Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: MlQALfpP3v13oyq4LBokfWEiico7+jyLqhI6vB3I9ps=
Subject key identifier: 61:62:8A:5C:68:EB:59:92:59:27:75:08:68:AA:9A:06:D0:4A:7A:B5
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019E30725882DD07B9ABE1CEB5744C1E1A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1509
Signing time: Sat 16 May 2026 11:01:00 +0000
Manifest this update: Sat 16 May 2026 11:01:00 +0000
Manifest next update: Sun 17 May 2026 11:01:00 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: c6P+PAtJYM8eekWW3VPZXEmje3jr3B5e9wxLW3jKz+U=)
2: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:58:82:dd:07:b9:ab:e1:ce:b5:74:4c:1e:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: May 16 11:01:00 2026 GMT
Not After : May 17 11:01:00 2026 GMT
Subject: CN=61628a5c68eb59925927750868aa9a06d04a7ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:1f:7a:67:59:5a:e2:51:2d:97:7a:30:05:
97:ac:bb:8f:70:d0:74:f6:cf:41:50:b5:3f:c8:5d:
9d:df:b0:e5:f6:48:0d:e9:87:f0:48:eb:76:66:84:
60:af:dc:3b:11:7b:cd:e3:e5:60:24:5f:b0:63:b3:
b2:10:0c:70:3d:34:33:1a:e4:8b:61:e5:b3:1a:5f:
a7:b8:07:6f:38:d1:8a:c3:64:d1:b9:93:1b:e2:7b:
08:ba:63:a5:08:2b:83:41:f9:05:d4:ab:bd:36:c5:
76:26:b0:d2:ef:2e:5f:76:de:3a:91:c6:27:b8:a8:
02:f8:5e:cf:fd:e3:af:b6:09:d1:42:bf:f3:e0:69:
71:70:1d:d0:d4:96:5b:e7:29:1f:14:2d:19:53:2b:
8b:3e:ce:6d:cb:09:7e:35:be:0d:3d:dc:f6:48:13:
dc:32:a7:af:e6:5a:91:d8:f2:f1:2b:79:d0:2c:a0:
74:13:77:9f:da:b6:24:99:e3:21:fc:44:27:b1:51:
55:a6:1e:99:ef:1d:15:62:95:16:4b:c9:52:68:9f:
cd:f3:0d:21:62:d2:ab:c2:66:9a:58:98:3e:16:a2:
d6:a3:fb:d1:59:ee:0a:13:5a:20:df:8a:94:1b:f6:
77:7f:7f:84:f2:17:23:0a:01:f3:50:db:88:3d:7e:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:8A:5C:68:EB:59:92:59:27:75:08:68:AA:9A:06:D0:4A:7A:B5
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:36:87:dd:b1:0f:92:8d:73:4f:08:07:58:57:0e:df:41:a8:
6f:90:1b:17:09:77:ef:61:b4:e8:a9:b3:96:d4:75:1e:79:8d:
85:97:8c:9d:a1:bd:78:8b:30:64:9f:81:be:0c:a6:17:e2:e4:
46:60:82:34:b8:82:0e:af:6d:36:e8:c9:9a:65:3d:d8:57:23:
7d:bd:d8:2e:b0:06:39:9f:6b:4f:2d:a6:e4:13:f4:71:f5:5c:
1a:00:b0:19:c2:f4:30:52:8b:2a:78:4d:f6:97:db:57:e0:f1:
6c:fb:91:a2:c8:8e:da:38:ce:59:54:83:05:8f:b4:24:8a:3e:
1c:e3:9f:96:d5:fc:0a:18:24:42:e2:59:56:31:30:fd:01:8d:
44:71:31:5e:e7:74:29:60:e2:d8:ce:bc:b6:37:a1:91:b0:8f:
9e:f4:37:b3:eb:8b:df:d1:71:0b:ac:e9:b0:a8:5d:fc:7e:95:
09:b2:17:b3:ed:1e:21:82:43:bf:39:54:a4:11:a4:bd:15:81:
40:a1:0f:2f:7b:0e:ab:fb:5a:e3:35:e3:22:0e:cc:ee:5e:27:
4f:1d:01:94:b7:86:6e:11:a1:51:5c:0c:e5:dd:a2:d9:bc:78:
9b:51:6b:68:94:8b:33:09:5b:57:b0:b6:cb:24:10:60:ec:30:
8f:9c:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:54 2026 by rpki-client