Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: RbnlMphWP0jDQgHk6kShcA6kefuIdVjwx9PpNT7Ot+c=
Subject key identifier: 94:47:16:06:68:0A:ED:92:75:0C:E7:D6:75:65:7C:7A:A8:3A:BA:D2
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019D98BE03F5693C77534DDB1737F26AD37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0F4E
Signing time: Fri 17 Apr 2026 00:01:22 +0000
Manifest this update: Fri 17 Apr 2026 00:01:22 +0000
Manifest next update: Sat 18 Apr 2026 00:01:22 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: qniiL74fT+Vj5pugd2EsYWBWIy52svd+GgAEk+96+8E=)
2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:03:f5:69:3c:77:53:4d:db:17:37:f2:6a:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Apr 17 00:01:22 2026 GMT
Not After : Apr 18 00:01:22 2026 GMT
Subject: CN=94471606680aed92750ce7d675657c7aa83abad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:d5:4b:cb:16:ee:87:c1:3b:07:f3:7a:cf:
44:e3:5a:ce:3d:54:94:6f:21:1b:42:4a:ec:7f:47:
78:3d:a8:34:8e:9a:d3:d2:2e:16:ba:79:e6:aa:78:
35:20:4e:6c:6b:0e:ed:56:1a:0f:d8:78:92:ec:9d:
c7:5f:78:bd:be:db:c5:65:ff:dc:80:01:34:1a:33:
06:28:05:cc:c1:ee:48:e0:fe:7a:ab:71:6b:84:d6:
e3:54:a2:cd:14:74:a8:6c:80:7f:d5:6f:80:d0:a0:
06:f9:bd:65:90:6b:c4:01:b1:79:3d:f7:1c:23:61:
a3:7d:4e:6f:35:de:23:86:fa:2c:06:2c:f8:c7:f8:
14:a3:3f:11:87:dc:5b:2b:ff:03:93:24:22:b0:e1:
51:2b:2c:cf:7c:aa:56:28:b4:81:6e:8d:6f:04:ad:
7d:18:66:b7:e1:52:5b:1c:63:01:9a:86:9f:c0:47:
ea:73:8b:81:a9:c8:74:2d:55:a8:4b:2f:ae:e7:e6:
27:ea:2b:41:26:9d:f0:01:83:81:26:bb:7d:bf:12:
4f:a0:90:ff:fc:6b:83:a7:de:1a:ad:ea:2f:cf:bb:
1e:c9:f4:55:4b:9f:8b:df:de:42:c0:6f:90:1f:0d:
7e:84:6f:25:6a:b1:dd:a5:31:ed:47:51:f9:c6:5c:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:16:06:68:0A:ED:92:75:0C:E7:D6:75:65:7C:7A:A8:3A:BA:D2
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:54:48:cc:1b:9c:4c:f0:a0:8e:56:0c:2f:e3:79:b5:ec:18:
0c:be:7e:e4:26:ef:2e:65:e7:79:3f:da:5b:6c:ab:44:7d:cd:
69:90:65:e4:0f:6a:0e:f5:76:f9:b2:0b:d8:f0:61:ce:90:07:
94:70:f3:0a:da:35:5c:76:cd:aa:64:4c:0c:8b:da:b3:e4:af:
c3:45:f2:c1:1b:ac:c6:82:e5:be:cf:f3:c1:a4:44:23:7a:1c:
93:50:0f:9a:b6:30:c6:93:62:1c:77:d2:b1:ac:26:a2:c0:e3:
c9:d0:b4:18:9c:1b:8f:2d:3f:51:e2:3a:04:f2:3d:41:5c:27:
50:21:c4:4d:9a:32:2c:7c:59:9b:ab:f8:bd:fd:0d:f8:7b:9b:
21:75:70:77:e9:4a:40:48:65:f0:26:26:f8:4d:97:9b:0a:db:
60:71:96:7f:7f:21:32:c9:61:ab:98:11:06:95:d4:3d:81:fa:
4c:3e:93:90:a0:2c:81:82:29:84:6d:cf:bb:00:48:08:04:a6:
90:c5:42:7c:d3:ac:fe:51:75:f5:2b:b3:f4:2b:69:55:4a:de:
ed:86:6a:e1:ca:0d:86:64:1b:d6:1c:7b:13:b1:57:16:08:a6:
ce:ff:72:e8:12:f5:53:6a:31:12:fc:8d:f5:5f:0e:24:02:c9:
41:7c:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:47 2026 by rpki-client