Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: aKFa2JWFUz5f/6FBjtL3Q2eU9yZHCB/RXDMNFvxnuYI=
Subject key identifier: 9F:45:17:58:6D:6B:E6:CB:54:62:CC:76:B8:2A:70:6B:4D:5B:AA:87
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 019D9AABD1A8A885E5783C09D3C9912244B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 1553
Signing time: Fri 17 Apr 2026 09:00:44 +0000
Manifest this update: Fri 17 Apr 2026 09:00:44 +0000
Manifest next update: Sat 18 Apr 2026 09:00:44 +0000
Files and hashes: 1: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: P8EjEeAm4AW1HqmPZiCzXfHMzrFOg0O6KSAQlothRkc=)
2: kVVy-YWr30S0GSdgLLy6UhLp1JQ.roa (hash: MLFi2OYZr+v/54OGb70/05XIuu/GA7oMfXFZI0ZBmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d1:a8:a8:85:e5:78:3c:09:d3:c9:91:22:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Apr 17 09:00:44 2026 GMT
Not After : Apr 18 09:00:44 2026 GMT
Subject: CN=9f4517586d6be6cb5462cc76b82a706b4d5baa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:5a:8a:00:2a:45:e1:df:ba:3f:b3:69:45:
ff:4f:1c:11:20:3a:77:23:75:0d:0a:99:4e:de:f9:
7a:28:87:ea:a0:42:73:7a:2f:b7:79:11:8a:07:32:
35:91:2d:98:81:c4:b7:ec:ba:5f:82:16:6d:96:55:
f9:90:52:de:ff:92:78:8a:7c:85:02:c8:6f:00:54:
fe:c6:72:52:8e:19:8d:04:b4:4d:03:97:19:90:ac:
59:95:72:b4:b6:a4:c3:06:70:d4:e5:75:06:74:bd:
10:77:83:78:db:fe:00:40:d0:34:79:9c:68:6a:f0:
fa:88:0e:9b:f4:38:6e:0b:c3:9e:b0:16:29:d1:85:
16:9b:7f:29:6c:10:3c:03:b6:54:ab:70:76:1f:24:
f7:07:8a:21:0e:62:9c:07:00:76:dc:8f:b5:18:7f:
1c:ec:bb:35:e3:25:8e:1c:c6:04:3e:95:ba:7a:ff:
ae:1b:bd:cf:09:d7:a5:83:9a:6b:ee:35:95:da:e9:
12:99:c9:9b:29:56:0f:34:cf:98:de:25:a8:0f:67:
d0:11:f3:02:85:45:05:c1:e0:cf:40:04:5b:94:89:
42:0f:22:31:d1:db:4e:75:9f:50:2e:e9:53:40:e3:
43:09:e7:71:12:d5:3e:1e:92:b4:7b:2a:d2:8d:55:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:17:58:6D:6B:E6:CB:54:62:CC:76:B8:2A:70:6B:4D:5B:AA:87
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0c:99:70:5d:ca:82:9a:f9:ed:c9:07:50:80:cb:af:a5:46:
90:f1:96:d1:23:6c:6f:5e:f7:db:c8:fa:35:f1:08:65:4e:da:
67:1c:92:21:21:08:45:f8:87:ec:b8:7a:bb:a3:d3:a3:47:bf:
ec:89:6a:f9:0c:24:7e:82:b6:83:21:48:91:65:c8:bf:3c:64:
e9:f4:a0:d9:a5:ba:19:32:57:1d:a8:cf:af:7d:f6:a0:3b:b8:
39:de:08:0d:0f:51:01:ae:b2:c0:c5:57:a7:63:81:b5:8a:ac:
de:36:35:70:e5:27:b0:df:1e:ba:f0:b3:f6:1c:5a:5f:b2:62:
a7:52:1d:20:99:11:3a:30:36:90:80:42:1e:e8:10:b1:7a:30:
64:b3:49:e5:e7:1b:62:ad:53:91:4c:74:4c:b8:6c:fa:c0:fe:
50:74:f0:2c:b1:18:5e:45:0f:0f:d4:90:4f:08:08:80:89:ac:
93:07:0c:7b:da:90:fe:94:85:3c:d2:95:8f:21:7f:5b:a0:72:
28:3e:e2:94:f3:9b:1c:c2:ef:5e:6b:65:05:10:f9:07:31:c9:
23:78:aa:09:2c:16:21:77:3d:a0:2d:84:e9:98:0d:7d:87:5d:
29:ee:4f:22:fe:cf:f6:1c:e8:98:8a:a0:ab:77:4f:79:d7:2e:
fb:08:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:54 2026 by rpki-client