Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: mqZYV+eXhKXoQdek4guRAFEfs9ajZf2IObduxvSFYhM=
Subject key identifier: 5E:61:8C:1F:CD:0E:05:23:7C:21:71:35:04:49:13:EC:7C:D3:2B:95
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019D99D0DAB80714C75E066300ACF60ADF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:34 +0000
Manifest this update: Fri 17 Apr 2026 05:01:34 +0000
Manifest next update: Sat 18 Apr 2026 05:01:34 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: DC5Krb7RGEt797MPAyg2lqb05lBZNhB138sX4YKtPvQ=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:da:b8:07:14:c7:5e:06:63:00:ac:f6:0a:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Apr 17 05:01:34 2026 GMT
Not After : Apr 18 05:01:34 2026 GMT
Subject: CN=5e618c1fcd0e05237c217135044913ec7cd32b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:e3:21:c6:8b:c0:e4:c7:8f:a2:2d:93:71:
dc:a1:29:97:ca:c2:88:f6:2f:5c:0c:3d:ef:0c:b2:
ab:9d:8e:98:85:f5:d8:73:83:45:6e:62:f1:96:c2:
76:17:51:e8:69:f6:99:ff:46:91:16:3b:9b:e0:ea:
9c:c4:1f:24:a7:e0:28:44:a0:fe:2f:b1:c6:89:df:
54:e1:32:9f:2c:ca:58:d5:b1:6f:7c:d5:5b:c5:99:
58:69:ae:4c:0a:7d:5a:4a:bd:c5:9d:b9:11:cd:15:
39:ea:7c:11:fe:91:fc:3a:ff:4a:79:3e:aa:00:ec:
e9:6e:fd:4b:fb:52:4d:9e:97:ed:28:a2:52:2c:7d:
7e:7c:64:88:c7:b1:fb:f1:d6:e1:28:4a:06:7c:15:
43:bd:27:36:d7:1e:d8:3d:1b:1f:8c:ab:cf:16:5d:
4f:b0:d2:f4:cd:bd:bb:f1:7f:d4:15:4e:77:1b:9e:
59:da:f8:3b:ff:67:42:19:cc:7d:34:e7:ab:26:7c:
cf:84:18:36:aa:7c:9f:3f:d1:bd:4f:d2:52:a5:1e:
43:3c:07:36:74:ab:e9:90:2e:60:10:1a:9b:ef:c0:
59:a9:3b:1c:e4:ae:13:d7:aa:f8:2f:a6:81:b8:ce:
e0:25:a6:fe:7d:3f:da:44:27:22:f7:a6:4c:c7:9b:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:61:8C:1F:CD:0E:05:23:7C:21:71:35:04:49:13:EC:7C:D3:2B:95
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:25:6b:67:6e:18:b9:10:f5:f0:96:1f:d6:60:d1:a2:99:04:
c6:d9:36:6a:cf:6c:54:61:d0:e5:84:e6:8b:1e:f7:92:35:24:
a7:5a:8a:f0:9d:78:9c:da:83:4a:70:77:70:78:9d:92:8a:93:
63:49:e2:b2:cb:33:b6:69:0f:6e:ca:5a:89:fd:07:67:03:f3:
d9:07:32:d0:d2:77:49:df:12:f4:27:1c:42:1c:3c:54:2d:d4:
5e:62:d9:6f:5e:69:1d:f6:92:26:18:3e:c8:09:fc:a0:a3:97:
f7:7f:92:bd:7a:06:27:c0:4b:17:89:a0:3c:21:3e:d2:e6:2b:
ad:44:34:53:90:9f:93:2d:e9:95:44:91:82:e9:e7:28:01:ee:
7b:aa:b1:f7:51:0e:9d:6b:08:bc:54:b0:38:d9:76:5e:41:b2:
ba:01:5c:47:df:e2:af:46:92:0b:6a:01:8a:68:3f:21:8e:46:
4a:4a:01:5a:fe:40:9d:b4:cb:e5:3e:cb:82:49:a3:19:6e:91:
f3:d9:63:32:d1:e8:9c:00:b1:87:c3:96:ce:35:78:84:35:d0:
42:5b:30:53:8b:8d:8a:a1:2f:e0:85:b3:08:30:3e:a7:80:94:
61:01:2b:e0:e8:21:94:e6:50:8a:d2:c5:cb:9e:5e:94:75:91:
56:5a:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:14 2026 by rpki-client