
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: pkdN+3BjPTOYptCJE8KV6eXZID/O2yQpUmk2TXJhuG8=
Subject key identifier: D1:EB:7C:49:88:3B:02:AC:1E:FC:37:E6:C9:3D:11:44:B8:CD:B8:4B
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019D9999A2713504FC1BDC04553A898276A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0C71
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: x4Kz1TvEVPgQnVGFWxS1COhaMz2J6B6sv9F70MX+BxM=)
2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a2:71:35:04:fc:1b:dc:04:55:3a:89:82:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=d1eb7c49883b02ac1efc37e6c93d1144b8cdb84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:ec:a5:fb:d3:88:0b:8c:ec:59:5c:23:84:
9b:a2:ba:c2:d8:63:78:b2:51:dd:60:1f:fa:58:5f:
00:08:88:50:f1:75:00:30:ad:b3:69:11:57:fd:ce:
ed:e4:c8:ba:a8:fc:20:76:00:48:1d:99:79:70:52:
77:f3:a0:aa:58:a8:ff:fd:8c:71:22:47:bc:96:c8:
82:6f:db:2f:91:86:ac:a5:60:5e:29:4f:18:b6:6c:
d9:53:e4:b9:62:a0:43:1f:e9:f6:ad:2e:c3:93:42:
48:8e:db:9b:3c:14:4d:74:8d:8e:df:7c:8d:bc:8a:
90:cc:cf:5b:66:72:30:69:19:79:0a:6a:ff:b5:35:
af:b6:3a:56:57:d5:c6:92:07:0a:a5:02:19:6c:04:
7d:28:09:e8:7c:37:80:1e:1f:1d:40:3b:1c:70:ad:
dc:f2:f0:37:0d:34:74:6c:84:16:4a:1c:37:7f:1b:
ac:bf:e6:c7:ed:e2:a9:71:21:bb:b2:41:98:df:f3:
4e:39:ea:54:10:8e:21:a5:de:48:9c:c7:ba:3a:ea:
ab:cb:c6:20:26:e8:64:a5:5b:69:4a:11:9b:be:12:
4a:85:2a:28:63:00:71:29:07:c6:15:f4:53:01:01:
24:19:f6:21:ec:e7:21:e8:c3:69:80:4c:2f:78:93:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EB:7C:49:88:3B:02:AC:1E:FC:37:E6:C9:3D:11:44:B8:CD:B8:4B
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:c1:ee:44:76:a5:f5:ad:37:5e:b3:dc:33:24:3d:45:24:
23:e4:e0:04:19:18:14:fc:19:24:2c:f1:fa:6a:e4:39:ed:1d:
4c:84:19:84:94:e9:c2:7a:fc:90:a4:da:13:f2:cf:0e:64:97:
11:cd:bc:da:b6:a5:38:02:57:b6:0c:f7:27:50:d3:57:4d:ad:
1f:13:30:3a:62:cc:ac:41:1b:15:d3:ed:5e:98:8d:27:0c:24:
a7:41:27:6a:15:4c:ce:6a:8c:93:4d:a6:c2:f2:44:44:57:a0:
e9:ad:58:6f:38:50:23:25:3e:81:da:4f:66:bd:99:c7:56:32:
4f:56:b3:f8:f6:52:a7:65:5c:e1:44:92:46:8d:ff:15:21:e6:
be:2d:eb:0a:c1:75:24:78:af:5d:d2:87:be:cc:53:da:69:74:
b2:2e:b4:86:26:77:df:d3:3f:2c:af:1c:d3:a2:76:a8:ac:26:
2a:06:41:c7:e9:f2:f0:1f:84:c0:8a:d2:fb:da:80:a3:1e:c8:
b4:71:fe:77:8b:78:fd:69:1a:3e:5d:ad:76:58:fe:9d:b2:ef:
26:bd:0f:89:ef:b5:af:07:8b:79:e8:9b:42:9c:4c:da:79:5d:
0f:41:14:be:45:ee:15:a6:18:b6:2c:3d:46:3f:26:4a:03:95:
bf:92:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:25 2026 by rpki-client