Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: p0fA3R/jGSY/3/4uT4sci5h9mMF2aV5VJHZ1GujJqoI=
Subject key identifier: A0:F3:F4:00:F0:07:CE:9B:5C:A1:05:68:A3:46:79:DB:6F:74:26:BB
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019DA3E648B999EEE42A4D7A4DCC1A183027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 04:01:11 +0000
Manifest this update: Sun 19 Apr 2026 04:01:11 +0000
Manifest next update: Mon 20 Apr 2026 04:01:11 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: 5RNiIqm2EzdVcItQkNBeNwNLoLVwv8+KH9d9KcoczL8=)
2: IK4nJYFQUmKZNbdR--FPWuUhVxU.roa (hash: 6+SF1nvClEObRj38PWV6BTQEdzViGHThkpCqyru0FWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:48:b9:99:ee:e4:2a:4d:7a:4d:cc:1a:18:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Apr 19 04:01:11 2026 GMT
Not After : Apr 20 04:01:11 2026 GMT
Subject: CN=a0f3f400f007ce9b5ca10568a34679db6f7426bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:73:7b:2a:ee:00:e7:14:d2:74:25:0c:57:
24:19:61:9f:d2:7c:9a:6e:2a:04:44:e4:99:7c:f8:
ad:04:53:4f:fb:e7:ce:bd:16:6c:35:60:5d:d4:c7:
7c:22:e2:e2:58:59:35:7c:21:21:d3:30:2d:1c:50:
d3:45:3f:be:ba:13:ff:b9:a2:4e:d4:f9:bd:11:2b:
01:b3:dc:2c:53:61:ff:c7:e0:6d:73:13:01:f9:62:
33:17:0e:fa:66:9c:74:96:ca:bf:1b:5d:e7:03:34:
15:19:4d:01:b5:d6:af:cb:b2:5b:3b:ec:21:31:22:
a6:76:38:2c:eb:0e:31:1b:59:d5:de:a9:cb:8c:a5:
ec:46:ae:9b:9b:b0:19:d5:16:54:31:bb:f9:77:2f:
7c:81:d7:7f:5e:78:0f:29:85:8e:89:09:dc:e3:17:
65:b5:d1:38:f7:d8:71:27:d2:26:85:93:68:43:ed:
c5:3e:18:70:85:a1:60:95:02:8e:16:ad:72:12:6d:
a9:bc:b2:d6:da:ba:4c:e4:02:40:42:02:e7:c5:2d:
12:1e:7e:71:09:65:76:f5:44:99:51:6e:94:c2:9d:
9d:65:65:27:c1:68:73:15:c5:0a:0d:09:bd:dc:83:
70:e9:73:35:15:99:ed:4c:66:db:30:73:f7:b8:93:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:F4:00:F0:07:CE:9B:5C:A1:05:68:A3:46:79:DB:6F:74:26:BB
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a5:ae:a3:27:e0:cc:a2:3f:14:45:a5:a7:35:b4:fc:f8:a1:
e2:4f:bf:5e:18:23:80:5c:cd:e8:48:8d:0a:b1:4d:2b:0d:35:
da:11:a8:c9:ba:4f:fe:84:c9:f9:00:e2:58:08:41:09:40:16:
f8:7d:2e:0e:d1:0d:bf:ee:62:24:f8:7d:0e:8e:87:18:9e:db:
92:7d:40:9d:b1:da:c7:a2:81:b6:d9:39:64:69:60:27:01:3f:
9a:82:8b:89:0f:c0:9c:8b:ac:aa:04:5d:9c:76:ba:a0:37:89:
03:5c:b9:fb:d8:ca:03:65:d2:d6:d6:f0:22:65:4d:68:f9:12:
b8:e1:dc:ea:9e:d5:3b:a4:01:96:63:a8:bd:e1:31:6f:67:80:
d7:e5:f1:54:63:e9:bf:a6:2b:1f:4f:24:ee:d1:62:8d:0d:4e:
6f:b3:26:d3:c9:47:bc:06:f0:1c:e7:1b:41:bd:0c:64:98:c5:
05:e5:cc:c0:e0:64:13:5d:6b:c3:4d:df:64:fa:16:c1:30:4e:
20:c2:76:7c:7a:9b:a7:3c:50:5a:a4:e3:93:0c:cd:74:68:90:
86:77:c1:99:eb:c6:94:a8:e6:91:57:8f:0c:f4:eb:48:44:36:
06:e3:de:9b:e2:d0:c1:1a:02:57:ff:a3:b7:c1:fb:50:e9:bf:
e6:e3:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:13 2026 by rpki-client