Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: HXBB3OWR2JYCO4HFfkqWoibLWp1BT+Z5RnLslfjZpm4=
Subject key identifier: FC:D6:78:83:40:60:A4:9D:C1:FE:F8:56:61:0E:6F:D0:EE:70:40:68
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 019D9B50ADBC68A20C7EB72EA6095A0F4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:00:48 +0000
Manifest this update: Fri 17 Apr 2026 12:00:48 +0000
Manifest next update: Sat 18 Apr 2026 12:00:48 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: Ui0IOrlcMgap5JetV79SKgxSyZaLwni3cKAIW2iYmvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:ad:bc:68:a2:0c:7e:b7:2e:a6:09:5a:0f:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Apr 17 12:00:48 2026 GMT
Not After : Apr 18 12:00:48 2026 GMT
Subject: CN=fcd678834060a49dc1fef856610e6fd0ee704068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:28:92:65:dc:eb:61:78:d6:ba:6e:01:51:
2d:87:eb:11:b7:cd:b1:c7:1e:61:ac:09:16:07:3c:
22:55:3f:e8:ad:3a:96:51:ed:0a:81:9a:36:d0:b0:
be:e8:26:96:e7:12:84:26:50:9b:fd:a5:9e:0a:11:
d9:4d:d5:f5:64:10:eb:53:b7:db:bf:21:2b:69:ec:
bf:7c:16:be:13:85:f8:92:bb:fd:f3:3c:63:35:02:
0b:80:50:db:c7:52:6a:50:2e:14:bc:f3:d3:8c:01:
92:64:02:3a:fc:9b:67:22:f8:ad:59:e3:ad:ae:37:
c2:6e:c5:4a:f1:21:1d:9b:26:d6:b4:46:e7:ae:34:
44:56:aa:dc:83:4d:0a:23:53:31:6f:2a:5c:4d:ba:
98:84:21:bd:d3:54:87:de:c4:78:3e:a7:48:78:ee:
6d:c4:aa:65:cc:1b:84:46:cf:b3:c8:af:4e:3b:fd:
30:c9:d1:9f:91:b4:76:9f:9a:f6:74:3d:d6:fc:d3:
7a:05:8a:14:ff:f4:04:6e:53:eb:1c:69:7f:17:dc:
1e:11:06:b1:b7:51:74:bf:a9:40:81:af:18:78:58:
8d:b3:15:eb:40:0c:37:4e:1c:9b:05:7b:6d:c8:cf:
2a:39:40:6f:69:ec:5f:0d:ed:1c:87:6b:d7:fb:ce:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:78:83:40:60:A4:9D:C1:FE:F8:56:61:0E:6F:D0:EE:70:40:68
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:33:9b:43:9b:34:d7:3e:16:e7:08:64:84:99:c4:b8:9f:53:
f6:bf:d0:94:ff:b7:c3:36:29:68:d1:f5:8d:d1:91:1b:df:26:
de:f5:f5:0f:d7:9b:98:9f:37:20:f8:46:96:93:c5:bc:ad:0c:
d7:c3:cc:4f:14:65:49:78:85:f8:b9:51:9a:df:cc:4d:2b:fd:
80:d7:40:16:2b:a2:10:ea:d0:05:66:56:3a:95:98:3c:8a:44:
1d:08:fb:87:9d:6d:38:6f:b8:c5:db:87:11:25:81:0c:2a:ee:
33:ad:d8:cd:f9:35:6e:c9:42:76:48:23:c0:87:db:c9:22:68:
39:1c:da:7e:23:eb:b7:c7:52:2c:4c:c6:8c:c9:4a:a2:e9:22:
03:cc:a5:de:ab:15:89:be:ea:9b:bc:d8:d3:f8:ab:66:61:9b:
44:87:62:96:4c:84:c5:2d:26:2a:38:dc:2a:3e:64:ad:85:e5:
33:2e:1c:15:b2:61:83:db:9d:9b:71:1a:a4:96:d6:13:86:ca:
ea:35:d3:f0:43:6f:7e:81:4d:56:ce:55:f3:8e:61:39:10:c9:
2f:3d:a9:24:15:e7:b0:1c:d6:d8:38:89:82:72:d1:77:24:68:
13:14:fd:a9:62:e4:9e:db:b4:2b:b2:60:b6:1b:39:fd:52:e8:
d6:42:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:52 2026 by rpki-client