
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: JCrgol+JwAYBiDcCM/DN5gcXCo4Ft12kAAo5Ak8rFkk=
Subject key identifier: 1D:B8:4A:D4:C3:70:66:17:01:6C:A5:1E:C1:F5:AC:01:E0:45:B8:22
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 019D9A06DA67C32634988D1FE1460D17D563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 09B3
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: hCexR5T3J7A5NezIPcnjIK8riKRjOjMqOr6PJwID3tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:da:67:c3:26:34:98:8d:1f:e1:46:0d:17:d5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=1db84ad4c3706617016ca51ec1f5ac01e045b822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:d6:37:95:49:bd:45:69:00:6a:c5:43:ce:
67:03:ad:11:a3:2e:12:14:4a:54:9b:88:63:ab:bc:
6e:ce:2c:10:00:fa:80:1e:7f:0f:ed:81:38:d7:26:
a5:5d:3f:51:64:50:46:8e:f9:7e:9d:d9:68:a9:47:
6d:c8:28:18:c6:e9:51:ac:62:18:e1:1b:0e:ba:c2:
55:ba:c9:eb:da:0b:e3:95:45:81:99:25:6c:9e:b9:
9a:53:08:a3:cc:4f:61:fd:cb:32:4d:6a:95:b1:67:
d1:18:01:6c:96:34:ae:48:b7:b3:23:b0:e6:d9:1c:
24:7c:82:73:c2:0c:d0:a1:e7:1a:95:97:22:39:a6:
7e:bc:85:f2:b3:ec:3f:ed:a9:02:4d:94:89:8e:f1:
3b:59:b1:b5:74:50:32:75:45:82:1c:c7:47:c4:da:
ba:5f:5f:0a:0d:d6:c5:6f:2a:81:fc:d0:91:4b:40:
03:ee:be:2b:80:6c:c5:b3:73:6b:ea:ff:bf:d5:01:
f8:d7:77:5c:a8:27:e1:e1:7a:e3:71:45:31:03:50:
3c:4a:d2:24:fd:89:3b:97:3d:9a:43:a8:e8:ed:01:
3d:53:32:6e:4e:a8:10:5b:d3:2b:ea:be:11:3a:33:
8b:a2:38:3e:88:5c:94:ce:24:54:c0:40:0d:56:70:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:4A:D4:C3:70:66:17:01:6C:A5:1E:C1:F5:AC:01:E0:45:B8:22
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:27:30:28:2d:43:79:73:ad:44:72:32:44:43:a8:33:28:6b:
12:25:b3:eb:eb:36:83:03:02:76:77:4b:c6:6f:0e:4d:d6:b1:
cc:21:23:5c:2b:6f:26:c8:f3:34:9e:bd:1b:af:4c:2f:ea:b0:
f8:79:43:fb:78:f0:8a:35:e9:d5:63:e1:bb:81:33:8c:4a:66:
ed:b7:23:00:53:be:41:a6:99:a6:01:56:50:06:57:e6:22:08:
28:47:f0:c6:ec:f2:8c:08:da:0f:0d:f3:ce:eb:59:c3:97:2b:
c2:e7:4b:a8:a7:80:6d:60:27:36:49:93:8a:30:3f:3e:2a:8e:
07:be:7c:e7:be:6f:05:fc:7e:15:f9:d3:cb:31:d3:0b:09:0a:
7d:50:77:cc:72:bb:e6:5f:fe:09:18:f5:19:e7:22:4e:a9:04:
dd:43:c9:27:c1:1b:44:d7:fe:a7:66:01:fb:f5:5c:5a:af:b1:
79:f0:42:56:fe:08:ef:fc:b5:ee:2f:e0:45:77:ed:35:f1:e6:
da:4e:53:c1:e8:af:6b:93:73:42:8f:7d:51:16:b7:8b:5c:07:
be:f6:a9:37:b7:fa:46:6b:4b:9f:94:b1:9f:c8:76:ff:91:2b:
17:ca:9f:4a:77:b9:36:50:da:26:51:8f:2a:ea:34:34:0e:6b:
90:71:ea:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBtpnwyY0mI0f4UYNF9VjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj
Y2VkYjMwHhcNMjYwNDE3MDYwMDMzWhcNMjYwNDE4MDYwMDMzWjAzMTEwLwYDVQQD
EygxZGI4NGFkNGMzNzA2NjE3MDE2Y2E1MWVjMWY1YWMwMWUwNDViODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfHWN5VJvUVpAGrFQ85nA60Roy4S
FEpUm4hjq7xuziwQAPqAHn8P7YE41yalXT9RZFBGjvl+ndloqUdtyCgYxulRrGIY
4RsOusJVusnr2gvjlUWBmSVsnrmaUwijzE9h/csyTWqVsWfRGAFsljSuSLezI7Dm
2RwkfIJzwgzQoecalZciOaZ+vIXys+w/7akCTZSJjvE7WbG1dFAydUWCHMdHxNq6
X18KDdbFbyqB/NCRS0AD7r4rgGzFs3Nr6v+/1QH413dcqCfh4XrjcUUxA1A8StIk
/Yk7lz2aQ6jo7QE9UzJuTqgQW9Mr6r4ROjOLojg+iFyUziRUwEANVnDKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB24StTDcGYXAWylHsH1rAHgRbgiMB8GA1UdIwQY
MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt
ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi
LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWicwKC1D
eXOtRHIyREOoMyhrEiWz6+s2gwMCdndLxm8OTdaxzCEjXCtvJsjzNJ69G69ML+qw
+HlD+3jwijXp1WPhu4EzjEpm7bcjAFO+QaaZpgFWUAZX5iIIKEfwxuzyjAjaDw3z
zutZw5crwudLqKeAbWAnNkmTijA/PiqOB758575vBfx+FfnTyzHTCwkKfVB3zHK7
5l/+CRj1GeciTqkE3UPJJ8EbRNf+p2YB+/VcWq+xefBCVv4I7/y17i/gRXftNfHm
2k5Tweiva5NzQo99URa3i1wHvvapN7f6RmtLn5Sxn8h2/5ErF8qfSne5NlDaJlGP
Kuo0NA5rkHHqNg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:29 2026 by rpki-client