Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: xc17M48orJOylbRZQW16bwUVSt626GGVeFzXiWW6r/M=
Subject key identifier: B9:AC:4C:E9:63:E7:C8:0C:27:FC:EC:17:5A:08:F7:2B:73:46:20:ED
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 019DA30ADD7473EBF451CF563AF15E723DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 0987
Signing time: Sun 19 Apr 2026 00:01:31 +0000
Manifest this update: Sun 19 Apr 2026 00:01:31 +0000
Manifest next update: Mon 20 Apr 2026 00:01:31 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: CS0bH3Znek9y3iS2/5w5kthPiOTO0ZHuafJHxQ5MUuc=)
2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:dd:74:73:eb:f4:51:cf:56:3a:f1:5e:72:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Apr 19 00:01:31 2026 GMT
Not After : Apr 20 00:01:31 2026 GMT
Subject: CN=b9ac4ce963e7c80c27fcec175a08f72b734620ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:47:70:26:c5:bd:e6:f2:de:0b:a6:51:0f:
5f:c5:49:ac:07:70:d2:21:f5:6c:f7:bd:a1:4e:24:
51:82:25:52:83:d7:fe:37:97:09:82:2f:2f:f6:1d:
2c:53:17:4e:20:10:0e:ae:ab:29:06:c1:0f:92:79:
6f:52:92:4b:27:57:84:34:87:83:ec:b9:0b:da:74:
95:2b:b6:b8:49:56:6f:68:d8:0f:d7:38:23:87:3b:
ed:ad:8d:02:f3:39:fa:17:42:af:5d:ab:0c:9c:38:
b3:d9:db:28:7c:f6:8f:27:ca:15:0f:8c:71:5e:27:
b3:90:51:f4:38:fc:a5:ee:29:3a:99:0b:ec:03:82:
a3:ec:85:ae:46:43:4f:bd:d1:0c:10:69:1f:8d:ec:
76:2c:b8:a6:5f:1a:bb:6d:b8:35:8e:8c:6d:78:a7:
b3:50:a8:9e:42:de:2b:33:5c:20:6d:d3:14:90:26:
f5:a6:24:5a:ea:61:28:bf:c5:d0:7e:bf:c8:83:b3:
a4:64:c0:80:48:61:4c:27:ec:e0:49:fa:f6:df:70:
78:4c:84:f7:ad:b2:9e:01:8c:90:e3:83:0d:f0:c4:
4e:23:96:14:b5:a9:77:a1:15:92:4f:56:46:69:4a:
33:a9:56:12:3c:46:46:30:2d:a5:23:0d:bd:df:99:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:4C:E9:63:E7:C8:0C:27:FC:EC:17:5A:08:F7:2B:73:46:20:ED
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:36:58:b7:f2:7a:2b:ea:0c:60:a7:dd:8a:4e:8f:d0:ea:
d0:c8:f8:70:47:8d:4e:48:22:87:d6:e5:86:9b:96:a6:7e:dc:
a4:a8:b0:a1:94:1f:6f:68:d5:30:68:27:50:aa:33:6d:73:fc:
a4:79:e1:ef:2f:07:c7:ab:03:b4:17:80:9d:56:ea:e0:b8:54:
ee:d9:45:04:87:42:b1:ac:b4:60:ef:96:fd:97:da:96:70:73:
23:f7:08:12:34:89:89:b1:fe:5f:db:3a:8a:7d:ce:ea:0d:40:
cc:36:5c:28:b4:ce:93:5e:69:2d:e5:61:72:c3:d5:14:cb:ea:
1f:da:9c:33:44:9b:9e:7a:43:45:10:91:be:52:4a:53:de:99:
45:b6:9a:97:dc:8b:aa:f4:48:da:1f:0c:ec:8b:78:b1:4b:0d:
df:b6:2f:b6:19:7d:28:ce:df:f4:25:31:1e:22:b3:30:65:9d:
f2:e2:2c:99:b5:e7:f6:3f:cd:9c:f8:35:70:6f:28:4a:99:22:
a0:cf:23:1f:b2:f4:e8:e4:08:0c:eb:e5:dc:e7:f9:5c:f2:b4:
9c:1d:48:41:66:22:54:38:b6:33:9a:88:b1:65:cb:e3:b9:4d:
d8:48:83:fa:79:e0:b0:83:47:37:bd:98:10:0f:a1:09:6a:b1:
a3:af:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:43 2026 by rpki-client