Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier: yz2kTTBNqNzbNyFkQGIzUsxMU2yyKqWcTUw9ceMaufA=
Subject key identifier: B2:C0:87:49:15:20:AF:69:31:8F:97:E7:B1:10:AF:3A:D0:6B:08:C1
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 019D9A3EE5557D2C72F9583826CAEE8AECF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: 1TYYVuYIdcMeQ98fzkHfAaJ50HTLeNVP0ngzvw+9bkI=)
2: IEPEUKY4ypkI5czUw-7D3lVNpYU.roa (hash: UT1ZxTsCU7M0PXyb6IAXHjMFZ0pzwPHMcsChBp8nX6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e5:55:7d:2c:72:f9:58:38:26:ca:ee:8a:ec:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=b2c087491520af69318f97e7b110af3ad06b08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:c6:7e:f2:ea:b3:29:19:95:df:0c:e9:ac:
0a:25:ad:1b:55:63:5f:44:59:f1:85:57:97:ea:40:
94:e1:d5:63:5e:f1:24:b8:0a:5f:f2:70:78:2b:9b:
bc:51:3e:97:c8:81:55:d5:55:47:83:ba:b7:0a:ed:
45:0e:df:1e:ca:0e:15:82:27:25:89:e0:62:e9:90:
7e:85:dd:8e:fe:58:ff:e7:e7:a7:9d:d6:b4:6a:0d:
33:48:dd:14:22:62:6f:ef:62:de:fa:e2:c6:7a:14:
75:cc:f1:54:bd:1c:d0:12:df:85:b3:54:f5:29:05:
17:e3:6f:b1:cb:94:66:89:82:74:5a:e0:dc:db:18:
cd:da:4b:97:fc:0e:14:4c:60:fe:ee:0a:bc:1d:c1:
47:4a:75:b5:e3:28:c9:20:31:4f:0a:2c:eb:0b:9b:
8d:77:d2:37:95:a9:92:2c:01:c6:df:90:57:5e:27:
2d:3e:da:e1:74:50:00:ca:f6:6f:b5:c9:98:e2:30:
18:00:9a:56:67:8a:37:74:17:1d:b2:0a:bd:c6:61:
30:4e:2f:f3:66:3d:8e:58:fc:3f:4f:f2:4b:b4:72:
b5:05:03:19:c7:a2:a1:87:d9:15:96:ad:c0:a1:3b:
54:d1:f0:9d:76:72:b7:1b:11:5b:ee:16:a5:84:8a:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:87:49:15:20:AF:69:31:8F:97:E7:B1:10:AF:3A:D0:6B:08:C1
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:59:ec:33:7f:f9:4b:ef:05:00:41:72:61:3e:1f:91:ef:
86:18:fe:0d:5a:e8:e2:19:24:61:b0:88:46:10:3f:20:6e:4a:
dc:91:9b:30:2f:c0:01:f8:61:18:c3:e2:a4:c3:ff:94:e0:ac:
94:5e:b3:da:2e:fd:ef:1e:42:1b:7c:06:e6:90:4d:ad:34:58:
b9:c4:02:11:f5:7f:2a:ec:4c:cf:a9:01:aa:a8:f0:ab:19:fa:
88:61:2d:fb:08:87:62:38:37:23:2b:eb:67:5d:21:8e:7f:51:
48:a5:42:98:4b:c8:96:9f:d7:02:8d:6c:31:e4:99:32:74:87:
a2:de:bb:92:b4:16:c6:ac:bc:0a:33:e7:c5:5a:61:11:67:2a:
b9:37:fe:57:2d:ef:25:59:b1:50:8b:ff:f7:1a:3a:1f:73:09:
43:f2:8e:cc:0b:3f:47:05:15:6c:69:3a:3c:24:b3:e6:55:88:
e4:6c:a3:9b:15:05:30:6e:59:df:59:a6:d3:fb:96:ac:71:46:
d4:30:7d:bf:1a:b2:f4:51:bd:c3:30:00:40:b9:78:51:f4:54:
ca:b6:9f:48:c3:5b:bc:c2:b8:3b:f6:f4:e6:2b:2a:96:bb:47:
9f:93:21:d7:8c:b3:88:01:c8:d0:b1:36:46:3a:4c:85:50:e1:
4f:a8:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:24 2026 by rpki-client