
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: agWH4qAv+VjyJMqKvDWGxj/E5giQg8rflJbbyWN7Pqg=
Subject key identifier: CC:7A:4F:66:AC:95:B7:2C:54:DF:23:AC:9C:FC:9C:AD:5A:28:DC:83
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019E303BB4B1438C3D0884A75BF9B2CD8B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 189F
Signing time: Sat 16 May 2026 10:01:19 +0000
Manifest this update: Sat 16 May 2026 10:01:19 +0000
Manifest next update: Sun 17 May 2026 10:01:19 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: KO7eRGvhMIf5QqUWnK/1DikJAMjIlLNKYmLiAHax6Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:b4:b1:43:8c:3d:08:84:a7:5b:f9:b2:cd:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: May 16 10:01:19 2026 GMT
Not After : May 17 10:01:19 2026 GMT
Subject: CN=cc7a4f66ac95b72c54df23ac9cfc9cad5a28dc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:bb:b8:8e:fb:31:69:6e:9e:4b:0d:18:4e:
59:c9:6c:ff:a1:5c:b8:72:38:44:30:d8:5b:4d:11:
9d:7f:8b:02:90:79:44:27:d9:bd:97:fd:10:a3:d1:
79:10:f2:c5:2a:4e:f6:88:c8:28:da:a2:4d:dc:7c:
87:8f:e0:5e:c1:51:6f:25:1e:2c:93:52:ae:06:f4:
c4:77:b8:20:36:03:c9:42:27:2d:7e:87:c8:71:9b:
3d:99:51:4e:93:8b:b8:1d:16:05:2d:43:be:53:5e:
76:da:85:e8:c1:a1:98:ce:8b:02:05:2f:94:2d:1e:
c6:17:e7:c2:da:73:63:a2:0c:77:bd:36:37:39:b2:
79:c4:16:1b:4f:4a:fb:3f:96:09:65:4b:a0:4a:70:
f0:22:ef:3e:ac:da:a8:e7:47:79:da:2a:e9:e1:6d:
53:ab:bc:79:6d:1a:83:6b:e7:04:0b:22:ef:9e:d5:
95:72:f8:9f:1f:7f:77:ff:f4:df:ca:3f:a7:26:ba:
a8:9b:09:7e:3c:0e:4b:49:4b:b0:64:be:9c:b2:79:
73:07:21:1a:e4:04:c4:84:2d:e9:ce:55:b4:db:f4:
7b:06:80:d3:8b:a0:35:29:8b:ef:40:97:0a:58:77:
4d:5c:63:f7:3b:53:60:7d:f1:28:7c:2c:ee:e8:f6:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:4F:66:AC:95:B7:2C:54:DF:23:AC:9C:FC:9C:AD:5A:28:DC:83
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:35:7a:75:c3:84:3f:17:1f:52:92:a7:56:c6:32:3b:0a:
24:51:3d:fa:fb:2f:5a:50:87:97:15:76:d8:06:6c:0c:8e:a7:
de:a5:9f:ff:1e:ec:83:02:2b:c9:8b:a9:74:d0:19:78:3e:3f:
96:ab:72:d5:2c:18:02:05:69:03:e1:d1:32:cd:ce:a7:3d:e4:
83:4b:4b:37:55:ce:7d:e8:55:59:45:c7:b5:0f:0f:9c:97:3c:
60:23:fc:3a:37:47:a0:38:57:27:e0:6a:82:2e:b2:2b:57:fc:
73:ca:0c:cc:96:cb:d9:7c:1e:c1:4e:c7:1d:d6:fe:36:4f:47:
7a:b1:fc:f2:c3:74:15:fd:68:86:28:f8:d2:51:9b:b6:3a:03:
2c:c7:ce:42:df:1b:d3:92:d8:77:82:87:b9:47:cc:0b:2b:49:
45:51:49:74:de:f7:bd:ed:0e:85:52:84:70:51:1f:05:4c:40:
ae:72:58:e4:a7:e3:d3:44:54:1d:26:21:b6:24:d4:72:60:b2:
9a:3a:63:45:e6:b3:aa:00:c5:03:9b:c1:5c:33:08:d0:13:56:
f2:ea:6f:4b:de:dd:97:75:b0:59:f1:ae:24:d3:c5:88:a4:98:
34:e5:2b:0e:2d:fa:5e:63:ba:26:85:72:44:bf:38:6a:96:c0:
c9:70:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:25 2026 by rpki-client