Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: 0cL39PJSdLctcYn0RFFK3hh+YRypCX0Wv6l5Bnrfy5I=
Subject key identifier: 06:7C:7A:C8:E2:39:D7:AD:74:59:D5:A6:E5:20:CB:E8:9A:2C:AA:CE
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 019D98F417416EC5ED7E285F6514D043FB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 14AE
Signing time: Fri 17 Apr 2026 01:00:26 +0000
Manifest this update: Fri 17 Apr 2026 01:00:26 +0000
Manifest next update: Sat 18 Apr 2026 01:00:26 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: VadpPOU7WvFTQgJjUS4cf6Ewl/dkM4trRX/SO2JMma0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:17:41:6e:c5:ed:7e:28:5f:65:14:d0:43:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Apr 17 01:00:26 2026 GMT
Not After : Apr 18 01:00:26 2026 GMT
Subject: CN=067c7ac8e239d7ad7459d5a6e520cbe89a2caace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:52:59:7f:11:76:10:a8:e5:8e:e8:13:4a:
2c:0f:36:a9:83:93:74:7c:7f:4a:18:97:39:73:04:
15:19:f3:7f:3a:9c:0f:e5:8b:5f:23:f3:c8:c1:fd:
13:6a:c5:ee:8a:4a:e9:f5:c0:b0:f1:db:c6:a8:6c:
cc:34:01:e5:8b:7a:4e:cf:de:48:cb:8e:76:91:0e:
90:ae:b6:c8:f1:3c:f9:5d:c1:ea:69:9d:83:0d:7b:
ef:52:2e:2e:10:20:0d:af:45:f2:a6:5c:95:eb:14:
19:13:58:88:7a:23:b6:e2:db:84:90:40:26:e8:18:
36:ed:3d:ac:05:71:cd:ba:3c:df:a9:ad:3a:0d:df:
08:a8:8a:8b:8d:df:71:eb:40:01:82:7c:5f:c6:ca:
45:42:9c:b1:9b:43:40:f4:6d:c1:3d:fa:58:d6:57:
2c:05:29:83:72:df:1e:f0:27:91:01:00:20:f4:4a:
b7:c0:5a:fd:b6:f9:94:5a:52:bd:fa:b9:20:0f:78:
61:39:64:fc:9c:e4:61:32:8c:0d:17:71:bc:58:77:
54:9c:7f:21:ee:8a:20:14:59:da:53:0c:db:3a:8a:
a4:01:a2:af:bd:ee:62:c3:72:93:91:9f:f9:14:7d:
55:48:2c:e3:d4:d1:d8:41:26:2f:92:50:1e:d8:a7:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:7A:C8:E2:39:D7:AD:74:59:D5:A6:E5:20:CB:E8:9A:2C:AA:CE
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:b3:bb:bf:65:76:b2:91:c5:c8:1d:c8:5d:69:c7:32:40:
f7:18:9a:28:6b:cc:63:17:a5:4c:1a:48:34:3f:7e:7b:9b:50:
3a:cf:66:cd:ce:92:24:f4:a2:7b:e7:95:33:30:b7:29:2e:7f:
6e:76:85:9e:13:d9:67:56:a1:54:aa:59:a5:93:33:83:c9:ae:
91:88:a4:9f:7c:c5:ba:f9:52:2f:ad:07:3b:af:3b:cc:1a:be:
ff:57:f3:3d:35:a0:a7:5d:12:c9:9e:cb:57:c0:d2:af:30:93:
3b:9a:09:de:fc:a6:2a:52:76:7d:bb:ff:31:16:cf:27:2a:5e:
d3:9e:8c:4d:a6:18:be:76:e0:de:1d:11:7e:0f:44:54:ac:b8:
88:37:d6:dc:03:54:44:0e:a0:6b:3b:1b:3e:0f:89:7b:2d:4a:
fb:31:3d:3e:6e:0e:3b:cd:b4:7f:60:ce:98:94:7a:5c:fd:d0:
b0:13:fe:f7:32:62:b5:f5:ce:99:d4:ce:87:ef:06:98:e6:59:
7e:1c:30:6b:8f:b6:23:4c:32:e4:9d:88:15:83:b8:83:9c:da:
e6:40:7f:33:0d:06:c9:ff:91:2b:b3:c6:97:50:a3:dd:79:3f:
59:40:e5:bf:8d:a5:47:55:54:84:ae:65:07:48:fb:4c:b4:65:
84:43:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:46 2026 by rpki-client