Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier: 3GhLfE7WmGY3ZjNMNI+B9+yiOjJDcDnp7/NefixEkKg=
Subject key identifier: 4F:6D:84:8E:90:67:C9:6B:86:04:2E:F5:95:46:96:43:75:8E:BA:BC
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial: 019D98F537C6FE1C239785143C53173BE865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number: 1135
Signing time: Fri 17 Apr 2026 01:01:40 +0000
Manifest this update: Fri 17 Apr 2026 01:01:40 +0000
Manifest next update: Sat 18 Apr 2026 01:01:40 +0000
Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: trWuG6BRS8XESrl/X/kuaKn6K6ZKkW8R2x8Ds9cYdY8=)
2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:37:c6:fe:1c:23:97:85:14:3c:53:17:3b:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Validity
Not Before: Apr 17 01:01:40 2026 GMT
Not After : Apr 18 01:01:40 2026 GMT
Subject: CN=4f6d848e9067c96b86042ef595469643758ebabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:b5:91:2f:2e:62:8a:2e:7c:37:d8:f0:7f:
03:9b:ae:8f:2a:48:d7:48:91:ad:0e:f4:72:d9:93:
34:de:56:55:e4:51:ea:75:a4:09:e7:b1:dc:af:2c:
aa:34:77:1e:9f:bd:ea:f6:b8:86:83:23:87:e0:3c:
1e:2b:30:10:51:f0:20:4f:d1:97:ff:9c:99:e2:9f:
7c:83:91:72:2e:99:28:94:27:a1:c6:f5:64:e2:6f:
13:1b:e9:2c:2e:00:fe:5f:bb:8a:63:66:cd:b7:77:
46:44:61:19:b6:48:ef:b1:f0:a0:77:15:4f:51:32:
4b:e3:1d:c4:94:c2:57:4f:8f:38:ff:8c:af:f6:36:
76:86:e8:de:f0:af:0e:d3:73:23:bd:53:17:86:62:
3e:72:fb:b9:21:4e:2f:0c:1f:24:30:62:6e:e5:f8:
90:c5:14:56:b4:36:02:fe:82:e9:17:32:fd:2a:91:
06:27:b4:1d:5f:ba:3e:1b:c8:48:9a:35:f7:54:77:
dc:34:81:ee:99:71:24:09:b4:7e:df:3c:14:48:bf:
b3:95:53:c3:14:64:15:f5:42:53:c9:74:c7:58:c1:
a5:69:e8:63:61:66:75:78:5b:d1:5a:52:25:64:ea:
18:84:b1:0a:a1:7e:f5:45:bd:02:1a:25:a6:66:65:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:84:8E:90:67:C9:6B:86:04:2E:F5:95:46:96:43:75:8E:BA:BC
X509v3 Authority Key Identifier:
keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:25:ad:45:e0:89:fd:b4:43:15:f2:92:6b:2c:8f:f9:fe:9b:
6b:e5:6a:8c:64:4d:d9:93:b9:1e:60:88:b6:47:43:67:d0:57:
8a:95:c0:43:26:2f:43:69:15:1f:4a:2a:50:d8:6d:bc:49:bf:
83:b8:66:2a:94:fa:ef:ca:4d:fb:f4:53:fb:ae:f1:b2:bf:39:
28:51:9c:f6:e8:fa:f5:d1:8c:f9:58:70:f9:c2:cb:9e:43:71:
f8:fa:8d:20:3f:b9:9e:09:86:27:b8:78:cd:91:f3:c9:3a:88:
e7:11:98:82:44:29:b3:22:f0:99:f2:19:fa:13:61:5e:3c:73:
23:d6:71:79:69:78:c7:30:cd:a0:80:2a:37:f3:a2:34:9a:0b:
6d:cc:f5:10:cc:a2:c5:39:6e:c7:ca:1a:34:7c:f7:33:63:28:
77:e1:58:2f:8b:2e:43:d7:84:50:70:4d:e3:52:fd:0b:18:67:
d5:d1:72:bf:57:86:e2:9b:8e:38:93:a8:a1:50:2f:75:a4:30:
a0:a0:5d:4b:da:4b:60:01:36:90:39:d9:35:77:b6:f8:4c:a3:
3e:0b:39:06:d7:93:aa:72:fa:c9:38:06:5d:f3:25:cb:1e:2d:
74:be:7d:52:4a:70:75:9a:37:43:96:d7:1f:cd:dd:32:80:ed:
3b:9d:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:20 2026 by rpki-client