Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: mh/ubQ1RUpX/Fj60R84vJJe7fYuPxuGmUp4w2z6CMRo=
Subject key identifier: C1:B0:45:61:31:CC:AB:53:0F:E1:CE:B8:2D:C5:A9:0C:FD:30:F8:A9
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 019D98F53EBDB1752BC7E0967D2CB0D9DBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:42 +0000
Manifest this update: Fri 17 Apr 2026 01:01:42 +0000
Manifest next update: Sat 18 Apr 2026 01:01:42 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: 1uM5G+a/lDBhJVqMdSDMoFf++LFBgaV6ylzsXcq90AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:3e:bd:b1:75:2b:c7:e0:96:7d:2c:b0:d9:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Apr 17 01:01:42 2026 GMT
Not After : Apr 18 01:01:42 2026 GMT
Subject: CN=c1b0456131ccab530fe1ceb82dc5a90cfd30f8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:1e:2c:74:af:8c:57:9b:22:b9:c2:66:3e:
fc:a4:4e:2b:2b:69:e4:b6:47:1b:1b:0f:76:db:f6:
56:28:55:b6:71:b0:b5:8b:30:4e:5a:f6:7a:03:fe:
51:15:0a:85:5e:39:ff:29:13:c1:be:36:c2:af:61:
91:48:be:fc:3b:9e:2e:1e:dc:27:86:6a:da:69:5a:
57:83:8a:39:51:02:5d:f4:f4:62:33:11:de:91:66:
41:27:77:cf:e0:d1:dd:ac:4b:37:40:51:24:96:88:
25:a9:98:6b:fa:7e:07:40:57:61:ef:14:06:fe:5c:
f9:0c:50:ed:74:5a:c7:e1:f8:4e:c8:06:af:4f:56:
80:24:bc:99:ee:56:3f:dd:cd:02:75:7a:3f:ba:ad:
ae:39:2d:c4:7f:27:77:5f:dc:6f:a0:f0:64:05:0e:
f0:16:ba:5d:84:74:6d:73:16:92:93:f5:08:d5:76:
da:f0:79:77:3b:f7:f6:ad:7d:bc:15:55:4b:4d:24:
9c:08:d4:6e:e0:72:fe:a1:ef:0f:c1:c9:af:33:1e:
00:3d:11:86:0e:9b:78:b0:24:f6:e5:d2:32:99:3c:
40:4c:f4:d2:29:10:b1:0c:34:7d:22:59:7f:4e:33:
5c:73:0c:8b:fe:bd:1f:8b:a0:ea:c2:73:30:01:9f:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:45:61:31:CC:AB:53:0F:E1:CE:B8:2D:C5:A9:0C:FD:30:F8:A9
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:01:1b:46:82:7e:e9:d8:e5:12:39:12:0f:1a:13:59:34:11:
c8:39:2c:18:86:17:f0:68:f8:3a:0a:88:19:fc:88:91:42:2f:
8b:27:85:b8:dd:05:8b:0d:e6:c8:42:9f:0a:10:1c:68:2a:03:
b8:b6:f3:81:34:80:c9:94:d2:95:dd:53:65:bc:8b:e3:67:6f:
7c:d1:d9:72:1c:9b:26:82:7d:91:b2:18:73:5e:c4:44:50:6e:
f3:9c:04:3c:82:3e:79:ac:7e:fe:b5:1e:0b:2e:1a:93:38:8b:
8e:de:03:35:e7:a6:cd:04:a2:f4:3b:dd:9d:58:d8:c9:ac:4c:
92:df:b9:04:8a:e6:6f:48:55:ef:71:73:b0:c6:b5:03:88:d9:
a0:b8:10:4b:f3:92:25:1b:54:d1:dd:68:7c:56:00:5c:a0:fb:
ef:34:77:0e:f2:d7:03:2d:75:e6:6f:f3:cc:7e:17:58:61:a3:
54:7f:71:19:bc:9b:88:d6:0d:d6:d9:93:be:05:73:d2:03:94:
5d:c8:85:10:b3:ef:2c:64:b7:75:ed:7c:fc:3e:65:b8:d9:ec:
b8:6c:2d:0e:8d:a0:2c:1f:87:66:c6:aa:e7:11:9b:0e:f3:5c:
d9:9a:1d:a0:b1:33:6f:43:f0:74:9a:17:35:e4:83:a2:58:c9:
3c:23:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:05 2026 by rpki-client