Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: snHjdC6+Vp0KSHI6KbQ/EKzUtnn5s2LrB4OrHEqrrCg=
Subject key identifier: 33:C7:90:03:B7:09:0E:E9:23:48:9D:CA:BD:2F:1E:03:00:A4:7D:A8
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019D9D75A86F97ED1906E979442880602338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 05A7
Signing time: Fri 17 Apr 2026 22:00:26 +0000
Manifest this update: Fri 17 Apr 2026 22:00:26 +0000
Manifest next update: Sat 18 Apr 2026 22:00:26 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: lKJ9OB8JCucWVSDLMPZNOAN3nRolcq3K5RCQe72byGM=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:a8:6f:97:ed:19:06:e9:79:44:28:80:60:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Apr 17 22:00:26 2026 GMT
Not After : Apr 18 22:00:26 2026 GMT
Subject: CN=33c79003b7090ee923489dcabd2f1e0300a47da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:76:e7:7f:8d:16:8e:0a:1d:68:90:56:bd:
be:3c:c3:07:bd:15:38:b1:80:95:f2:27:4b:08:df:
8e:0f:c1:b2:04:30:82:b9:27:e7:13:29:84:6b:04:
2f:fd:78:92:cb:dd:cf:16:bd:de:f6:bf:dc:b3:30:
33:d6:d2:bc:74:04:73:eb:3c:e3:72:ce:cd:71:dd:
11:36:9f:62:80:8c:c0:f1:6c:2d:e5:fa:92:2f:a2:
4f:c4:73:cc:43:d6:6d:33:23:68:d6:c7:95:3a:f2:
8d:67:38:ad:1e:15:38:48:64:09:ba:69:ce:ef:65:
2d:7a:18:93:47:a8:1b:48:6c:43:98:d9:b6:5e:85:
b1:2d:71:53:b2:cf:9d:3e:34:c5:dc:fa:44:9a:5f:
b4:d4:6e:b2:5e:2e:d5:1a:73:aa:b0:26:45:1d:b0:
db:91:3e:55:96:b2:b9:3c:a8:65:b4:c6:ca:4b:c0:
4b:79:e5:21:d1:7b:ba:e9:7c:7b:87:ae:74:92:0d:
fc:6f:16:fe:a3:bc:1c:c1:3d:bb:de:1f:2f:74:98:
ac:ff:66:66:a5:2c:93:48:ee:80:16:2f:1f:07:68:
ec:50:1b:eb:01:d8:00:df:e0:41:51:27:27:d9:32:
55:e3:b8:8e:dc:e5:77:77:e7:c3:32:72:ae:d9:6f:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:90:03:B7:09:0E:E9:23:48:9D:CA:BD:2F:1E:03:00:A4:7D:A8
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:8b:83:a0:59:cb:ee:9a:c1:48:a0:9b:9b:aa:8c:46:00:
45:1c:6a:b6:14:25:a7:18:7d:62:5e:dc:5d:b3:8f:c9:51:52:
32:16:15:0c:c8:47:bf:ed:d6:53:6c:78:c6:12:03:29:b2:c2:
b1:56:57:28:75:89:ad:23:a8:7e:42:a9:da:a6:8d:3c:97:a0:
b0:23:33:60:1b:99:05:30:df:6b:0c:d7:d5:30:1a:cb:c3:19:
63:ec:fb:5e:42:56:d0:d3:fe:ac:ae:8b:76:fa:6c:ea:47:bf:
ad:31:db:45:b6:3e:51:e4:07:00:0d:b5:74:70:1e:d7:88:5e:
5a:89:17:b5:17:d1:e6:35:6b:94:72:e9:b8:79:a4:98:c0:80:
cc:dc:05:32:4d:e5:cb:42:6c:71:54:c4:76:b0:7a:3c:1d:e0:
2a:cc:8f:da:ba:fe:07:2b:9c:d6:33:73:8d:f5:c1:c9:ba:4a:
52:7c:38:35:ec:28:4b:79:c5:04:47:2e:29:29:d3:9c:20:d4:
3b:97:7a:b3:6f:29:1b:54:eb:da:4f:a4:b7:47:ad:72:d4:13:
ae:cd:aa:23:54:ea:e7:19:65:94:38:74:95:32:c8:57:0a:08:
12:08:e1:2b:fc:b1:a9:e6:7b:53:b7:8a:ae:17:f0:7e:eb:8d:
8f:04:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:50 2026 by rpki-client