Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: DU4LO+Vp45MxM343QgKP9LEiZL5ej1gaNU+xWyxL+ao=
Subject key identifier: 61:CC:FB:7C:21:59:5A:91:5C:5E:D2:82:F1:45:9D:85:2F:C7:6A:E5
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019DA341591BDF1071254D6DCFE0AA20BDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 14AD
Signing time: Sun 19 Apr 2026 01:01:02 +0000
Manifest this update: Sun 19 Apr 2026 01:01:02 +0000
Manifest next update: Mon 20 Apr 2026 01:01:02 +0000
Files and hashes: 1: 2_kKsluZPpTjZPOr9nXKxoDbv6o.roa (hash: oJRwhRHFVN4UC8uIJgD85cpNy3gmR91KVrX4wcGTHWc=)
2: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: kcCEt5IxJFX8vJR9Tw53Rn4J9jobxrSx0lpyloqlUzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:59:1b:df:10:71:25:4d:6d:cf:e0:aa:20:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Apr 19 01:01:02 2026 GMT
Not After : Apr 20 01:01:02 2026 GMT
Subject: CN=61ccfb7c21595a915c5ed282f1459d852fc76ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:a5:a8:42:65:ee:5a:2c:ee:2d:bb:d8:35:
27:0f:b6:33:82:37:63:42:ef:d4:2a:0f:17:cf:ba:
85:7f:79:0a:b6:c9:ff:ba:ed:c7:c6:7a:09:a5:2e:
2c:c7:5e:76:e7:ef:98:2c:b9:71:58:94:3f:56:7c:
e7:c6:18:2f:bc:11:02:da:20:03:c0:09:b8:0d:0a:
d3:48:9b:ee:46:aa:f3:36:ad:dc:93:65:48:9d:fc:
38:9a:3a:92:ee:f1:27:b4:c5:dd:b8:65:43:ee:20:
91:44:1c:12:2a:ec:40:e6:a8:13:1e:b6:87:39:21:
c0:cb:82:d6:fc:60:89:e5:40:d2:54:e3:d6:7e:5b:
b2:35:50:b1:6e:54:e4:92:0e:34:67:a7:f0:03:ba:
b7:79:16:f1:38:0a:73:6d:11:fb:06:5c:86:5e:b0:
90:50:3e:41:d5:f6:a0:59:dc:4f:57:b7:66:2e:fe:
f0:6d:f9:10:bb:a6:2a:54:fb:a7:b7:d3:8d:7e:b7:
90:aa:7e:2b:58:24:f3:ab:87:63:d2:f9:30:97:16:
f2:cc:6e:54:87:8c:75:5f:5c:92:f4:b7:a9:2b:db:
8b:e9:fe:da:c1:7a:37:ed:d4:22:45:1b:34:01:5b:
e6:da:a3:09:25:f0:33:f8:55:a7:fb:f3:d6:92:7e:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:FB:7C:21:59:5A:91:5C:5E:D2:82:F1:45:9D:85:2F:C7:6A:E5
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e4:06:ce:48:eb:c3:53:04:35:da:bb:a3:d5:b3:b4:9e:c8:
8a:0e:44:06:a0:1c:f0:5c:3a:32:ab:93:cd:a7:a9:4e:a4:9c:
c6:72:3f:d7:4d:d2:7f:b2:00:67:2b:ee:c0:34:27:47:16:84:
7b:e4:59:f2:a6:89:9a:ee:75:7b:95:87:c4:b6:b8:2f:5e:15:
e6:b1:ad:1f:43:a2:58:69:03:32:93:17:06:f4:98:e6:03:ff:
e5:70:fb:40:67:65:b5:75:1a:29:33:c8:c5:ec:04:01:a6:ef:
73:f5:b2:fd:f8:24:0d:0b:5f:94:77:8e:85:c3:ac:d7:a6:1b:
e7:dd:75:92:d6:9d:c3:eb:28:36:dc:4d:4c:32:71:21:4c:56:
94:53:c8:61:bd:12:fd:9a:7f:6e:ed:84:24:15:e3:fd:d9:a2:
a2:e8:70:49:43:ae:e9:96:c1:06:7c:8d:f7:29:81:e8:c0:32:
ef:e8:d4:12:a7:c5:f6:35:96:8b:89:06:55:7b:f3:a5:53:e4:
e8:c4:57:63:1d:69:33:19:b6:d8:fe:fb:0a:2f:11:29:40:06:
81:65:3d:37:6e:0e:67:c9:41:be:6c:1c:97:2d:8e:a9:1c:92:
c4:00:86:ab:77:7b:46:6b:5a:9c:0b:0a:83:33:a5:dd:5b:be:
dc:a7:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:34 2026 by rpki-client