Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: 0bTSXyhgHvwNscFf6k96dxaJNYa47n0UZTPtojtXH+k=
Subject key identifier: 73:BA:E8:A1:4D:0B:F1:A2:F7:80:74:43:BD:60:EC:55:C0:E0:6F:3B
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019D992B50AE20DD386F18E5BBFE4EE5CC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: YJP9Stc19B/+wWj1KctE2Y3RDwWxOHS45zJPjbL59fg=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:50:ae:20:dd:38:6f:18:e5:bb:fe:4e:e5:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=73bae8a14d0bf1a2f7807443bd60ec55c0e06f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:9f:c7:57:70:4d:24:6c:33:7e:43:d2:34:
ac:a9:78:fb:d4:ff:90:d4:33:d2:bf:c1:91:06:32:
33:2e:8c:8a:50:6e:00:0e:fc:a8:34:c7:bc:dd:80:
46:6b:b2:07:8b:c7:cc:6f:b6:31:bc:fc:64:30:c5:
a8:e2:db:9b:28:09:78:ee:2e:f7:c0:e8:91:d6:ee:
e1:1c:94:db:79:a8:f8:35:ca:97:8b:4b:84:05:8e:
03:1c:7e:25:9d:50:94:0d:9e:bb:70:31:88:cb:1c:
2a:57:75:17:88:5f:bd:63:73:aa:d5:af:8a:24:69:
50:4c:bc:10:bc:00:88:19:62:88:36:db:0c:da:0b:
06:2c:56:d3:01:80:6a:e2:a1:09:33:4d:1c:f0:a6:
35:d8:a0:09:9a:b5:58:8e:c0:f7:a2:5f:8d:b3:e1:
d8:49:75:cb:ca:16:f2:10:66:92:0a:3c:ec:00:1b:
31:5b:a6:fe:42:fd:c2:a3:cf:49:8b:8d:e2:d2:82:
b1:3e:53:c6:a9:40:58:5f:5f:dc:e2:c8:22:27:a6:
86:bf:96:0a:63:55:e0:28:e3:dd:18:bd:1c:17:2b:
37:54:5a:23:b5:fe:5b:a1:43:c7:0b:fb:88:4f:86:
65:81:1d:67:27:92:0d:30:35:9e:79:9c:ae:27:0c:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:E8:A1:4D:0B:F1:A2:F7:80:74:43:BD:60:EC:55:C0:E0:6F:3B
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:46:02:c9:3c:df:8e:89:da:4e:9f:92:b7:c4:ba:f2:a4:
41:15:2a:9c:fd:9c:b7:4c:64:83:3b:c6:7b:12:e6:bf:c4:30:
f7:a6:f5:58:31:75:4a:4d:27:60:e0:49:b9:4d:6c:b7:21:06:
1a:5e:e2:f8:3d:aa:ef:87:66:87:a7:70:4a:17:35:63:20:50:
31:9f:1f:49:ff:65:1a:be:39:e4:8e:d5:6d:13:22:b5:9a:ab:
30:e3:96:d7:d7:0c:35:68:36:16:29:00:00:50:6c:f1:dc:5b:
c1:4d:76:59:50:47:20:e4:bf:f4:c8:3b:d6:da:e7:46:80:e2:
2b:a9:72:5c:74:fc:4a:a7:db:4b:27:9a:09:11:55:c4:2b:f2:
5e:ad:f6:ae:4e:eb:7b:7e:63:c4:7a:32:d1:d4:e0:f1:17:89:
49:47:8d:4a:a8:1e:52:55:fb:43:37:91:38:99:b3:ff:65:58:
df:59:ca:99:68:4f:16:9d:ae:a3:91:46:f8:cc:a4:bd:29:e0:
db:e6:b1:b2:42:35:3a:d3:a9:42:63:15:bf:97:1c:13:1c:e1:
5e:2a:fb:88:6e:82:48:81:8e:e4:95:11:4d:04:09:b8:f8:f8:
2d:94:4e:39:0e:cf:e8:81:7a:39:db:82:8c:da:67:d3:9e:5a:
43:19:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:35 2026 by rpki-client