Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: PGkLJI4LZP125GoMKMJVpfSljrhzrVaSJEuOTwwO4V0=
Subject key identifier: B2:77:CD:5C:C5:72:A1:59:94:45:FC:F0:C5:CB:9F:C4:21:5D:22:78
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 019D99621A38CC50AEC71566A3F15C376D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 1060
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: OhHACXXw51kPJhsOHE0CMg/POV41rTyEP3LaMZg/JGs=)
2: 5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (hash: uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1a:38:cc:50:ae:c7:15:66:a3:f1:5c:37:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=b277cd5cc572a1599445fcf0c5cb9fc4215d2278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:0e:4a:b1:1d:91:b2:2d:16:94:1a:ca:59:
0d:f5:b0:e4:81:d9:66:4e:67:4b:9e:28:12:2a:9f:
a8:4c:80:23:dd:aa:50:64:fc:ee:1e:06:23:9f:68:
96:68:40:41:b1:92:33:09:cb:cd:68:ba:2f:5a:f2:
59:f7:e2:ef:89:a2:ff:91:b3:40:62:a3:1b:f9:5c:
7d:f1:bd:7f:ad:f7:7c:02:b0:b0:bb:5a:29:8c:93:
34:f7:ee:f9:3e:34:b0:c9:c8:12:57:38:a3:d3:e9:
72:a2:c1:02:4e:df:f9:eb:64:76:5b:9e:04:37:92:
b6:d9:27:98:56:95:0e:3d:7d:9d:43:b6:b0:a2:f6:
c0:51:c5:50:4f:d3:d6:bd:54:52:ea:69:21:78:e6:
de:ed:0d:2e:58:b7:2b:df:10:18:6b:ce:43:f6:bb:
ec:92:43:4d:33:06:e3:d3:f4:cc:b1:d4:a2:17:5b:
25:c8:3a:11:a0:fd:01:fa:1e:64:31:65:f4:ad:74:
56:b6:64:78:f0:fb:72:6e:6e:f3:aa:0f:e3:75:db:
91:8e:c9:7c:4b:9c:19:99:f8:d6:31:1d:62:ee:ec:
04:3d:fc:24:82:ba:13:f4:8e:14:72:1d:f0:f4:74:
f3:42:c6:96:0b:69:50:e6:24:5f:9c:5d:70:55:4d:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:CD:5C:C5:72:A1:59:94:45:FC:F0:C5:CB:9F:C4:21:5D:22:78
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:24:c0:2e:ca:8c:7f:b3:b8:f0:0b:34:22:e3:0a:5c:65:
e5:f7:0e:7a:21:c1:ab:d8:4b:ce:d1:25:61:00:14:8b:66:04:
0a:da:ae:2e:dc:92:bf:5a:96:d7:a0:e2:45:3a:c6:81:ff:81:
81:3e:55:bd:a5:50:6b:0f:57:29:01:df:12:23:74:0c:29:bf:
51:7d:de:ce:17:86:b8:e4:b0:1e:73:26:16:7c:1b:48:af:3c:
ab:f7:df:66:09:49:f6:ce:93:17:69:d6:b6:fb:ff:5b:34:a3:
65:4f:f6:7c:16:75:d0:ec:97:b9:b4:4e:f9:af:fe:0f:b5:6c:
6d:8f:29:5a:7e:59:3b:4f:69:52:a0:03:a1:e5:94:c2:36:45:
8b:f1:ee:b4:12:46:3e:14:a1:f1:95:c4:dc:fa:99:97:5f:d6:
5e:04:83:63:0c:5e:8a:cc:c6:54:5e:0f:f2:06:6b:fd:dd:f2:
c7:76:b9:ec:0d:ac:16:de:43:8c:92:54:db:37:7d:44:7e:c0:
a4:2b:42:70:3d:69:66:32:f4:4e:81:6e:e6:1f:b7:38:dd:c5:
31:59:13:fd:2c:eb:b4:00:d5:f4:2c:ea:36:a8:b9:09:2f:e2:
fb:78:67:1f:c9:eb:08:f2:e2:b1:70:db:7d:b7:e3:d3:b2:fb:
f2:f3:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:38 2026 by rpki-client