Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: uPMUuz94gqCYJRjN3x84FsXmi7X3Iz+cPPzz9tDZwJk=
Subject key identifier: 42:5F:EE:D5:E4:29:CE:23:63:A1:B3:1F:FA:DC:15:20:A3:83:E6:CF
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019D97AB4B0A74D809B6E21B1B302709475D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 05DE
Signing time: Thu 16 Apr 2026 19:01:18 +0000
Manifest this update: Thu 16 Apr 2026 19:01:18 +0000
Manifest next update: Fri 17 Apr 2026 19:01:18 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: Y3WA1QiCsU0wULrjBR3oWWW72dWGFy5X0E7PQCw53O0=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:4b:0a:74:d8:09:b6:e2:1b:1b:30:27:09:47:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Apr 16 19:01:18 2026 GMT
Not After : Apr 17 19:01:18 2026 GMT
Subject: CN=425feed5e429ce2363a1b31ffadc1520a383e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:66:57:67:cd:f7:7e:59:3b:c2:7b:00:9d:
5c:db:2d:68:7e:f6:cb:67:1d:23:76:83:44:65:87:
6b:bc:72:ad:05:a6:8d:03:11:d5:29:5d:3f:26:a2:
4d:9f:55:3f:b7:52:07:76:a9:53:0f:50:51:b1:35:
9f:a3:e9:5c:a5:37:6a:86:4f:4f:d8:0a:09:87:fb:
c0:3d:89:97:7d:62:b2:85:d5:6f:62:de:7c:7f:3c:
a9:b7:a3:69:f4:df:ae:ea:93:de:d2:73:7e:99:07:
56:91:f4:3e:bf:35:01:35:bf:6c:9b:54:7d:19:80:
f1:0a:0d:9f:79:08:7b:71:f9:23:99:f3:2d:66:d7:
70:ab:ef:c1:3b:4d:c2:74:b0:5a:a1:6e:b0:d7:b1:
d2:61:db:fd:54:2a:b2:e7:ff:75:3a:3b:c9:e6:c7:
3f:58:39:6a:ea:e6:dd:d0:ba:d6:69:d6:d7:26:27:
42:84:ed:db:e8:ae:91:48:99:7b:05:7c:9a:97:dc:
45:1a:13:9a:a1:75:5c:47:7f:c4:e7:78:f2:9a:b2:
87:be:b2:0e:fe:a0:d7:9f:1e:dd:df:bb:15:1f:2d:
b2:28:97:32:e9:f7:f8:61:04:3b:10:d9:5a:46:bd:
71:89:65:f6:89:d7:3d:d5:1c:6f:e3:93:3e:e0:1c:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:EE:D5:E4:29:CE:23:63:A1:B3:1F:FA:DC:15:20:A3:83:E6:CF
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:c7:fe:a1:cb:58:07:72:06:91:9d:6c:36:9c:fd:f2:b2:
1f:11:8b:d7:44:30:61:03:28:ba:7c:4a:f0:71:b5:70:0e:0d:
8b:bd:99:4b:18:75:9f:10:32:ce:81:89:c9:a8:5e:7d:16:17:
44:4b:9a:9d:cb:83:74:d1:3e:4e:50:5b:d5:fb:af:67:a0:37:
27:8b:c8:a6:cf:31:3a:e1:a0:fc:af:a3:df:c7:80:5b:09:7a:
3f:38:ec:1c:e9:16:6a:c9:06:58:b8:77:3d:92:ec:78:b1:ce:
19:a7:3a:59:96:8c:af:17:85:ac:fc:13:c6:9c:76:3c:6d:fb:
11:f6:4e:17:bd:6f:1a:7d:b6:c3:1f:14:8f:11:07:b4:71:16:
49:75:90:51:cd:54:fb:f3:08:88:1e:70:bb:e6:d9:1f:2e:4d:
fa:ec:53:49:e4:a0:35:c0:a2:81:1c:c6:5a:84:18:64:99:c3:
4f:cf:60:48:4e:7c:52:31:82:e9:91:1c:25:34:e0:f2:36:58:
73:86:e4:c3:05:aa:03:02:bf:33:f6:47:4c:ba:80:d8:83:81:
f4:d9:ff:39:ca:ba:68:be:35:3b:d4:83:a6:1c:c6:78:cf:d5:
fc:e3:2f:76:87:07:a4:01:98:2e:5d:3a:e6:a8:c2:09:f0:b6:
b4:72:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:34 2026 by rpki-client