Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: K/FpreYspRQvWmKr3FKSZAgnzuBozwdV3gJEWjtJ74U=
Subject key identifier: AA:29:F8:DD:AF:0A:C3:70:52:D1:D1:70:43:0C:FA:BF:A2:82:EE:76
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 019D99D01DEB1EECF0085FA09BE1813823D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: OHVFgHSL3RGQyFIUTPnH57S5a4bLoqoyVsgqEuddABU=)
2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1d:eb:1e:ec:f0:08:5f:a0:9b:e1:81:38:23:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=aa29f8ddaf0ac37052d1d170430cfabfa282ee76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:a5:9f:e4:c4:69:1d:ef:50:7b:c2:0b:2a:
cd:62:ee:30:97:42:f1:47:bf:0e:ce:0b:42:30:13:
b0:04:87:06:d1:e4:23:c8:f5:c4:12:b5:45:8d:26:
fe:14:1a:e8:9b:24:9c:3b:c6:28:be:d7:b4:bc:23:
a8:99:65:bb:d9:33:93:79:2e:52:ec:2e:86:d5:80:
b9:2a:ad:65:cd:79:f3:61:6b:75:d7:90:e9:ac:d6:
de:e1:a7:99:5d:2a:93:1f:27:47:bf:a8:f1:83:b7:
d1:34:59:95:e6:2a:9a:a2:89:05:72:47:77:62:43:
60:5a:87:29:73:a3:f5:3f:05:db:c9:39:5a:f9:4f:
ab:58:35:fc:10:56:06:74:bc:80:a3:e7:d8:aa:1b:
06:7b:16:e6:6a:8a:86:4b:66:81:e3:75:96:9d:84:
c4:b9:05:22:cd:fd:17:94:ef:4d:15:e7:3c:86:ad:
f0:c1:98:4a:58:b3:5d:6d:8f:47:5b:61:b7:aa:e4:
eb:81:cc:0e:0a:33:2a:f6:5c:24:f8:4e:7b:eb:85:
50:48:70:51:18:63:03:2c:3b:24:c8:26:fe:aa:c3:
39:a8:80:aa:83:02:3e:ba:a1:a9:ca:54:09:a1:82:
54:e1:cb:cd:32:73:25:e4:73:a4:0d:d3:00:6e:ec:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:F8:DD:AF:0A:C3:70:52:D1:D1:70:43:0C:FA:BF:A2:82:EE:76
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:40:aa:16:3f:b0:93:d3:94:f5:c0:ff:8e:bf:70:82:45:
ef:16:e5:f4:01:ab:d7:28:75:3b:01:97:05:96:63:49:4e:1d:
70:59:1b:39:0e:17:43:75:04:f8:20:52:42:66:68:a1:0a:d9:
20:c8:6e:a2:4e:f4:25:0c:53:0a:23:e8:c8:8a:8c:b6:b9:0f:
ac:7f:e5:dc:15:f9:05:72:85:84:10:37:a7:9b:bd:bf:61:4d:
56:a2:98:ab:79:ec:ac:06:9e:e7:c9:85:7e:24:73:fe:c4:cb:
37:97:2a:38:c7:9a:8d:78:95:60:e7:d8:d3:9c:31:9e:a5:83:
e8:ff:da:68:11:ee:35:a8:85:61:68:78:b6:d8:fe:2d:9a:9d:
f7:5e:d1:76:ea:54:64:21:e2:79:d0:8e:cd:d4:59:f0:ab:cf:
72:e8:eb:5c:b2:c8:81:c7:18:d3:9b:b8:91:bd:60:4a:3a:3d:
bc:8c:c0:a8:2a:80:a6:af:a6:a6:8f:a0:57:7d:c5:e3:7e:67:
0a:77:a7:5c:2b:7c:22:f8:21:79:55:71:1c:bd:69:26:db:79:
56:40:3b:21:ec:37:b9:19:2c:5d:f4:bf:d5:49:eb:fc:e6:88:
fe:91:af:57:62:c8:f7:f2:68:4a:eb:47:e1:da:89:df:35:7e:
da:1f:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:36 2026 by rpki-client