Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: ExqGP30x3INCFWdZ/TzyikNC9jtm46YvL9/SPiCK+3o=
Subject key identifier: 3E:A6:8B:50:D0:08:0B:45:63:55:8A:82:7B:1D:9F:90:C8:17:94:94
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019D9C2D480FAEE380C546F0611F6CA3EA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 05A7
Signing time: Fri 17 Apr 2026 16:01:46 +0000
Manifest this update: Fri 17 Apr 2026 16:01:46 +0000
Manifest next update: Sat 18 Apr 2026 16:01:46 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: zo03VHUxkP8tJqItRiAOOA32kuf7YhayrZ1kuvqPee8=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:48:0f:ae:e3:80:c5:46:f0:61:1f:6c:a3:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Apr 17 16:01:46 2026 GMT
Not After : Apr 18 16:01:46 2026 GMT
Subject: CN=3ea68b50d0080b4563558a827b1d9f90c8179494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:13:da:10:25:1d:64:ec:eb:57:4c:1e:76:
92:64:81:9e:89:51:39:ac:e3:6d:06:2b:6a:e2:8f:
d2:08:af:77:41:6c:77:58:17:e8:aa:f8:d0:53:09:
6d:23:0e:54:23:7c:b2:56:f0:6c:d0:26:6c:37:6f:
3f:79:95:4f:24:09:bf:3e:72:ae:f3:d8:65:c5:a1:
4e:d4:9c:53:83:19:d4:76:85:60:eb:71:f2:c9:db:
ae:7e:cb:3d:b9:a0:1d:93:3b:ce:14:4b:98:b3:7e:
d4:8d:4b:6f:e5:0e:30:ce:c1:aa:c0:bb:f1:3e:52:
91:1c:26:b5:6e:4c:69:3f:1b:50:e8:d1:00:cb:df:
b1:de:7c:b4:16:8f:d8:36:1c:c3:8a:4f:8f:5d:19:
3c:6d:5d:85:39:95:4e:a5:53:eb:2f:17:80:bb:45:
1b:62:fc:0f:74:43:71:49:e2:12:38:0a:01:b6:96:
de:1d:51:7a:c1:d5:04:d5:1b:cf:24:19:ef:b1:f2:
9e:c7:e4:fd:59:5f:d2:b3:bd:65:ad:0c:2c:30:29:
5b:a2:c2:a5:95:57:af:1c:12:93:fb:76:4b:a5:01:
5e:33:0f:27:dc:18:4d:70:90:d4:76:6b:1e:2c:5e:
99:4d:c0:e5:a0:a7:17:c2:70:db:2b:41:a4:c9:9c:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:8B:50:D0:08:0B:45:63:55:8A:82:7B:1D:9F:90:C8:17:94:94
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:1f:54:4d:9e:24:cb:0f:3e:6e:c5:66:df:d9:dc:77:e1:
03:18:52:76:55:b4:17:26:39:ce:f2:6e:72:52:df:e5:9a:62:
ea:69:7e:9f:5d:f5:c2:d1:67:18:58:02:ed:4a:84:3c:ae:6b:
55:b0:ad:a8:60:1a:08:a3:23:63:ca:c3:76:4f:b9:0f:60:05:
1d:b6:f4:27:a5:6b:30:99:7f:45:94:1e:3a:1f:ca:2c:c3:24:
bd:63:1d:79:8b:8f:8a:5b:10:a9:21:9d:86:97:d6:f6:dd:fa:
00:88:5a:98:e9:92:64:35:24:48:02:e6:91:e3:b2:f3:e2:23:
ba:93:5e:df:0e:f0:6b:77:5c:17:a9:ad:2c:ed:0f:5f:fd:75:
8e:0a:66:ed:38:fd:d8:c5:a7:b0:ca:d7:1b:4a:58:dd:57:3e:
4e:e3:7b:b4:5c:8d:eb:7a:b5:04:0a:d9:b6:da:89:0e:4d:65:
ac:2d:f3:c6:d4:7c:54:97:c9:d4:bf:a1:2c:f1:ae:f7:20:43:
ac:18:b2:29:15:87:4a:72:36:ff:17:5f:77:94:27:b1:61:4b:
20:65:ba:32:5e:f8:d9:2d:d6:dc:7c:c3:cf:db:7f:5d:97:af:
90:06:13:d6:ec:60:75:01:0e:d0:dc:f0:e6:cb:b7:0d:5e:3a:
9a:da:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:53 2026 by rpki-client