Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: vdlLDw4dhBVTgvxZ6AyHUSr+sc4fUgBvAbWqiUGwaso=
Subject key identifier: B4:2B:21:56:9E:68:41:5A:81:12:13:6B:62:A2:1E:FF:94:DC:92:32
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019DA30A9D780AE4E512C3B4B7B1628BA453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 15A4
Signing time: Sun 19 Apr 2026 00:01:14 +0000
Manifest this update: Sun 19 Apr 2026 00:01:14 +0000
Manifest next update: Mon 20 Apr 2026 00:01:14 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: zdIYm4qohZiOCpz8RtG/weBIRoazgonn55Vr+Sin+do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:9d:78:0a:e4:e5:12:c3:b4:b7:b1:62:8b:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Apr 19 00:01:14 2026 GMT
Not After : Apr 20 00:01:14 2026 GMT
Subject: CN=b42b21569e68415a8112136b62a21eff94dc9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:ab:ef:e8:7a:4a:29:d3:a7:10:ee:2a:54:
23:ab:bb:37:4c:a8:cd:4b:b7:9e:c8:96:a7:81:52:
3f:52:9c:1b:b8:56:f8:8b:ab:05:83:ba:2c:87:dc:
0c:b0:e6:b9:c2:45:f8:af:70:1f:3f:be:fd:74:8a:
0f:99:3c:58:ff:6a:0d:1f:dd:4b:5d:04:d2:99:5f:
a2:d0:95:14:89:dd:af:fb:9b:1f:e3:16:42:28:ff:
90:19:2b:28:cc:83:ea:62:26:b2:c7:80:f6:21:23:
a5:76:c1:8d:16:50:be:2a:90:2e:46:e0:55:ca:bc:
59:16:ff:3d:db:41:24:ff:d8:ce:7f:a4:48:ab:8b:
f4:fd:b3:50:b0:4d:d8:a0:23:f0:f8:67:b0:d0:51:
87:6e:f3:f1:7c:69:5a:53:90:53:5e:dc:50:95:62:
f2:78:04:eb:fa:64:a8:52:57:43:43:3b:4a:42:46:
36:2b:0c:e8:96:fc:90:03:3a:d6:26:6b:1e:b9:00:
78:35:fb:50:52:f7:55:1d:9d:1a:0a:23:9b:e4:41:
21:84:81:44:9b:f3:8f:51:f7:4c:2f:e2:92:2d:1c:
ec:63:37:22:86:9b:d5:e5:06:77:e0:4a:0f:7c:fa:
c3:cc:90:a0:a4:4b:1c:54:16:a5:71:58:27:8c:b9:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:21:56:9E:68:41:5A:81:12:13:6B:62:A2:1E:FF:94:DC:92:32
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:67:6a:e2:0a:30:6b:f2:83:b4:23:40:13:2d:a7:e7:1a:
84:bd:11:9d:db:93:04:2c:4d:34:5c:59:15:a1:69:bd:48:d5:
3d:45:f3:78:22:65:3d:70:30:0c:39:50:50:bd:65:05:64:67:
99:4f:07:79:7b:8c:9f:42:d9:0a:a4:eb:6c:12:66:a5:af:6f:
24:ad:e6:61:5a:0a:15:76:16:1f:e3:02:b3:d4:7f:9a:d8:b7:
c8:8b:b6:bb:89:9f:a7:f9:db:5b:40:69:95:0c:43:05:32:0e:
22:27:ef:f4:ae:a3:1c:bf:4c:32:48:4c:69:cc:66:14:ac:90:
dd:14:59:d3:cc:bf:c7:a2:91:33:83:e9:e2:c8:34:82:1d:a3:
97:4b:88:75:84:da:2a:f2:39:9c:29:8f:6c:aa:3f:0f:32:73:
c0:62:e8:c5:49:4d:85:1b:3f:ad:1f:38:24:67:6e:8e:18:e5:
c5:dd:9a:01:0e:10:44:a5:f6:0a:ca:d8:c5:a6:48:b3:0d:c8:
87:e2:1c:37:59:23:e1:3a:d5:43:f4:dd:1f:53:5f:0b:4d:e7:
0c:34:35:07:b7:32:db:05:9c:98:46:46:34:d5:c2:9b:73:6a:
92:38:e9:c0:af:8a:12:60:6b:5e:12:74:30:bf:58:05:ff:22:
55:66:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:07 2026 by rpki-client