Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: 3AIB1ARZ0gLFuw/qLRpsG/llSKw65kOs6QZ/Pu0M0fc=
Subject key identifier: 71:B1:37:0C:A5:D0:4F:4C:6E:90:82:6B:7D:53:14:AD:E0:8B:2A:8B
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019D9B873D85477F50D65A6709B5696F54A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:24 +0000
Manifest this update: Fri 17 Apr 2026 13:00:24 +0000
Manifest next update: Sat 18 Apr 2026 13:00:24 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: K+K6Iw95/HuKXrHwEI3n1YBs7FcFq2fkf4HLRD9gcuA=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:3d:85:47:7f:50:d6:5a:67:09:b5:69:6f:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Apr 17 13:00:24 2026 GMT
Not After : Apr 18 13:00:24 2026 GMT
Subject: CN=71b1370ca5d04f4c6e90826b7d5314ade08b2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:2d:aa:2f:e1:50:73:7f:14:ba:a5:14:47:
07:24:20:e3:0b:dd:30:65:ee:df:95:c6:46:cf:4e:
56:39:02:a2:aa:1f:09:f8:9f:a1:56:f6:37:15:cf:
92:61:8c:ca:4b:bf:14:f9:bb:3f:f0:bf:e6:58:94:
3f:7d:77:3d:01:fa:0c:5e:6e:03:8a:07:86:4b:48:
59:46:90:37:66:bf:49:41:f1:2d:b1:19:00:12:15:
17:b8:f3:e7:f4:8c:ec:fc:48:36:0e:5a:65:1e:d7:
78:df:3b:cf:a2:1a:05:f5:a1:90:c7:7a:b4:4c:55:
fa:3f:cd:b8:12:46:1c:00:a5:34:09:a4:79:b5:da:
0f:8c:2a:83:13:8c:39:55:87:82:39:a4:b5:0c:cd:
e6:56:5b:16:a7:61:a8:fb:9c:5b:50:8b:1d:87:43:
94:f1:2a:30:69:d7:dd:da:73:f8:0c:9c:29:05:92:
16:59:05:9f:ea:01:79:25:2f:e0:a1:4f:1f:5c:0d:
77:fd:22:c6:e7:3f:dd:79:a5:fd:1f:ce:22:87:56:
66:51:3a:2e:0c:26:43:79:ed:6c:2a:f1:3c:10:79:
ab:ff:f9:ed:f5:0c:2e:03:7f:59:98:61:ba:bc:59:
ec:7a:f5:ee:08:58:74:2c:74:5a:e9:4e:5f:19:09:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:37:0C:A5:D0:4F:4C:6E:90:82:6B:7D:53:14:AD:E0:8B:2A:8B
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d9:e2:0f:b2:c9:a8:dd:d5:b1:4b:1d:df:d0:59:f8:79:85:
f0:44:18:da:eb:52:3c:44:39:2d:c8:f6:fb:80:15:3c:70:62:
79:5a:c3:c5:e1:10:d7:a8:9a:3b:21:b8:1c:45:30:59:d6:ff:
fd:42:7b:88:cc:76:d8:e5:62:3f:2d:d4:2d:b1:80:de:d8:ff:
bc:f9:00:df:5d:92:42:53:37:4c:2d:42:7d:0a:41:a4:0b:6e:
33:43:dc:6a:bc:5d:bb:1a:58:3c:cf:d8:8a:be:f1:6f:38:2d:
07:73:1b:e7:a3:ea:73:ee:de:ff:05:e3:89:e2:51:c4:1f:26:
4b:03:5e:ef:db:04:bd:8b:cb:c0:af:3a:ce:55:5a:73:25:a7:
67:57:e7:8a:96:98:ef:26:ac:8b:1e:f0:45:5e:b4:6f:2d:ef:
36:2f:d1:ed:cd:05:2a:a0:df:d2:e5:ef:9c:a9:3e:f4:fd:42:
39:ef:c2:4a:78:52:5f:77:50:6c:a0:ca:15:77:0e:db:5b:e4:
d6:bf:f5:7f:36:2d:1b:bf:9c:a9:b4:e0:ae:48:63:bd:55:30:
e3:4f:10:32:4e:b8:b0:17:d3:4e:f0:95:65:b1:82:60:0a:bb:
4b:0b:a6:13:34:00:53:d2:d3:21:21:cf:4e:e5:40:0f:87:d4:
5f:13:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:24 2026 by rpki-client