Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: 7qWM1AlvnqCM1j2r7v2ZUmCRjbWJFNzrgEXApdb5nY8=
Subject key identifier: A9:A7:68:5E:F7:D7:1B:E4:36:39:03:44:72:38:25:F5:9A:BF:48:2D
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019D992B5152AF5B5313CE141217C357D282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0CB1
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 2flDUkqFb6LrUdIskNFwWYZwWyX8DjAifFqeF/lnSmw=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:51:52:af:5b:53:13:ce:14:12:17:c3:57:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=a9a7685ef7d71be436390344723825f59abf482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:5b:65:28:1a:11:8a:9c:be:79:09:ad:a7:
1d:f2:5e:2b:b2:8c:8b:5e:e9:ee:7f:df:b8:3b:63:
a0:34:3a:f6:19:eb:d4:20:56:f9:b6:52:90:f1:06:
25:73:ad:a1:7e:ea:33:e9:b4:4a:c2:10:a7:03:92:
10:3d:5b:92:6c:fc:61:e9:70:56:0b:99:91:b1:08:
11:8d:da:27:af:b9:fc:ab:36:7f:47:2b:e0:5e:87:
1b:2d:2f:2e:c9:0b:e9:ac:fb:dd:06:cd:05:9a:db:
e3:bd:3c:fd:0d:48:94:41:19:df:ef:cb:9a:b7:38:
09:ed:ac:d5:73:bc:88:98:7c:d0:06:a4:2c:f6:62:
c2:41:07:e3:2d:2e:e1:70:d9:18:c5:db:6f:f4:12:
e2:63:02:d0:fe:bd:b3:49:8f:0a:d7:7d:ee:a5:4c:
01:66:ee:38:2c:16:f1:62:9c:07:d5:44:6e:56:fb:
af:43:6e:f3:4d:94:c9:f6:1e:8a:4e:5b:29:b0:d0:
65:a9:91:33:60:dc:f9:34:c2:56:b2:64:93:fc:fc:
3d:95:40:80:8c:20:e7:5d:7a:c5:b5:7e:d6:2a:f7:
1c:9b:27:08:1a:bb:48:e8:82:40:0e:39:6d:43:b3:
a4:7c:fd:18:1d:62:e5:cf:03:6c:62:3a:4a:c9:53:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:68:5E:F7:D7:1B:E4:36:39:03:44:72:38:25:F5:9A:BF:48:2D
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1e:a1:b4:53:08:c9:cd:7e:f9:46:38:8a:a7:c8:f3:32:89:
e1:81:60:67:cc:d8:35:f4:62:db:3b:1d:26:03:f5:a7:4f:ab:
53:78:dd:9c:0e:61:2c:45:c3:82:16:c9:a9:7c:27:9e:9e:7c:
34:ff:8d:b1:ef:32:c8:97:73:08:7e:8d:8f:30:18:00:36:e1:
b6:8b:5a:df:55:2a:84:56:75:5d:ce:3a:a7:9b:eb:93:04:71:
ad:e4:e9:e5:3e:b4:64:d2:20:48:a7:57:73:fe:5b:4a:46:b2:
7f:cb:65:d8:b1:c0:0d:51:56:c4:dd:f1:2d:e1:ef:ce:09:d3:
a4:03:89:cb:71:7a:bf:99:9f:29:39:de:52:b9:ec:76:0e:f4:
60:25:67:bf:06:ef:97:81:a6:ea:ec:a9:d4:c0:a7:d9:5e:ae:
30:55:9d:98:00:e1:e4:78:36:de:64:fa:9e:70:40:08:51:5a:
06:73:58:47:61:f1:51:5d:a7:3f:94:8d:83:02:ce:b4:43:8c:
24:a5:af:15:44:b7:62:cf:6e:ad:51:01:cc:39:a4:43:36:97:
a5:86:dc:d4:44:78:25:43:b7:e3:8c:c6:f9:07:e0:8b:f8:12:
58:81:74:08:a5:43:c5:39:0c:99:c5:ce:0c:78:ce:6a:47:a3:
33:46:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:17 2026 by rpki-client