Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: 5ARMaUVyB5tvZR9y9aRTkcIQjpz1XynzAG7b+t+b0Os=
Subject key identifier: 67:82:78:D5:B9:DC:21:F2:B6:D7:31:BE:69:7E:4D:60:B3:FC:51:20
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019D9999830FB1C76243D73A972CBBB44FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0ACC
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: LiBCJnD3fE/S+BOpU/2WP79Wk8oARgemDMyyV4rJwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:83:0f:b1:c7:62:43:d7:3a:97:2c:bb:b4:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=678278d5b9dc21f2b6d731be697e4d60b3fc5120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:e8:a3:29:aa:02:a2:62:5c:ea:fb:fa:0f:
aa:a9:6b:93:cd:5a:39:b3:82:8e:1e:58:e6:9c:6c:
73:41:58:3d:b7:79:d1:32:92:67:c3:fc:47:df:d9:
10:76:98:b5:54:20:b9:1e:39:4a:21:c3:0b:a8:d7:
3f:69:4f:72:43:b7:8b:62:e3:8a:0d:12:e1:32:1c:
c9:68:7f:a2:69:32:29:50:2d:78:21:f6:01:ca:07:
4c:2a:4f:de:0c:40:22:dd:93:d9:5a:7e:19:d8:40:
7b:ac:60:57:58:b2:22:2b:f5:50:ae:b7:d7:c1:0d:
97:64:a1:ca:0c:da:b9:04:14:24:99:9f:d9:ac:ca:
60:2d:6f:d2:10:a1:ef:3e:06:00:16:35:c1:4b:42:
14:09:f8:5b:fb:8a:23:9c:a1:ea:26:50:c5:37:8c:
34:b4:35:ea:4f:dc:76:ef:80:3a:aa:58:26:95:10:
09:e0:fd:64:29:e8:18:b0:a6:f3:b1:85:fb:95:79:
68:70:84:ef:7d:dc:fa:ba:98:82:5f:46:88:be:c4:
19:63:ee:d6:1a:a6:fa:f7:d7:a1:3b:e8:34:f7:94:
ee:ac:3b:a4:95:12:b5:ea:0c:9f:a8:85:d8:21:5f:
67:c3:13:f2:51:7f:d6:00:6a:2a:97:36:64:a0:1a:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:78:D5:B9:DC:21:F2:B6:D7:31:BE:69:7E:4D:60:B3:FC:51:20
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:90:0f:9d:1f:e8:41:da:cc:3c:94:19:6f:9e:ee:42:ba:b0:
de:87:67:99:07:7c:67:d5:0f:95:a3:36:e7:80:ad:f8:a7:db:
e3:4e:08:54:17:f9:e3:0e:96:bd:a7:72:18:a2:b3:56:fc:c1:
e0:e0:58:15:46:2c:f5:46:36:09:a6:c3:19:28:4e:48:88:e7:
8e:80:30:dc:3c:39:5b:d8:11:9e:40:56:d5:a7:3d:e5:c8:cc:
73:82:f6:1e:a7:a3:d2:52:60:86:9a:65:04:f5:4f:81:b7:fc:
ee:e0:d0:1d:ab:18:46:7b:13:12:07:34:35:6b:3a:5c:48:b6:
0b:b0:53:7f:e4:55:bb:eb:99:10:87:76:88:28:0d:e7:69:0c:
c5:49:f5:b5:42:b6:6a:d1:5a:47:59:27:6e:47:54:e9:1c:9c:
37:2a:35:94:0e:91:a3:91:8d:51:14:ba:ad:4a:7e:11:2f:bc:
e8:2f:34:67:5f:d6:32:fe:06:b7:1e:0e:64:99:08:25:ea:ea:
a2:de:61:45:ea:48:ff:44:1c:8d:3c:a3:ad:5b:d2:d8:3b:5c:
d4:98:dc:20:45:a3:9a:39:72:ed:4f:72:63:3c:7f:55:39:6c:
cb:16:24:6f:f9:a9:e6:16:ea:30:0e:7a:01:1c:f9:ac:9d:85:
9b:06:29:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYMPscdiQ9c6lyy7tE+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjYwNDE3MDQwMTA3WhcNMjYwNDE4MDQwMTA3WjAzMTEwLwYDVQQD
Eyg2NzgyNzhkNWI5ZGMyMWYyYjZkNzMxYmU2OTdlNGQ2MGIzZmM1MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55PooymqAqJiXOr7+g+qqWuTzVo5
s4KOHljmnGxzQVg9t3nRMpJnw/xH39kQdpi1VCC5HjlKIcMLqNc/aU9yQ7eLYuOK
DRLhMhzJaH+iaTIpUC14IfYBygdMKk/eDEAi3ZPZWn4Z2EB7rGBXWLIiK/VQrrfX
wQ2XZKHKDNq5BBQkmZ/ZrMpgLW/SEKHvPgYAFjXBS0IUCfhb+4ojnKHqJlDFN4w0
tDXqT9x274A6qlgmlRAJ4P1kKegYsKbzsYX7lXlocITvfdz6upiCX0aIvsQZY+7W
Gqb699ehO+g095TurDuklRK16gyfqIXYIV9nwxPyUX/WAGoqlzZkoBq6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeCeNW53CHyttcxvml+TWCz/FEgMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5APnR/o
QdrMPJQZb57uQrqw3odnmQd8Z9UPlaM254Ct+Kfb404IVBf54w6WvadyGKKzVvzB
4OBYFUYs9UY2CabDGShOSIjnjoAw3Dw5W9gRnkBW1ac95cjMc4L2Hqej0lJghppl
BPVPgbf87uDQHasYRnsTEgc0NWs6XEi2C7BTf+RVu+uZEId2iCgN52kMxUn1tUK2
atFaR1knbkdU6RycNyo1lA6Ro5GNURS6rUp+ES+86C80Z1/WMv4Gtx4OZJkIJerq
ot5hRepI/0QcjTyjrVvS2Dtc1JjcIEWjmjly7U9yYzx/VTlsyxYkb/mp5hbqMA56
ARz5rJ2FmwYppQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:59 2026 by rpki-client