Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: LNK+w3jhMCeKNDb4D2Ce3YzErEGKy0XIA33+EwpndgI=
Subject key identifier: 52:61:96:0D:2E:47:75:EE:B6:47:1B:E4:A7:EB:4B:6D:71:48:64:73
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019D99D0029BE9721A3044B962D652B9FF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 17A0
Signing time: Fri 17 Apr 2026 05:00:39 +0000
Manifest this update: Fri 17 Apr 2026 05:00:39 +0000
Manifest next update: Sat 18 Apr 2026 05:00:39 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: ElQ9piJULkNeV5cA+Lqi6VGpgPukMZZX8w/duEHrl1Q=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:02:9b:e9:72:1a:30:44:b9:62:d6:52:b9:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Apr 17 05:00:39 2026 GMT
Not After : Apr 18 05:00:39 2026 GMT
Subject: CN=5261960d2e4775eeb6471be4a7eb4b6d71486473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:0a:38:96:84:e1:e8:e4:a8:2d:49:00:4a:
de:2a:f3:15:b5:dd:47:2f:6b:c1:97:4e:99:ee:f0:
9a:96:40:6c:9c:26:9c:bd:ff:ab:22:ad:41:84:4f:
1b:93:7e:de:a9:0f:32:73:45:87:e6:8e:d9:7b:2b:
2b:67:be:a7:02:56:72:85:31:9b:02:a2:67:31:94:
a8:2e:7b:ed:b8:79:e0:d5:41:a3:1f:79:b0:1b:ac:
8b:7f:51:98:7b:80:14:2a:5d:e0:84:68:ad:cc:5c:
19:ab:a9:b0:b9:06:14:e3:87:a0:05:6e:7c:b7:3a:
e8:8e:0f:f6:3b:78:e2:45:93:ea:9f:44:91:b0:62:
28:9d:ca:df:af:f7:41:82:44:39:2b:2e:b6:90:8d:
8c:b8:11:92:08:2d:ff:33:2f:81:7e:ff:5a:35:4c:
3a:e3:77:dd:b3:cb:08:cb:8a:94:8f:98:03:3f:49:
ea:13:77:7a:bd:d1:aa:9f:95:ff:99:6b:a0:75:78:
b7:11:81:c1:f3:68:2e:3c:37:89:5a:d0:50:ec:9f:
18:ea:84:76:e8:8b:87:a6:bb:5a:4f:46:4e:86:dd:
b4:04:67:df:90:df:02:9f:e0:2c:dc:9d:01:46:9c:
cf:77:9b:31:ad:9a:10:f5:6b:95:59:ad:27:4f:43:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:96:0D:2E:47:75:EE:B6:47:1B:E4:A7:EB:4B:6D:71:48:64:73
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:38:d3:0a:f4:c3:be:37:65:62:41:84:0a:e0:c9:8d:58:
84:e5:79:e2:74:d2:50:17:00:c1:7f:ce:ca:ff:67:e3:fd:33:
ad:64:90:9e:4f:57:f0:07:66:93:72:b3:2b:27:ec:57:57:7b:
ee:4b:6d:8e:0c:35:48:38:fc:34:c0:31:15:7b:3b:a8:3d:f3:
c4:df:be:0a:49:c3:c3:2f:28:37:dd:fe:cc:26:1f:7a:ff:4b:
31:72:2d:7d:d5:f2:d0:76:22:c7:e2:49:d1:42:6e:1c:4d:45:
c7:fb:d4:9f:98:93:d8:20:3b:62:c6:83:55:93:96:ba:d6:56:
27:ba:e1:a3:2c:b9:2b:72:72:08:52:57:d4:7c:2a:f0:28:49:
fe:19:16:65:aa:af:03:c6:d8:b0:61:34:6e:38:1c:d9:e7:a8:
82:38:90:50:d8:05:ac:f1:fe:10:ab:f5:9a:75:03:a2:fe:a2:
a2:6a:0b:d8:cd:aa:36:89:41:69:64:91:37:49:65:cb:7a:9e:
54:dd:42:e6:84:bf:2d:79:85:02:58:a2:35:a5:dd:0e:31:dd:
c8:e2:98:83:97:69:bd:3b:6f:a2:e5:d8:ff:2f:c4:d2:75:f1:
ec:ad:b8:e7:29:65:b9:38:17:ee:80:71:6f:37:76:5e:c2:3d:
2d:74:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:50 2026 by rpki-client