Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: lPF0FdKKduUXFZZXWmP0T08KnWEVCY3xAoOXylG7BIM=
Subject key identifier: BE:85:53:09:8F:34:19:64:5F:1E:13:FE:A1:08:AE:EA:60:DF:3F:31
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 019D9850B13F43DAA863DBDC3FDAB91C28D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:58 +0000
Manifest this update: Thu 16 Apr 2026 22:01:58 +0000
Manifest next update: Fri 17 Apr 2026 22:01:58 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: tShbXVLTzdQW9iXg4nGFRvnHAXM7prYisHlw56OESc8=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b1:3f:43:da:a8:63:db:dc:3f:da:b9:1c:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Apr 16 22:01:58 2026 GMT
Not After : Apr 17 22:01:58 2026 GMT
Subject: CN=be8553098f3419645f1e13fea108aeea60df3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:e6:91:e1:ca:88:f2:44:bc:82:80:70:89:
0c:7c:3a:5a:20:2c:d1:17:d2:bf:0a:c4:c9:86:9b:
c9:02:da:10:e1:4f:7d:0a:9d:d7:ab:25:b1:90:1e:
b0:fd:4c:01:a0:f9:6d:93:bf:09:b7:2d:c2:e0:3d:
f3:c0:4c:99:a7:57:4c:83:49:31:f4:be:c5:93:42:
84:32:8a:15:d7:e1:1c:4b:8b:4c:2b:2a:f2:0d:a5:
f1:74:e6:e7:cc:79:4d:c5:18:f6:32:ef:f3:77:fa:
0f:5e:64:2e:c7:c5:59:db:a8:c2:f9:00:09:d1:8e:
4a:fb:fc:dd:44:03:cd:97:6a:03:82:ae:a6:ad:d8:
70:72:51:a8:82:6e:b0:6a:f2:83:89:cb:bd:7b:c2:
bf:93:84:16:20:12:bd:fd:71:d8:0d:d4:18:ca:7b:
25:57:20:70:45:25:1d:91:3e:d4:ab:f5:e5:81:4d:
65:cb:77:88:07:9b:9e:41:34:3a:75:ba:2a:68:eb:
93:9f:4a:2d:d1:20:80:b6:6b:e4:87:57:4e:01:fe:
3c:92:c6:95:69:b7:ce:75:bc:9c:4d:f5:01:fb:7d:
48:cf:f1:85:37:7a:d3:22:0d:e5:a2:65:51:a4:7c:
55:4f:83:c4:ef:bd:7c:69:cf:55:2a:a8:78:28:33:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:53:09:8F:34:19:64:5F:1E:13:FE:A1:08:AE:EA:60:DF:3F:31
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:98:01:85:e2:4d:2d:df:87:51:5f:41:d1:87:0a:c5:e7:29:
a8:eb:02:c8:b4:b7:98:d9:92:30:5b:06:87:50:e6:8d:7c:b5:
d2:44:2a:5e:bf:de:5c:31:f7:cf:d5:8f:b7:26:bc:6e:c6:04:
81:70:cf:e2:51:28:65:99:21:d3:f5:7c:e2:38:90:c6:5e:f3:
ea:37:43:65:f7:ac:6a:06:96:3c:e6:89:e9:8a:55:c4:4c:e1:
35:fc:cd:07:82:c5:69:53:a0:c7:76:80:dc:fa:9f:d8:72:3e:
0c:a4:87:9d:1b:06:7b:0c:70:f0:bb:96:fa:53:38:68:be:e0:
6d:db:60:a2:f3:e5:7e:15:f4:9b:ec:ab:0a:29:d9:74:a5:e9:
6e:34:1d:01:e7:dc:5a:cd:a5:7b:7e:a9:6f:2e:86:4e:ca:28:
89:ed:62:54:af:c1:0c:9a:ee:e7:f1:4e:79:71:fe:0d:29:d8:
43:f2:d7:90:a1:b9:ac:e4:82:a2:6a:f9:de:60:f5:e2:d9:37:
d3:64:f0:21:70:54:96:50:3b:6e:bf:2c:b3:1c:f2:79:92:de:
cb:40:36:c8:f2:1f:29:2d:8b:9d:56:c7:df:60:0b:e7:4b:a2:
74:3f:10:b0:94:3e:73:72:e2:0b:3e:71:be:18:23:25:e0:4d:
9c:69:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:15 2026 by rpki-client