Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: oJSxQXuSwV/8v7OkMiS0BCUWOc+uIWoaNg9h47FSGZQ=
Subject key identifier: 2C:AC:44:60:B4:E0:B7:C2:8E:75:FE:AD:0E:FD:6F:AC:DA:AD:2E:42
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 019D9B880398A1AE53DC03E4E03DD47566F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:15 +0000
Manifest this update: Fri 17 Apr 2026 13:01:15 +0000
Manifest next update: Sat 18 Apr 2026 13:01:15 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: Ul7UlH7YMI1oFkMpj6/ab+rfJDS4x11lXrbzC6+bGsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:03:98:a1:ae:53:dc:03:e4:e0:3d:d4:75:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Apr 17 13:01:15 2026 GMT
Not After : Apr 18 13:01:15 2026 GMT
Subject: CN=2cac4460b4e0b7c28e75fead0efd6facdaad2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:50:1c:c5:f3:ae:35:b0:88:6d:99:8b:a5:
3b:44:6a:19:61:f9:d8:94:46:fb:5b:50:64:76:73:
7b:73:4d:95:5f:f1:9f:bb:1c:ac:ac:4c:8c:35:47:
67:ee:55:b6:86:d6:dd:11:60:df:32:e8:e8:f3:b6:
9c:d5:fb:e8:f1:5a:f6:0e:b6:36:95:55:42:9e:cb:
c4:62:2a:49:ec:b0:3a:19:c2:cf:52:6c:ce:6e:56:
b8:1a:ae:7c:98:8b:55:88:c1:a6:d6:bf:ec:17:47:
f1:87:3f:6c:de:ff:4e:7e:6a:ea:0d:17:30:b4:1a:
fc:bd:1b:73:b4:1d:e9:b3:69:24:56:83:c3:b7:ae:
42:73:a8:60:f3:56:9a:3b:9f:53:f1:80:09:99:31:
cf:72:52:8b:46:ed:96:d9:ca:4f:25:c8:56:a3:54:
f0:e2:55:39:9c:d3:ca:b1:6b:cd:00:a9:3b:a4:b3:
74:11:dd:86:e2:45:42:52:1e:5c:e9:7a:87:43:c5:
59:ab:ac:25:68:7e:05:d8:76:29:33:2c:12:af:aa:
49:4a:4a:09:cf:bf:73:f8:01:ac:4a:ef:e4:1f:07:
04:d0:77:c2:0c:a5:5a:5b:41:4b:a6:70:7d:93:47:
5b:b1:0c:b0:95:96:38:7f:68:bd:87:92:73:ad:17:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:44:60:B4:E0:B7:C2:8E:75:FE:AD:0E:FD:6F:AC:DA:AD:2E:42
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:66:9e:fe:09:a5:50:61:95:b3:f5:13:5c:96:c3:78:b5:3e:
fc:41:d4:68:86:6a:9e:2f:39:33:12:00:45:38:d4:48:e2:c2:
08:c9:89:e6:53:72:64:91:ad:87:f5:94:68:1f:42:3d:da:b3:
df:54:43:b5:a8:4a:82:68:17:8f:32:3d:66:13:88:c7:fb:83:
9e:66:00:d0:9c:5c:7b:43:18:c4:52:27:0a:f9:2e:0e:07:c9:
ed:85:98:2f:2b:4b:c3:cd:0a:eb:da:03:fd:e8:83:d0:55:16:
c1:64:4c:86:a8:a1:b8:55:79:6a:31:d3:c5:f2:c4:e1:db:6e:
c3:22:1d:91:d2:ed:27:2d:50:c0:9e:2a:f8:1a:76:6b:da:85:
0c:ea:9b:8d:fb:bd:39:b5:cc:fe:96:00:90:c7:30:6c:b2:d6:
bf:29:f6:02:d7:43:6e:4d:5f:51:99:3a:85:b0:a1:ab:df:0d:
6c:02:6b:8f:b3:7b:92:0c:58:82:92:0a:1c:75:1b:7c:56:e2:
64:44:71:91:2e:5f:f0:dc:3a:73:47:87:b4:20:b7:f3:b8:72:
25:d9:c0:7b:bd:29:de:26:0c:f7:3d:41:5e:05:67:a2:34:43:
c5:83:49:b2:11:3a:bf:b3:8b:9a:45:78:4c:39:94:ea:ef:dc:
6b:6a:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:41 2026 by rpki-client