Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: fDjwFx4uwCMc4cu71YLTgYw5zNvuHIn2erIkmNK+dms=
Subject key identifier: CB:40:7B:5B:D1:12:DB:57:5D:F4:61:4C:F4:59:34:92:25:E7:24:47
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019E314E6A6D46F4B02B0A26E4E7CCED165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 12EF
Signing time: Sat 16 May 2026 15:01:23 +0000
Manifest this update: Sat 16 May 2026 15:01:23 +0000
Manifest next update: Sun 17 May 2026 15:01:23 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 2BgVy65rRLxB/I4WsGaoT5FnATDI0CuPMtDxhJcdPVs=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:6a:6d:46:f4:b0:2b:0a:26:e4:e7:cc:ed:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: May 16 15:01:23 2026 GMT
Not After : May 17 15:01:23 2026 GMT
Subject: CN=cb407b5bd112db575df4614cf459349225e72447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:f9:d3:f1:00:ba:87:88:e9:ef:fe:08:34:
0f:41:c3:1f:8e:70:3a:82:d6:02:ac:98:48:b9:64:
de:8a:75:1f:a3:d6:b1:df:e5:f8:0d:13:27:4b:71:
57:32:a1:32:93:3c:f7:8c:da:a2:9c:5c:70:65:93:
a1:6f:05:74:0c:b0:67:06:1b:5d:3e:e2:4e:90:98:
d7:ea:71:94:70:cd:4e:74:5f:1e:51:f9:c8:1e:05:
5c:a4:dd:20:1b:9d:6a:fd:bd:6e:74:a6:10:fa:2b:
8f:e7:5a:48:ca:16:5c:44:1a:23:da:60:fe:79:44:
ed:1b:b6:5d:13:89:53:1c:46:3c:01:90:b4:b5:88:
a3:c7:45:d6:33:03:c2:a9:2e:c8:4c:c4:39:81:49:
c2:09:77:a4:b8:67:75:74:f9:0e:a2:17:8a:68:0a:
b7:74:50:55:f4:19:2b:af:3f:b9:1a:34:b3:88:98:
d9:89:71:62:9d:f0:8f:64:2b:e7:d3:30:42:91:f8:
0f:62:5c:d4:ac:b3:a8:f8:62:65:79:d1:4c:0f:96:
20:6e:3c:81:ce:61:29:18:b2:36:8b:db:e1:d7:df:
d8:c0:c5:eb:d1:1f:5b:27:c8:e1:53:e5:4f:c6:e0:
f9:17:61:b0:78:1e:34:4e:f9:56:78:3d:c7:a8:cc:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:7B:5B:D1:12:DB:57:5D:F4:61:4C:F4:59:34:92:25:E7:24:47
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:c9:a6:dc:31:a6:6f:25:53:00:20:73:1e:75:0d:bb:c9:
da:d0:00:be:60:59:98:98:41:6c:b0:75:7d:1d:11:b7:00:d3:
3b:58:25:05:85:f4:98:bc:c2:e6:7c:c6:d8:d8:6a:bd:85:91:
d6:a9:7b:ec:f2:48:5f:2f:d3:03:91:6d:74:f1:b2:cb:0b:e4:
ed:3d:b6:60:b3:36:7c:c0:02:d4:35:a0:60:c8:51:74:35:07:
cf:12:cc:65:a1:5f:77:14:9a:cc:6e:5c:31:64:7b:ed:80:05:
4a:fe:9a:5c:3f:3b:b4:1b:b6:b5:cc:38:79:d7:ed:86:84:b0:
f9:e8:f2:40:35:8b:da:0a:4b:6d:99:2c:90:c4:e0:92:aa:6d:
0d:74:66:67:03:8f:c4:bd:30:6d:37:07:77:8a:01:9e:30:c4:
aa:c8:ba:0f:ab:1d:4c:b3:44:9b:0f:3c:c1:d8:ce:3d:57:74:
d0:fa:d4:0c:5c:1d:95:18:49:dd:bb:d5:2f:fe:32:33:ee:1b:
fb:ee:a0:3f:2c:02:e2:83:06:6f:d2:d8:67:b3:b2:ed:eb:1f:
c0:ac:f4:77:d5:a3:70:ae:c2:f7:74:64:f7:fd:f0:0d:50:8f:
b8:65:d5:bc:eb:08:e1:91:09:2e:0a:3b:d8:3c:c4:f4:d5:7e:
8f:bc:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:51 2026 by rpki-client