Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: K0Jak4ZEClI1ipeApTB9p3UPnYZixXK66LaGvVjimYY=
Subject key identifier: 94:86:11:5B:37:1B:D7:96:73:E4:A2:63:BE:09:F6:DB:3C:C4:91:5A
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 019D9B19DF5BEA00ACC678E2C29B64432724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 15FE
Signing time: Fri 17 Apr 2026 11:00:57 +0000
Manifest this update: Fri 17 Apr 2026 11:00:57 +0000
Manifest next update: Sat 18 Apr 2026 11:00:57 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: Qqt644jP4Pk31qeO4i9UJQWhPpamNMRnRAyRJmguTsM=)
2: aYkOORdOjghP0b0H8Khztmylcj0.roa (hash: cftGer896cxsIKx2zfTmvwrI4NNvGaw6Mpm7/zfzAB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:df:5b:ea:00:ac:c6:78:e2:c2:9b:64:43:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Apr 17 11:00:57 2026 GMT
Not After : Apr 18 11:00:57 2026 GMT
Subject: CN=9486115b371bd79673e4a263be09f6db3cc4915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:f4:ea:ae:11:94:fd:08:da:0c:e8:fc:ab:
8e:3a:f2:48:1b:50:f4:09:5c:62:7d:43:1f:bc:2c:
ae:e2:c7:a8:02:b9:50:9d:e2:17:86:08:b1:8e:b5:
34:0b:a7:ed:3a:54:c2:f0:f8:9c:8e:d7:37:44:8e:
4a:c0:10:30:8b:af:70:d7:00:42:f0:ca:9f:87:5d:
22:08:de:75:64:f8:be:99:b1:fc:18:74:b2:f0:cc:
b1:2a:6b:22:af:27:56:d3:f8:05:6c:4a:6e:cb:b8:
48:62:29:7b:f3:51:34:4f:de:64:ce:b6:94:20:e1:
00:00:68:4c:49:9f:ef:a0:c3:8b:48:a3:28:e3:8f:
8d:56:c8:7c:df:c4:cf:d7:fd:1d:f3:90:a0:3d:75:
4f:23:bc:2e:b9:a7:2b:47:92:ff:1f:bc:f5:5e:f7:
1b:75:31:82:ca:66:ff:5e:f0:ab:87:5d:9b:7e:57:
40:ce:bb:6d:19:a3:10:7b:6f:ca:9d:bc:f1:d5:ad:
06:b4:2a:73:71:12:a2:36:76:bd:77:6a:77:4b:93:
32:17:d9:ce:b4:fa:32:37:34:cc:26:94:07:42:6e:
30:72:ba:54:29:83:4d:7d:c3:08:7a:68:2d:41:cf:
c2:92:3d:cd:53:98:6d:eb:e1:ed:fe:5e:5f:a1:20:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:11:5B:37:1B:D7:96:73:E4:A2:63:BE:09:F6:DB:3C:C4:91:5A
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:10:69:92:c9:a8:03:67:88:5c:6f:78:99:c1:9f:a5:5d:76:
a8:05:18:d7:0e:ff:a4:ae:6c:7a:69:63:44:6a:a2:94:cc:ca:
73:be:9e:87:2f:45:4c:d0:17:3a:9c:18:b4:56:db:4f:fc:77:
85:57:51:6a:e6:2f:61:01:7a:2e:20:fa:95:5e:ff:5f:e7:9d:
48:4e:94:03:87:b9:ba:11:5e:9e:d3:7b:e2:0d:07:b9:f8:91:
0b:f9:6c:b2:cb:f9:81:44:71:21:86:da:df:f6:1a:96:0f:35:
6a:7d:d2:b5:cc:67:a8:da:81:73:f2:63:52:d2:09:d0:e2:7b:
97:7e:87:21:8f:76:0c:04:e3:79:65:4d:11:10:d5:b8:19:97:
2d:6c:86:87:d1:bb:29:20:53:3c:e1:a6:a9:72:2d:53:6c:8d:
08:2d:1e:9d:2f:c0:99:bf:8a:15:9b:02:d0:ca:aa:6a:97:ee:
d5:8f:46:e7:77:8c:69:ca:06:d9:23:48:76:d0:ee:33:c0:c3:
f1:94:0b:40:86:46:c6:fa:1a:66:9a:1e:30:c5:35:72:62:66:
4b:ff:85:2f:11:d8:76:a0:d5:e7:cb:bd:2e:81:ab:48:02:5c:
90:3d:8f:80:bb:88:d9:09:31:80:a3:57:68:56:f3:2d:4c:04:
10:c7:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:19 2026 by rpki-client