Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier: diTwP381HSB3S2Lxa34zRg9SQ0ltjZeiOlaZTqeOFW0=
Subject key identifier: BE:65:A3:9E:9C:1D:06:22:08:EE:A1:A9:A0:CC:FA:33:D8:82:16:0E
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019D9A070E54DBC6DE1675369903F4261B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number: 1417
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: fbbIHRuV6WcI/aQgGjySSZIdVntIL2mzFO3TWmoBudQ=)
2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0e:54:db:c6:de:16:75:36:99:03:f4:26:1b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=be65a39e9c1d062208eea1a9a0ccfa33d882160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:53:e3:2c:c4:81:53:d3:3c:0b:d2:c2:42:
90:2a:fd:9e:85:54:77:07:f5:9f:0f:46:71:ed:36:
40:6d:c4:51:b0:e7:83:57:c8:96:79:2c:53:41:23:
a5:6e:20:a2:c7:34:85:d2:f3:e2:1a:9f:48:ae:02:
e5:fd:b3:ff:5a:7b:5f:af:1d:a0:35:50:20:01:b0:
2d:7e:db:1f:83:40:2e:b5:b2:ba:11:0b:2b:89:da:
58:fd:e3:97:67:f9:2e:e4:d7:d5:79:da:6e:2b:f4:
7f:54:8e:84:e0:c5:87:8e:d4:9e:79:35:51:24:f5:
a6:69:17:ed:a2:f8:94:d3:2f:df:2b:5f:a3:b7:4c:
ce:ab:d9:54:a6:d9:2a:b9:75:67:e3:cb:08:cb:ce:
28:33:79:04:aa:e3:d4:3c:bc:66:46:5d:60:6e:d1:
43:7f:73:85:8d:e6:f1:04:08:06:5d:20:19:10:50:
55:39:fd:75:d8:e8:54:ca:f4:1a:56:70:c3:7a:48:
2d:98:82:e7:08:9b:20:96:8e:f0:30:a8:80:77:e7:
68:d2:18:ac:b4:47:44:27:d7:08:82:06:bd:18:7c:
9e:3b:9e:e3:a0:25:9e:3c:cc:19:ed:e8:e4:00:77:
bd:85:f3:6c:eb:21:42:8f:84:3d:7c:d8:3c:0e:d7:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:A3:9E:9C:1D:06:22:08:EE:A1:A9:A0:CC:FA:33:D8:82:16:0E
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:26:93:1f:58:d7:28:1c:47:df:62:78:04:8d:33:ee:88:cf:
e2:d7:bb:b7:41:13:a4:7c:e7:a0:c6:44:ec:4a:65:d8:bc:fc:
6e:9c:10:4e:2f:9f:f9:a5:52:77:8e:d6:64:45:42:b2:82:17:
c3:4a:5d:7e:25:e9:bf:c3:fe:28:92:dd:a7:40:b4:2d:91:38:
47:0a:34:bf:c6:bc:4d:e5:fa:10:da:d6:03:2d:fc:d7:c5:e8:
a5:35:71:bc:bd:e4:ba:64:76:29:c5:51:e7:c1:23:54:e2:6d:
0a:80:48:98:18:f1:b4:92:d2:5e:78:a5:b4:62:d7:08:82:9c:
55:a6:f8:7d:cb:25:5e:e7:db:65:dd:5e:cd:3e:9c:36:86:0b:
7b:9c:57:b8:08:62:12:22:f3:e2:6f:3a:e3:ba:2b:2e:3c:07:
f5:45:63:81:71:14:5f:ae:aa:c4:13:36:92:3c:5f:2a:64:1a:
4e:ca:f6:65:a1:35:cf:7f:4b:94:5e:b6:43:2b:de:06:24:49:
67:e6:8c:43:88:43:b2:c9:e6:1d:0e:a9:05:c2:56:5c:a0:e6:
3d:c2:9e:65:c9:00:8c:6e:7d:d0:a0:59:64:37:0d:c2:fb:b8:
d3:fc:5b:cc:44:f7:1a:94:f2:aa:a0:f2:a8:d5:4b:c4:c9:7f:
d0:b1:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:59 2026 by rpki-client