Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: CdAZI591koeFBxLRlH7PvAGg3keCexgc5bY2k+i3OrQ=
Subject key identifier: 29:CA:34:E3:F3:BD:43:CD:2F:D6:94:91:12:C9:31:4D:9F:B8:F7:8B
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019D992B3ADCE517879D0603226F165DC36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0EBF
Signing time: Fri 17 Apr 2026 02:00:40 +0000
Manifest this update: Fri 17 Apr 2026 02:00:40 +0000
Manifest next update: Sat 18 Apr 2026 02:00:40 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: mzlngonG1V3acze1rvApjaywrdZW7zgI3TwAGxaTBFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3a:dc:e5:17:87:9d:06:03:22:6f:16:5d:c3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Apr 17 02:00:40 2026 GMT
Not After : Apr 18 02:00:40 2026 GMT
Subject: CN=29ca34e3f3bd43cd2fd6949112c9314d9fb8f78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:e2:eb:fb:48:fc:85:d4:fd:0c:f1:38:d4:
75:74:a1:75:27:da:82:5c:a4:7d:e4:59:cd:bc:04:
f4:e1:4b:6e:b0:e3:a5:62:b2:71:78:b1:2c:9b:b0:
e6:82:36:67:38:27:53:d8:ef:10:8a:a8:7a:09:d7:
5f:e7:93:61:1b:1a:68:05:7d:9d:d6:8a:34:ca:79:
f5:66:a2:e5:b6:f6:bf:89:24:46:1a:8c:4d:87:31:
85:dd:3b:a6:3d:35:d8:11:06:e1:e9:ed:ec:22:eb:
94:7b:90:a5:ef:ab:ec:f1:32:82:fc:b0:24:5d:da:
6d:9e:09:21:0d:50:43:5a:2c:4f:2f:ce:de:3e:37:
e2:2d:27:98:3f:52:b9:33:4e:11:fe:3e:5f:5c:da:
78:67:5a:43:ca:16:61:bd:fd:1f:57:2c:a3:7d:03:
f7:36:c0:c6:f4:e1:bf:52:87:ad:cd:32:27:46:0e:
80:1f:d8:65:73:b5:67:2a:60:9e:38:00:dc:09:ce:
c2:16:8d:eb:54:a6:e8:14:87:3a:5d:33:6a:cd:cd:
00:4d:32:48:20:cf:15:78:95:d0:c1:83:46:75:2b:
ca:a8:4b:60:af:fd:8d:b5:9b:7d:b3:a4:b2:f4:33:
44:62:72:ca:27:7c:bd:91:c1:70:78:0e:c9:f2:22:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:34:E3:F3:BD:43:CD:2F:D6:94:91:12:C9:31:4D:9F:B8:F7:8B
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:b3:f2:ce:46:79:bb:45:86:12:bc:15:ae:d3:8d:a8:81:
bf:c8:2d:37:59:24:6c:f0:81:11:91:d0:eb:9d:42:39:55:89:
c7:db:a6:df:6f:40:da:be:0b:31:a4:9c:de:59:4a:0f:b0:73:
29:a4:0e:8c:9b:39:66:25:3b:50:46:52:d6:3e:8e:1f:2e:28:
f8:05:b4:19:c5:c1:ef:0f:26:b4:3c:f6:8f:19:4e:45:aa:db:
b1:09:e7:bf:6a:89:53:ad:43:87:40:45:5b:a2:73:c6:9c:3d:
16:f2:3c:5a:9c:4d:f1:51:26:a2:ab:82:06:f9:a5:58:ee:8d:
5e:e7:5f:45:7c:35:fa:94:23:30:1d:6b:4b:a7:a3:fc:68:5d:
09:31:a0:ee:0c:7a:96:78:30:96:e9:25:de:d5:47:38:73:dc:
93:94:58:8b:4e:c4:cc:8d:84:25:69:a2:4e:05:c6:10:80:c4:
57:75:93:b2:da:b8:13:6b:2d:23:5b:80:c8:cb:e3:2b:8d:5c:
55:54:1f:03:85:b8:5a:36:61:83:9c:71:40:3c:b9:b7:ba:0b:
96:34:65:80:19:6b:a4:90:ca:29:4b:c1:12:9c:36:cd:61:2f:
61:7b:25:ec:7b:00:6d:60:da:98:65:d4:94:a6:00:01:b0:83:
10:55:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:33 2026 by rpki-client