Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: eaA7L1zOeUtm9vCSPNMj9IpiW1upvZI/5JFFnUeTD2I=
Subject key identifier: 1E:8F:A8:FA:27:A8:70:93:F1:C4:48:DE:61:E8:72:67:2E:78:1B:C7
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019D9BBE31F9647CD73EAA46A8BC7D333E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 03E4
Signing time: Fri 17 Apr 2026 14:00:26 +0000
Manifest this update: Fri 17 Apr 2026 14:00:26 +0000
Manifest next update: Sat 18 Apr 2026 14:00:26 +0000
Files and hashes: 1: JXguqTWTZJXOx7wR4QzL1WTD3w0.roa (hash: by9aF7KEg8z9kfigzE6BcO3FIwfxJ5MTT0jDESZsK+s=)
2: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: xWSBFIqrH/qA1U0qzyNsmUfKR+j7FX/z9ritYiwbCMM=)
3: ppk17F6OyNc0EwSbu1kw3GGU0jI.roa (hash: XKo5gTm78DhZYG3mOTajWDGyeUuNj7w2rAJKRuCr/xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:31:f9:64:7c:d7:3e:aa:46:a8:bc:7d:33:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Apr 17 14:00:26 2026 GMT
Not After : Apr 18 14:00:26 2026 GMT
Subject: CN=1e8fa8fa27a87093f1c448de61e872672e781bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:63:a1:5f:9e:c3:5e:9c:60:14:c3:40:43:
39:1b:1d:17:09:ff:d6:2c:15:b6:7c:09:96:1e:e6:
b9:d9:6f:f0:10:2b:2a:20:02:ee:0a:ac:f3:3a:ef:
c2:76:62:1b:d2:79:74:ee:56:19:44:9a:9e:4c:0c:
7c:50:49:76:50:29:5b:2a:dd:cb:5f:a3:8b:bb:96:
70:2f:75:d6:75:6b:fa:95:17:e2:97:43:30:7e:d2:
0a:32:66:f7:81:b9:0e:ad:47:f9:00:2a:de:42:f7:
f1:3d:b2:8f:a8:5e:94:36:81:90:51:8d:53:43:13:
42:0d:ac:8b:e6:a2:9f:a7:cc:c1:0a:bb:2c:86:ff:
9c:ea:de:1b:46:c2:23:bf:a3:e0:36:16:3b:6d:67:
53:6b:7d:a8:87:90:78:76:47:2c:b2:fd:44:eb:10:
75:eb:0a:ca:91:d7:32:d7:5d:8b:f8:7f:80:e0:1a:
78:0a:48:9f:8f:5d:08:63:9d:61:05:83:c1:be:81:
92:81:5c:16:e5:fd:4f:2d:dd:24:11:63:30:76:d7:
40:36:d9:ec:16:c9:4f:5b:95:99:c9:87:e0:80:3d:
28:fc:0d:ec:cf:42:a5:a6:8f:69:7e:77:6d:69:8b:
d7:46:9c:26:2c:4a:84:78:dc:c9:e6:33:e0:1d:d3:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:A8:FA:27:A8:70:93:F1:C4:48:DE:61:E8:72:67:2E:78:1B:C7
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:3f:fc:3d:0b:71:16:d8:a0:20:f6:b0:c4:6a:ef:93:f5:
31:30:69:d7:1b:03:0f:e9:1c:99:36:63:62:83:45:2e:a5:63:
d2:7e:4c:4f:85:09:90:59:57:bb:49:77:26:f0:17:c4:2a:3d:
b7:01:65:4f:d0:b0:68:7c:fd:56:64:9f:94:db:2a:53:6d:4a:
42:ba:b5:b4:2f:a5:f8:45:17:e7:83:3e:dc:30:5c:54:c9:e3:
34:d0:8d:b8:dc:4b:59:18:7d:64:ef:de:00:2b:65:f8:1d:00:
e2:9c:e3:68:dc:64:05:8f:63:e4:36:d2:0f:06:3f:ac:33:28:
f9:8c:e1:3c:70:0d:9b:cb:38:fe:87:29:9b:78:c8:1c:21:21:
6d:61:84:7b:ed:15:3a:00:1e:9e:74:e7:35:e2:3a:0c:4e:7f:
f3:b4:32:e9:98:b0:b7:ce:81:f2:90:4e:5e:f1:62:ae:91:76:
d3:58:6e:e6:d1:12:81:3c:ea:0a:57:d0:e7:ee:ef:75:97:c9:
84:71:4c:b4:3c:d8:50:e2:4b:7c:34:cb:89:7d:d2:8d:c1:79:
fe:b5:b2:6b:2e:7e:4c:7f:d1:5c:19:9f:c5:5c:47:31:95:45:
97:d5:46:b3:35:9a:3c:c5:8c:4b:49:7e:15:d1:9c:f7:88:6a:
5e:cc:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:22:52 2026 by rpki-client