Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: 5/CtTNeE/QgoHUE2HH7KFmvfFmFDQnbO50n4vnBB2eM=
Subject key identifier: AD:20:9E:5D:4E:BE:F7:82:C7:C4:11:C7:7F:86:52:1A:BC:83:5E:40
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 019DA3790D8CCB88C8A0421CDBCAF4FBC986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 1241
Signing time: Sun 19 Apr 2026 02:01:52 +0000
Manifest this update: Sun 19 Apr 2026 02:01:52 +0000
Manifest next update: Mon 20 Apr 2026 02:01:52 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: QfckCcwwE8k0d3baHRO5UIZ84TPSRJajppzM5tEUNzs=)
2: NIPM7aKL5uexVcL90KLAP5wDjZQ.roa (hash: 9ZYrM11j7nntBzeZqvmkRCiHqz1k+TWVJfFzgJNUNng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:0d:8c:cb:88:c8:a0:42:1c:db:ca:f4:fb:c9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Apr 19 02:01:52 2026 GMT
Not After : Apr 20 02:01:52 2026 GMT
Subject: CN=ad209e5d4ebef782c7c411c77f86521abc835e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:a0:13:2e:0a:94:b9:2c:3e:a0:81:90:00:
ef:41:39:f8:ff:78:02:08:e3:1c:54:71:6d:9b:9f:
7a:53:78:83:71:d1:b7:c7:c8:43:4d:d0:92:40:de:
a8:d5:72:b6:3b:b1:4e:82:50:c5:99:44:33:be:80:
66:9f:e0:30:bd:12:9a:95:3f:be:35:2d:41:fd:cb:
8b:e5:5f:d3:71:de:87:a3:0c:66:d5:4e:06:b0:65:
e9:5e:7d:e6:ae:ad:fc:3c:cf:28:8b:7e:4b:06:29:
ec:68:47:0c:db:bc:62:e4:6e:cc:97:6b:00:10:9b:
1b:90:9e:85:dc:fd:01:27:c2:9b:a7:f0:db:9e:7b:
30:44:77:da:4d:92:ad:58:71:92:aa:a7:37:7c:81:
87:79:ee:27:04:9b:26:66:69:24:1a:ae:9d:31:bd:
89:a0:12:dc:74:4e:38:85:21:9b:f8:ad:82:d4:d2:
e6:62:20:8c:30:85:df:8b:cc:6d:e5:2c:c6:5b:3e:
72:f2:25:41:36:a8:fd:57:3a:07:0c:9e:01:8b:e4:
a8:34:46:9b:fa:98:14:e5:8c:47:c6:50:d1:1f:00:
58:78:aa:f8:8d:54:d0:35:87:df:02:69:a2:bf:9f:
5f:08:52:1e:ab:1a:de:ea:72:f6:a0:df:f5:b2:2d:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:9E:5D:4E:BE:F7:82:C7:C4:11:C7:7F:86:52:1A:BC:83:5E:40
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:2e:35:50:cf:be:e3:aa:c8:00:d7:d9:9b:e4:04:f9:8c:
68:5f:62:42:3e:4c:44:76:a6:f1:1f:81:9c:56:52:0b:ae:76:
bc:29:78:8b:8a:fe:c4:9f:45:2a:c7:75:a1:24:18:8a:07:01:
ee:ea:2c:8f:e1:8b:9a:61:ec:36:d7:c5:a4:49:0c:3a:ec:00:
af:af:3c:ac:db:0c:eb:39:19:04:29:fa:5c:e6:4d:54:e9:4f:
9d:12:86:81:6c:31:13:b2:6a:e0:ba:cc:b9:80:60:0b:d1:b7:
65:9d:4e:b8:8a:ba:a0:59:05:eb:ff:dd:e7:a7:5e:8a:fa:05:
9b:56:6e:4c:5d:a5:02:4c:33:38:c4:d3:d5:54:bd:cf:a7:41:
34:a5:9c:b8:46:b5:92:a0:5f:3a:44:a2:84:64:7e:0f:2d:72:
f8:44:36:43:fb:2c:98:36:a6:b9:9b:b7:3d:b6:76:34:2c:80:
fb:40:8e:d1:77:79:99:e9:78:aa:01:c1:7d:76:a1:2a:67:07:
ee:7b:f9:36:58:fa:76:5d:51:b2:68:c0:0c:b2:8a:7d:82:5f:
89:1b:2b:e5:41:22:ad:30:de:c6:90:37:3d:86:ea:73:a3:80:
bc:99:d5:89:4b:9c:af:58:a8:8d:cd:56:79:fa:81:72:e7:5f:
bc:27:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:12 2026 by rpki-client