Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: JWqyFCQkQsKxt/MCJ1VR4lFCtlAeVjFWigeUgFKGC5Q=
Subject key identifier: 0C:0D:1F:49:17:46:05:64:22:45:4A:63:DC:FF:0B:40:EE:7A:8D:2B
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019D9AE38F4A1059F4B69E768DD6D41FBDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 1607
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: 24bqS1nUjEa-SWJ2ZtFx5ElbqB4.roa (hash: aZJOy0CyZGrP4yrwBkGXYusHSlYLrLzIGIdzThr5g3M=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: elsKqdpdJ27q3Ypg5IOI1EgPVxl5P+wDG38sLXpZorE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8f:4a:10:59:f4:b6:9e:76:8d:d6:d4:1f:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=0c0d1f491746056422454a63dcff0b40ee7a8d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:f8:37:91:02:76:7d:06:d5:2e:94:f8:fc:
80:b2:c4:ed:a8:56:31:98:4b:3c:55:13:9e:dd:0a:
58:18:ea:45:b0:fe:98:90:8c:5f:09:dc:22:d5:b7:
18:18:b9:41:ff:33:1d:a2:db:0d:17:06:d5:62:65:
a1:1a:1e:a1:f8:6d:74:20:9e:82:39:2c:7c:93:5f:
9e:8e:a6:81:06:7b:c3:b0:bd:91:e0:23:8c:d6:67:
07:1a:13:5c:ab:96:0d:d3:dd:f2:92:8e:5d:e5:0c:
ce:72:cd:6c:b7:5a:58:9f:c8:99:2b:da:3d:98:d0:
0a:a0:de:c5:df:d3:5b:58:eb:a5:09:99:2f:30:c9:
d6:66:01:4f:b7:00:c2:fd:da:19:27:36:cd:43:fa:
ef:be:8c:66:2a:ce:7e:3a:67:1f:c2:7a:bd:9c:49:
35:0c:f0:7a:12:cd:7c:94:39:66:43:c7:0d:6f:fd:
24:c1:a9:a2:6b:e3:3e:eb:8a:35:12:0f:d3:93:0f:
6a:39:0a:8f:04:5a:bd:0f:07:4d:c9:c4:a4:47:cf:
a4:3c:e1:d3:d0:28:35:c1:9e:93:12:c1:ed:22:82:
72:22:15:09:f8:28:73:f3:a2:e0:4f:71:e1:50:33:
da:e8:b3:18:22:14:ec:b7:56:f3:85:d5:2e:5e:a3:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:1F:49:17:46:05:64:22:45:4A:63:DC:FF:0B:40:EE:7A:8D:2B
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:10:9a:d8:9a:c9:c2:6b:5c:89:d9:e1:b9:a1:59:27:a3:be:
f7:eb:41:cb:73:1e:60:a0:0a:92:98:4d:04:ed:6e:ce:c0:bb:
de:48:f1:7c:bc:8a:7e:d0:4d:4f:b0:07:71:22:1c:4e:3e:ef:
25:20:19:56:89:8e:af:1a:1a:52:67:65:d7:46:f1:0c:17:33:
cb:a1:55:3d:56:07:a2:74:ce:e7:3a:87:91:5e:9a:97:16:f0:
91:51:bc:0c:33:64:d3:22:33:cd:c7:8f:54:a2:6a:f7:f6:9c:
70:c7:94:50:07:4b:fb:81:9e:ee:dd:54:e6:5f:6e:e6:cb:1d:
31:b5:7d:77:23:3e:13:f5:36:59:d9:3e:60:82:93:11:ac:be:
da:ac:f2:99:8f:10:4a:23:13:df:4f:7c:74:8b:be:79:33:3c:
d1:e4:cd:74:d3:4c:11:43:db:86:14:c1:cf:4f:ee:a6:16:e9:
e6:8c:c2:d8:00:3e:c9:5d:d7:f2:ca:4b:2d:75:5f:14:e0:38:
17:37:83:76:7d:ee:6e:d5:02:98:85:2c:b3:60:2f:a0:24:46:
57:72:e4:91:87:7e:e6:0a:f6:eb:74:e8:72:5a:bf:06:9e:6a:
c8:eb:db:a7:1d:8e:e1:96:29:ef:32:fe:0b:68:1c:f5:20:c4:
b0:63:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:06 2026 by rpki-client