Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: 3hbYKQgyK8Q/+52GFjTheAGbKcQj7dAq0V4C3oUBggg=
Subject key identifier: E0:48:25:D9:13:AB:59:46:B7:C0:A4:E8:E7:A6:32:F0:D1:AF:FE:A4
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 019D97E28AFF75C3F435982964FDEA97DD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 0EA0
Signing time: Thu 16 Apr 2026 20:01:39 +0000
Manifest this update: Thu 16 Apr 2026 20:01:39 +0000
Manifest next update: Fri 17 Apr 2026 20:01:39 +0000
Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: cXIFGToov69kRRmkZ27UPqbLxmnW2stZDcrWjjPrQ8U=)
2: xuPytDWWOm0n5Q8kqhQeYQRc770.roa (hash: nV8TEsZ35qIOpq9/LxSQCX5axEhmxxpZi06Zd6Qworo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:8a:ff:75:c3:f4:35:98:29:64:fd:ea:97:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Apr 16 20:01:39 2026 GMT
Not After : Apr 17 20:01:39 2026 GMT
Subject: CN=e04825d913ab5946b7c0a4e8e7a632f0d1affea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:c7:19:f7:2d:30:1f:52:19:a2:f3:ba:1d:
0d:03:fe:96:49:a9:c6:9e:3a:a3:e0:bc:80:c0:e1:
4a:a9:8c:df:3b:88:8a:a2:ba:43:34:68:8a:b3:db:
a4:f7:24:18:1f:19:56:06:fe:d1:5b:88:3a:e6:6f:
08:44:be:d4:a4:86:37:2e:f8:64:1b:cd:9e:72:90:
9d:c3:79:ad:40:f7:2c:34:7b:72:57:ab:f9:18:75:
03:7a:7d:84:6b:38:e0:6f:6b:24:d8:8f:23:49:95:
f4:04:e9:0e:a9:67:98:66:ee:d6:72:c4:c9:e2:3b:
59:06:e2:69:58:7b:26:57:6f:05:1f:34:06:d8:b9:
89:88:61:3e:62:13:03:c6:ff:dc:d9:de:a6:0a:dc:
cf:6a:cb:9e:ed:24:20:e8:35:45:20:07:ff:1a:e7:
ed:71:1b:13:de:af:8c:1e:b5:2e:46:cf:31:18:32:
f7:56:45:56:fc:c0:7c:78:cc:88:28:dc:a1:fd:7a:
90:ce:a0:67:da:d7:d6:2f:06:fb:0d:a6:c9:4f:c6:
99:a8:0e:ae:31:22:3a:2b:43:10:44:df:e3:86:c6:
c8:3e:c5:4c:bb:df:6c:af:89:78:66:56:44:80:c9:
d3:f8:b0:d6:34:f1:54:e0:16:85:cb:72:aa:6e:71:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:25:D9:13:AB:59:46:B7:C0:A4:E8:E7:A6:32:F0:D1:AF:FE:A4
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:5d:ab:54:a0:07:cd:8d:0f:4a:bf:6b:80:ff:ab:65:37:
3f:be:8a:eb:eb:a6:dc:1e:41:47:b9:b4:f1:27:4d:81:a7:3d:
63:d6:b7:6b:f4:49:9a:df:0b:62:4b:c9:dd:39:22:6d:b3:cf:
ce:20:c1:5d:83:9f:45:20:99:6d:98:91:cf:53:42:91:ea:29:
13:e0:fe:31:cd:0e:30:7a:f0:ed:8f:58:4d:38:89:16:a6:55:
aa:1e:0f:da:d4:19:b4:b6:fd:30:e1:2c:33:f7:97:37:cd:9a:
a8:83:35:38:a9:6e:61:f8:5a:f7:0a:93:25:e5:c8:ad:01:d4:
83:c8:f0:94:47:98:3d:71:26:c2:da:0b:4f:35:3d:06:6b:97:
89:49:d0:13:b2:c7:25:86:23:a0:bd:08:51:ff:42:1d:14:9e:
57:d4:7c:a9:77:a5:11:29:d6:1d:61:bf:8f:be:c7:d3:84:4d:
48:ec:65:81:4d:d4:f6:a4:20:82:f3:d1:66:9f:32:71:15:62:
4a:2b:9d:6e:03:af:9d:2a:26:d2:0a:e2:16:1e:de:d9:b4:64:
de:95:2f:de:8e:d0:2d:17:db:d4:e8:df:a6:97:f4:27:34:05:
d8:f3:ce:18:63:59:7c:c7:82:0b:0d:3e:03:83:d4:2a:bc:94:
db:48:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:35 2026 by rpki-client