Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
File: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft (raw, json)
Hash identifier: 3kBBl+vvBKrwPy5DxZuL7xT/tVtzlzUhLun2W3D7ySo=
Subject key identifier: 61:67:DF:55:3C:AC:03:8A:06:FA:6B:60:1F:02:C9:8B:F1:F9:F8:4E
Authority key identifier: E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
Certificate issuer: /CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Certificate serial: 019D9C2CB6B0AD4D1232424F912F35ACE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
Manifest number: FB
Signing time: Fri 17 Apr 2026 16:01:09 +0000
Manifest this update: Fri 17 Apr 2026 16:01:09 +0000
Manifest next update: Sat 18 Apr 2026 16:01:09 +0000
Files and hashes: 1: 5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl (hash: NtlX3htXtGrGypzac6s2dqXMWVwog3S3u4YBuNrN+H4=)
2: k_j9kCZuBTWuvSVZ-WdJ_g1t6wY.asa (hash: dESwUIcXPpUiW9oc03it11tJGDFnuCkshgfLGftBad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:b6:b0:ad:4d:12:32:42:4f:91:2f:35:ac:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59469565f719bed86adc73fb6e6c886f60bdaab
Validity
Not Before: Apr 17 16:01:09 2026 GMT
Not After : Apr 18 16:01:09 2026 GMT
Subject: CN=6167df553cac038a06fa6b601f02c98bf1f9f84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:4b:b1:bd:66:44:0c:39:58:ee:22:dd:5f:
89:2f:40:e6:d7:d3:78:06:59:21:c9:03:fe:b8:f3:
73:ed:4f:53:6f:b9:22:c3:2d:1e:98:63:38:d7:ed:
d3:67:2c:66:ca:4c:20:69:ff:3d:ec:e3:f9:fc:67:
19:84:c1:5d:3d:6c:92:12:d6:c9:90:f7:f1:ef:06:
c7:70:4a:51:d3:ea:9c:f1:e0:05:39:7a:89:e3:e0:
28:02:e1:3d:bc:aa:04:5a:06:45:a0:22:91:b4:90:
f3:d6:72:da:1b:5a:fb:40:5a:48:5b:a3:0d:b8:cc:
19:60:d7:d9:08:63:f5:39:02:fb:de:7d:0d:3e:9e:
66:5a:44:09:21:1d:d9:2b:b8:5b:84:9d:08:c8:41:
b9:0f:05:58:0e:b2:8e:1a:4b:fa:c0:ef:f7:34:59:
9d:b9:3c:32:90:2e:8f:a5:2b:bf:4d:f5:ea:f5:e5:
02:b9:f1:39:59:14:b0:a9:8b:af:34:e6:5a:aa:f8:
5d:38:e2:95:35:14:6a:ab:48:3a:00:b5:93:24:1b:
e7:10:bf:bc:b7:6c:46:3d:07:69:6b:c8:fd:11:b3:
97:93:8c:a2:ba:64:14:8d:97:53:57:fb:91:d1:45:
6c:b3:fe:29:c5:f7:37:1e:cb:7d:ea:f6:37:05:bc:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:DF:55:3C:AC:03:8A:06:FA:6B:60:1F:02:C9:8B:F1:F9:F8:4E
X509v3 Authority Key Identifier:
keyid:E5:94:69:56:5F:71:9B:ED:86:AD:C7:3F:B6:E6:C8:86:F6:0B:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZRpVl9xm-2Grcc_tubIhvYL2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8d8307-4a0e-4453-a94b-6866a401a67d/1/5ZRpVl9xm-2Grcc_tubIhvYL2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f4:b2:69:c2:8b:22:1a:a6:24:59:d2:45:3b:fb:60:cc:90:
5d:28:69:3b:37:3f:4c:e1:99:2d:21:41:37:74:a0:8f:66:e1:
16:f9:a1:48:90:b2:2d:2a:91:45:71:92:71:b3:ca:fe:00:24:
10:bf:bf:d8:0c:df:f6:f6:d0:d3:cf:00:62:95:10:c8:f7:a8:
08:42:38:24:3e:b3:72:cc:2f:71:bc:ef:c2:ed:d9:0c:74:60:
96:b4:47:34:e6:16:a4:33:7e:61:e2:66:99:96:55:0f:10:9d:
e9:a7:db:8f:e9:4e:2c:99:e2:d6:03:09:eb:ad:ec:4a:5a:f2:
76:a1:4b:f0:79:e5:28:1b:f1:5a:1a:88:0b:bf:6b:a8:b1:1b:
4d:4e:60:e5:93:49:25:b5:cc:b8:30:f7:bb:69:ff:d3:55:bb:
49:ca:22:19:00:ae:c1:4e:96:0c:8f:cb:95:a3:b1:d4:2e:c8:
8c:a7:64:3c:69:24:7c:d6:72:69:5c:13:5d:18:e3:56:78:55:
dc:fc:9b:60:c5:bf:6c:bd:a8:5d:a2:65:0b:77:d6:d3:47:e7:
57:42:94:b1:d2:e3:13:a3:29:5f:78:66:8c:08:21:84:62:e1:
78:30:a4:0b:d4:4f:2e:5d:a0:06:6f:dd:48:13:9f:d3:a9:04:
07:83:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:39 2026 by rpki-client