Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: hUaLm1mps83NqNlH/R1SNZja5MgbZtt4WsQ9Sa96fn8=
Subject key identifier: 88:C3:9E:D7:64:F3:EF:DC:FA:78:2B:D8:52:6F:F9:1D:04:3F:74:72
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019D9B510A79DA3F284B125ED4CC7EEC8583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 1296
Signing time: Fri 17 Apr 2026 12:01:12 +0000
Manifest this update: Fri 17 Apr 2026 12:01:12 +0000
Manifest next update: Sat 18 Apr 2026 12:01:12 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: fLW1YHqGFjJnYxgSJN5ytdLVmQ3ceEJsG+cCCuTPIvc=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:0a:79:da:3f:28:4b:12:5e:d4:cc:7e:ec:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Apr 17 12:01:12 2026 GMT
Not After : Apr 18 12:01:12 2026 GMT
Subject: CN=88c39ed764f3efdcfa782bd8526ff91d043f7472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:9b:ca:8a:88:82:f3:09:46:5e:f6:2c:4b:
27:f1:1f:55:31:55:26:91:db:12:d2:bd:c1:ed:f3:
08:1b:fa:0b:5f:c9:5f:c4:d9:b1:9d:64:76:92:41:
76:a7:5f:5c:74:e9:82:a2:bf:6d:b8:54:f2:bc:a4:
76:f6:05:b6:84:8f:36:0e:34:c2:88:a5:74:08:c1:
58:81:0d:d7:aa:a2:4f:bc:8a:8b:a4:c9:9e:3d:76:
86:94:9a:81:52:df:28:b5:87:c3:bd:37:3c:7d:8b:
6b:66:a6:c6:7b:87:dc:b7:2a:ac:e6:4b:01:9e:48:
db:a6:4d:82:dd:b6:57:2c:47:1e:08:e5:96:54:44:
45:d3:17:cb:64:ef:e5:29:de:a5:cb:d9:9e:04:b1:
53:dd:5e:44:c3:56:d4:5b:48:8a:3a:ec:27:00:6f:
af:3e:76:ea:14:be:23:bd:74:40:ca:96:81:20:4e:
89:42:c2:25:0d:f8:45:65:87:ae:ce:6c:55:39:3f:
98:56:7f:75:74:26:1f:5c:38:7f:83:29:2f:3f:ee:
54:11:17:47:cf:6f:46:f3:9d:24:cb:c7:e8:14:26:
ac:f1:fe:e0:4f:24:e6:19:2b:2d:59:d8:a1:00:60:
89:c1:4f:d2:d9:be:18:c4:2f:95:68:95:a4:77:c6:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:9E:D7:64:F3:EF:DC:FA:78:2B:D8:52:6F:F9:1D:04:3F:74:72
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5c:23:58:9a:f9:53:90:5f:d3:a7:e2:4a:7d:37:85:71:2f:
26:ff:bc:b0:34:40:86:80:17:07:bb:f3:cf:77:60:e7:d8:9a:
a6:70:2e:b2:54:38:c5:9d:17:7c:28:71:b9:40:ab:fd:3f:3d:
8d:ab:4d:44:48:43:2a:d6:ed:03:82:9e:50:2e:6d:3c:db:b3:
c3:39:a8:41:2e:15:2a:3a:34:d3:47:92:54:64:0e:af:22:82:
13:e0:94:de:42:d5:c8:36:83:d5:92:29:66:b4:90:d1:e0:f3:
dd:0e:45:48:d3:de:0a:98:13:d5:8d:bf:96:ac:81:b4:08:e1:
ef:23:28:0f:2b:3d:6e:e4:c3:7c:d3:66:f7:3e:7c:81:08:26:
71:e8:61:1b:6a:c2:79:20:7c:9d:6d:a3:bc:34:59:0e:b3:f3:
78:a8:d2:9b:70:62:bd:76:7e:87:ca:ac:d5:1c:55:43:1c:7e:
c1:5b:c6:ca:4e:29:5a:97:ba:cc:9d:b7:57:ca:4d:4e:9e:35:
2a:ac:94:2f:41:8a:41:6f:12:78:2a:e7:c0:8e:35:ef:b6:92:
7a:06:e6:fd:48:68:20:33:e8:2e:de:95:d9:25:1d:93:50:8a:
cc:bb:11:e6:f3:da:e3:6c:09:40:96:1c:db:25:e9:77:30:e5:
41:cd:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:03 2026 by rpki-client