Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: +C8HvREOQyA+DnHLWpDKI1mxGY8xphycuWQIb9MKHCc=
Subject key identifier: 8C:EF:2C:90:19:AE:E4:21:77:40:B0:46:59:85:6B:D3:80:3F:38:C6
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019DA3E6C036A1753F0D84240A5FA4EB44C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0FBF
Signing time: Sun 19 Apr 2026 04:01:41 +0000
Manifest this update: Sun 19 Apr 2026 04:01:41 +0000
Manifest next update: Mon 20 Apr 2026 04:01:41 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: oHBh+xPWCS1K9gMP1w5vIfb/LS2outXCx5MI5Xe1TPk=)
2: hNYIQ5HHhINGm0B4xE-M57SIxF0.roa (hash: FqszJttjAhJJ6gXeV7wcVvhxNzpQaBx6Ggtmu08rd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:c0:36:a1:75:3f:0d:84:24:0a:5f:a4:eb:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Apr 19 04:01:41 2026 GMT
Not After : Apr 20 04:01:41 2026 GMT
Subject: CN=8cef2c9019aee4217740b04659856bd3803f38c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:fc:fa:87:b0:20:6a:bd:d9:e5:e6:5d:f5:
d0:e3:27:df:9d:bc:f9:87:30:4f:f8:4a:0a:3d:4b:
01:7f:0f:53:14:aa:24:9b:47:2c:48:aa:cf:6c:a8:
bb:01:ea:5f:b1:d0:28:14:aa:23:9d:91:c2:2c:7b:
eb:95:b6:6d:49:94:91:45:8f:37:fd:ff:88:fd:78:
ec:64:0e:37:a7:87:6f:4f:3f:78:71:d7:9f:92:09:
39:32:91:db:78:4f:f7:6e:82:04:6b:d5:1b:8b:1d:
5f:3f:f3:25:8f:c4:01:53:42:67:72:a9:38:bf:6a:
20:53:8b:c1:f3:e3:2a:9a:0b:d8:fe:84:5d:81:02:
91:22:31:a4:7b:a5:5f:df:55:63:ea:ac:48:00:1d:
35:2f:8d:32:ba:1f:86:55:26:04:58:49:46:b0:97:
22:e2:65:66:f6:44:d9:1e:42:29:b1:6c:85:90:0d:
2d:20:3b:75:cd:af:48:b8:ee:d0:6f:1f:cf:cf:5b:
4c:c4:2a:24:bf:6e:f0:ad:6b:21:be:5a:e3:e6:e0:
4e:c2:cb:3a:87:98:ce:19:08:c1:25:4e:4f:73:47:
9f:3a:9f:24:d8:10:e2:61:d7:d9:3a:00:f4:6a:5e:
cf:ae:9c:a7:68:66:da:c3:e1:3e:4e:99:78:a7:df:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:2C:90:19:AE:E4:21:77:40:B0:46:59:85:6B:D3:80:3F:38:C6
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e6:d5:4a:22:91:85:f4:2f:34:b1:66:db:05:af:dd:27:7a:
2e:e4:df:34:31:85:d4:89:63:85:d3:e2:0a:43:e0:72:7b:95:
8e:a2:fa:1e:12:04:02:f2:3b:19:c3:53:1f:6d:5f:b2:ab:35:
0a:75:db:25:fc:56:31:c9:1e:73:52:a4:8a:c6:d1:27:6d:f2:
ca:52:3d:98:94:4c:a6:dc:ef:9e:a5:2a:ba:f0:8e:29:c1:99:
f9:3b:dc:6e:f2:93:4c:4f:16:9b:ae:6b:37:b4:54:75:f3:73:
84:6a:a7:62:6f:3d:84:fc:83:e0:2e:c4:11:16:e1:c6:52:a9:
f3:3c:96:99:6e:55:a8:a4:2e:ab:78:ad:39:35:42:4e:87:18:
75:57:d9:63:f7:5d:15:38:0b:d9:13:46:44:77:0d:55:fa:69:
9d:4b:44:ad:9f:2b:c5:0b:2d:e3:ac:b3:e8:01:78:41:25:7e:
f7:ea:35:9b:cd:de:6a:5b:7c:f8:69:5e:f4:35:2d:1f:f6:c4:
02:a0:e8:c5:05:d9:c4:79:86:2b:ea:05:9f:e5:7b:b2:f9:d7:
47:85:a9:c2:eb:b1:4e:48:cd:29:5c:0c:3c:2e:cc:1e:0c:ad:
5d:1b:eb:03:9b:2f:0a:94:33:b6:93:ca:9a:b8:30:7a:62:c7:
71:a5:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:28 2026 by rpki-client