Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: M2phwDCMNyFMOI/ayAS+DPQAZxOhYiivnf4oE5Ufl4Y=
Subject key identifier: 06:C3:8D:D4:24:A0:71:B1:E6:45:9D:9A:EE:B3:19:B3:C9:39:38:A5
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019D9BF5999685E192DD142E600FEF118375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0ECA
Signing time: Fri 17 Apr 2026 15:00:57 +0000
Manifest this update: Fri 17 Apr 2026 15:00:57 +0000
Manifest next update: Sat 18 Apr 2026 15:00:57 +0000
Files and hashes: 1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: bDrT+xuAcPUr6USCt/ga1sQlNcIPTma4+xvSCvGAk2c=)
2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:99:96:85:e1:92:dd:14:2e:60:0f:ef:11:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Apr 17 15:00:57 2026 GMT
Not After : Apr 18 15:00:57 2026 GMT
Subject: CN=06c38dd424a071b1e6459d9aeeb319b3c93938a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:fe:a3:b1:9e:df:4c:63:03:27:54:9c:24:
90:3c:a7:70:0d:bb:35:51:8d:35:46:c6:68:1e:1c:
92:b4:98:f7:13:43:db:e0:c0:3f:b7:c4:43:5a:0c:
9d:cd:ba:1b:9d:de:fd:3c:f3:6f:b3:66:a3:2d:93:
6f:aa:f3:b8:32:17:3d:2c:35:cf:23:c9:4e:47:51:
24:52:01:29:ff:1a:28:df:86:b7:f4:8d:f7:83:b2:
13:e8:36:98:b1:62:75:b2:cc:8d:c9:21:41:10:78:
0a:22:d4:cf:55:5d:58:a5:a2:c9:1b:a1:d5:08:c0:
db:3a:e4:5a:e2:bd:cc:35:b5:b5:f8:02:41:ba:4f:
b3:62:48:bd:9a:5f:e2:c6:54:03:7d:8c:ad:7b:17:
bd:9c:12:74:ea:27:ca:e3:2d:c0:50:88:c8:3d:fb:
59:86:1f:89:5f:f3:05:0f:88:8f:ba:22:62:a8:fe:
e8:c6:13:a9:27:80:4a:45:e1:18:63:e5:ec:51:4d:
0e:26:f2:f1:93:f4:a2:81:54:bf:e6:17:75:d5:fd:
78:cd:2c:82:a7:a6:fb:c5:3c:96:e4:f7:98:54:d6:
04:bf:22:85:ba:15:c5:ae:77:4c:30:68:8f:69:58:
d9:ab:c6:9e:4b:cf:1e:e3:da:1c:c9:a4:b5:46:6f:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:8D:D4:24:A0:71:B1:E6:45:9D:9A:EE:B3:19:B3:C9:39:38:A5
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:6c:8c:d7:33:d3:3f:11:d9:70:c9:98:fd:4e:bb:8a:03:
4f:59:37:ec:37:9c:8e:f4:1d:3c:1a:99:80:29:e6:67:47:74:
bc:ef:0d:83:a3:48:c6:a6:8f:56:b6:ba:53:a5:e5:25:2a:91:
44:6c:cc:c9:82:78:37:4f:71:3f:8c:87:7a:68:7a:ef:67:8d:
af:56:4e:eb:4f:d9:a2:2b:d7:63:a0:6b:d8:06:bb:27:2e:b3:
48:94:88:8d:b2:80:95:11:f8:fe:d8:53:a8:73:87:aa:64:90:
b2:2e:c9:96:f3:74:27:6c:1c:55:ea:35:c6:bd:e4:ef:33:ef:
3f:97:88:f1:0e:0f:a7:ac:10:36:63:86:f0:16:36:08:62:b8:
00:e1:52:70:99:e2:02:ae:70:67:b3:17:f0:3c:a2:d3:e9:bd:
7c:d3:a6:59:6f:be:ce:2b:51:fa:8c:ed:7c:57:95:a5:27:97:
d6:c3:85:4a:b8:22:0c:86:82:2a:c3:55:87:6d:20:b8:29:46:
90:c9:80:b7:aa:32:91:f5:d3:5e:04:b0:72:19:58:85:f0:22:
03:1d:6b:51:51:44:88:f6:1b:25:30:a8:06:02:5c:84:86:0e:
14:7a:ff:72:ce:d3:96:92:61:c5:32:5b:09:28:0f:46:b7:74:
6d:ab:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:51 2026 by rpki-client