Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: VdWqOQfmtRsUwx4LGAFkQqRcPpdx5Oqe2bzt/fMocYA=
Subject key identifier: 34:28:FB:2E:2A:62:FA:4F:6F:5F:BA:08:36:38:D6:25:02:35:91:03
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019E4F8FAEC52CEB1B0407FEF0A529520FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 025E
Signing time: Fri 22 May 2026 12:01:16 +0000
Manifest this update: Fri 22 May 2026 12:01:16 +0000
Manifest next update: Sat 23 May 2026 12:01:16 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: gicWMIkf6ev/IFGeHx+jrJOXpzbsEjti26ajaXqUkJM=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:ae:c5:2c:eb:1b:04:07:fe:f0:a5:29:52:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: May 22 12:01:16 2026 GMT
Not After : May 23 12:01:16 2026 GMT
Subject: CN=3428fb2e2a62fa4f6f5fba083638d62502359103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:86:87:1c:8a:83:24:de:92:4d:bd:cc:b6:
60:3e:ed:03:8c:d3:e4:3c:d6:81:85:2e:8d:c9:2d:
d8:3f:66:4d:db:59:b7:53:b7:ed:e0:69:05:2a:32:
d8:ef:c1:3e:b9:4b:9f:57:37:3b:35:ce:59:71:0a:
60:c3:db:cb:44:ea:1c:04:c3:cb:a7:5c:54:dc:0b:
e2:53:fd:05:75:2a:93:51:0f:f4:ac:eb:d6:11:94:
f0:9b:37:ec:69:93:1d:1b:4d:8b:d5:0f:c2:61:8e:
96:a8:6a:31:23:03:3f:45:59:3e:6a:a9:ee:b6:43:
83:f1:c9:a0:25:a7:58:46:64:c8:0f:db:f8:03:08:
5c:33:f2:b9:ec:84:db:4a:0b:8f:13:67:a9:ab:71:
74:31:cb:d6:ae:64:f6:a2:5c:03:0f:15:d3:d2:14:
47:7c:45:41:04:6c:51:a0:13:ca:9c:5e:68:56:63:
d6:8b:6e:f1:8c:63:7a:64:29:26:6e:30:66:48:65:
a3:b8:cc:03:4b:35:4f:a5:45:7d:7e:56:46:73:6f:
53:7f:92:e7:d0:05:1f:e7:56:00:cb:b5:86:7c:f8:
a9:0c:09:53:15:da:8c:0e:36:fa:c9:a6:1b:11:47:
c4:7f:f1:fa:6e:44:c1:b3:d7:85:5f:ca:f4:a5:fa:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:FB:2E:2A:62:FA:4F:6F:5F:BA:08:36:38:D6:25:02:35:91:03
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:93:25:c6:b1:a6:7e:21:3e:c2:09:4b:85:6a:78:10:5c:9b:
35:93:c1:3f:c5:b3:7e:16:c7:42:f4:3b:ff:87:ee:f2:f3:c7:
47:bc:6f:52:0c:b0:c6:f5:7c:19:c5:4d:47:ff:2e:24:86:0f:
50:50:8f:36:82:2c:88:f3:7a:39:c6:55:77:b7:7f:14:e5:1f:
cc:81:7f:0d:8f:43:6f:ce:9d:e1:b8:79:d6:30:32:6a:53:d7:
bf:bd:5d:c7:06:b8:93:19:07:b7:5e:95:5b:8f:71:5e:73:dc:
9d:52:f1:bd:d2:7d:ff:98:49:b5:98:6d:17:7e:48:b1:03:e1:
90:7b:12:de:17:a8:30:b8:14:1a:71:a0:db:b3:d8:ae:14:1d:
a9:4b:50:d5:38:df:a9:63:e4:a3:d9:79:20:c0:c8:14:6b:38:
42:92:fc:da:91:e1:c0:25:f2:85:97:0a:8a:73:bc:9b:7d:9d:
84:18:ff:a2:45:63:18:e6:d8:b4:92:0f:32:92:5c:42:93:48:
2c:bb:7e:f7:ee:05:03:3e:a6:a1:57:de:06:01:7f:1b:ff:93:
b4:f9:ea:cf:d3:dc:da:7c:d2:51:42:7d:4a:0f:ab:49:e0:12:
6e:55:96:1b:3a:5f:95:1b:89:69:ab:2b:bd:59:6b:f0:f2:c3:
09:0f:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:12 2026 by rpki-client