4:02:1e:cf:
d4:c9:73:25:d0:d1:a2:bd:24:e3:48:41:4e:84:0e:
7b:fb:1f:c3:1c:ab:6f:0a:ed:a0:fb:ca:7d:f3:0c:
d5:91:56:6e:30:56:69:3a:38:1b:25:2a:80:04:3f:
a4:9b:d3:34:52:08:64:66:a7:af:c0:4d:b5:95:cf:
f8:ec:86:3a:58:b8:f0:54:99:98:ed:42:71:da:1f:
85:42:18:a0:52:c6:ca:78:ba:0f:8d:65:03:6a:38:
1a:41:ab:b8:67:fb:94:0e:92:fe:ed:c7:15:98:7f:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:3B:01:51:D4:13:37:0E:65:9C:BA:6A:B3:8C:0E:E5:A5:92:23
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:f7:40:28:04:10:43:eb:6c:6d:86:1c:f8:06:2a:23:86:
37:c6:6c:0e:e3:be:0f:46:f0:9b:2d:18:c9:ad:c9:8c:e7:8a:
93:f5:05:2a:2b:74:b8:27:a6:7a:e5:f0:71:fe:38:7e:f3:b5:
17:10:11:fd:96:fa:fa:1d:d1:98:00:e7:d2:78:8a:5b:4d:4d:
da:6a:9f:b1:0b:dc:81:57:8f:c5:6b:d8:e6:c4:46:70:da:55:
70:5d:b5:95:30:be:7d:5c:c4:20:75:c7:3b:d0:46:3d:a5:6a:
93:fb:73:51:f2:88:0b:7d:9e:dc:1f:2e:62:48:26:a1:9b:08:
53:f4:30:ef:66:01:4a:b2:9e:72:33:57:6e:00:07:93:2d:6f:
f9:43:a2:88:88:58:15:51:1c:cd:27:9f:ea:53:c8:d4:47:5c:
7b:ef:41:8d:e8:49:01:c4:a6:11:85:d2:43:0a:c0:05:05:6e:
0b:c9:c4:89:51:bb:d8:b2:45:15:c5:06:0e:8b:0d:c8:74:61:
dd:66:6a:38:9b:f6:3f:13:2b:e7:91:a8:e4:96:39:1a:a4:5e:
60:9e:d8:fd:4b:7f:ed:21:0b:0c:90:47:56:66:43:da:e7:b3:
ef:dd:a6:be:a5:b3:9d:31:40:b3:56:38:d4:6b:39:68:99:4f:
a8:e0:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:14 2026 by rpki-client