Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: 7q9gFzRgJduvYSxbJ9Fjc0N8fbnmkdZh4IqTiZWdWM8=
Subject key identifier: 8B:D6:FE:F4:43:E1:BB:F7:F4:66:06:C0:9C:AE:5E:34:38:5B:D1:2F
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019D9962A7FB6B6F22C130C948C5502CEFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: L99iZyKH6hgsXBMANA3rLtPJbki6S6N0/IHeXZ750wE=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a7:fb:6b:6f:22:c1:30:c9:48:c5:50:2c:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=8bd6fef443e1bbf7f46606c09cae5e34385bd12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:f3:f6:5b:72:92:f7:72:be:16:74:90:3f:
41:69:40:de:06:4d:2a:8b:02:b7:f2:94:e8:93:03:
39:50:8f:82:af:66:a8:a4:e8:ca:71:3f:94:1e:65:
1d:33:37:95:0e:55:d1:69:25:96:a5:62:18:d6:6f:
b5:ea:2a:3e:84:8b:b3:3c:58:04:ec:63:05:e3:c0:
50:7f:b7:8d:84:ac:2a:0d:a1:1c:83:12:e9:1c:38:
c2:b8:04:cf:b5:9b:9c:76:e2:74:20:23:7e:ea:84:
2e:81:8f:6f:5f:af:be:f9:88:ed:5d:24:06:02:5f:
70:be:bd:2e:79:9f:1b:f9:dd:12:13:28:a1:08:e1:
90:c0:1a:26:71:4c:db:27:68:c7:2d:58:ba:56:1c:
18:3b:ee:04:f6:da:43:1e:bb:fe:9e:d5:14:71:3b:
fc:fd:72:78:bc:72:67:c5:bf:aa:4a:f2:16:51:38:
84:84:44:ab:4e:1e:97:55:50:98:c0:98:4d:dc:0c:
98:1f:29:4a:f6:58:8a:ef:98:1b:86:7d:38:a6:d8:
29:22:56:23:fb:d2:0b:fa:0d:39:41:b0:01:32:8c:
f8:a6:f0:85:e8:2a:ef:87:65:ce:1b:c9:8f:b6:5f:
25:0d:82:a5:6d:13:5d:cb:84:d6:83:c0:32:dc:8c:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:FE:F4:43:E1:BB:F7:F4:66:06:C0:9C:AE:5E:34:38:5B:D1:2F
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4d:62:dd:ce:88:fc:ed:14:29:a1:d7:9e:72:bd:c3:99:38:
7c:44:66:23:bc:be:62:d5:11:f6:5e:b9:cb:ff:1a:51:ba:7f:
20:89:08:df:36:72:d7:66:28:66:70:84:d3:19:99:3b:20:20:
c6:ed:25:a8:63:a7:c9:bb:75:0c:84:84:82:6b:74:84:b5:a5:
70:66:ce:42:e0:7e:7f:da:b4:5f:b0:51:68:23:e6:86:10:77:
61:eb:a5:7f:c4:b2:a6:7c:ae:9b:a5:84:08:e4:56:58:a7:6f:
e5:75:7b:9d:fa:c9:c0:d8:a2:76:1a:bf:aa:98:59:34:c1:34:
a0:ff:7d:cf:5e:8d:01:9e:1a:3a:2f:be:e9:5e:d3:10:6c:a1:
cf:0f:ca:7d:13:48:81:4f:72:71:86:a0:a9:5a:45:ba:d4:d9:
9b:b4:91:ca:dd:f7:ab:43:fe:66:1b:22:9b:80:cc:15:03:f2:
b7:e7:f2:50:19:ee:ee:72:05:dc:15:4b:38:25:2e:8f:2a:14:
9d:67:7f:2b:bc:99:c1:b0:dc:ae:70:3f:1c:a0:67:46:a2:c5:
99:65:98:15:8f:4e:5a:7a:be:08:ad:6d:ba:c8:0c:cc:e2:ef:
ec:03:57:a4:23:c4:57:2e:49:d5:c3:4e:4b:d9:70:33:d3:da:
a7:69:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:41 2026 by rpki-client