Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 8H8NWkukxFPrKXbTuIilMzBTYHVAUW1mBsBleg8XlIc=
Subject key identifier: 49:4C:50:73:95:61:3D:D5:12:D3:F2:9C:A4:24:CF:5D:D6:5B:06:8A
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019E28B9478F9B15BAFD8681542DB1FFDB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1917
Signing time: Thu 14 May 2026 23:01:31 +0000
Manifest this update: Thu 14 May 2026 23:01:31 +0000
Manifest next update: Fri 15 May 2026 23:01:31 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: W8SjaatsrpbN4JGSIi2USLflE14OKRyxTfM/3FTnOaU=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:47:8f:9b:15:ba:fd:86:81:54:2d:b1:ff:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: May 14 23:01:31 2026 GMT
Not After : May 15 23:01:31 2026 GMT
Subject: CN=494c507395613dd512d3f29ca424cf5dd65b068a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:58:51:38:f6:c0:bb:46:bd:32:b1:14:9e:
1c:c8:1b:3b:7b:94:be:94:73:97:bd:37:71:51:3d:
43:c2:d6:a6:b2:1f:bc:a3:39:e1:73:e4:f8:44:4d:
cc:71:50:5a:77:e2:be:c6:a8:bc:10:3e:98:b1:a5:
79:bd:ca:74:54:c7:5d:18:42:86:03:8f:fa:4a:c2:
f9:ef:00:e3:6e:7a:9a:39:70:9c:0c:16:25:8d:e8:
e3:eb:3d:d5:9c:a2:5a:fd:00:49:b3:e5:5c:6e:12:
e3:be:17:db:00:e9:d3:b0:c9:7f:cc:47:df:8b:16:
5d:0f:26:25:d5:e2:4e:89:11:c5:59:8c:c0:59:f6:
68:e3:c1:0b:17:b5:8b:b7:5f:79:74:ab:5d:86:f2:
dd:fd:f7:4d:6b:1e:08:18:c8:3b:dc:15:3e:a9:71:
54:13:e7:91:c9:de:77:df:92:a5:51:4e:e0:35:64:
ff:5b:19:97:92:d5:78:b6:2c:68:1d:65:59:f8:dd:
05:7e:3c:14:65:5d:86:4d:96:b9:21:5f:f0:3e:97:
b8:64:df:51:44:db:f0:92:08:d1:f9:b9:e5:d4:63:
d5:d6:1d:cf:d6:ee:ca:1e:da:4b:8e:ce:0a:dd:6a:
69:59:68:2b:7c:0f:79:4f:65:6b:b9:a3:a1:00:a7:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:50:73:95:61:3D:D5:12:D3:F2:9C:A4:24:CF:5D:D6:5B:06:8A
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b2:a1:70:16:de:ea:18:94:24:87:38:6c:af:5b:db:73:b1:
0b:69:84:25:4c:05:dd:dc:cf:8b:f8:79:b6:46:9e:1c:3a:7b:
f9:7d:c9:99:c5:a7:ef:d6:da:ec:97:4b:8c:1a:64:19:0c:1d:
95:31:be:74:78:15:bb:88:ec:0e:9c:96:71:a2:95:31:30:0b:
08:31:f0:28:b0:ac:83:52:25:da:22:94:06:e6:34:87:b6:c2:
1c:40:e6:37:87:32:f8:35:a5:98:8c:c2:2b:ad:f6:0a:73:10:
06:10:0b:c9:36:85:39:69:5d:db:62:5b:89:ed:b2:5e:19:21:
14:ac:b2:2c:35:1a:64:5d:03:4d:a9:52:d5:2e:af:b4:6e:1c:
7d:3a:c3:39:6c:5f:a8:20:2c:7d:5b:fe:7c:3c:15:89:53:dd:
e4:91:42:af:32:bd:bb:4c:cd:11:d2:6f:b1:99:6e:09:85:60:
24:4c:d8:1f:3f:e0:bd:b2:71:6c:04:a4:17:73:09:83:ce:1c:
bb:57:1a:49:b6:92:0d:a0:c4:57:a0:f8:aa:f0:66:88:a3:c1:
24:84:54:d4:61:cb:01:8a:b4:79:d3:6d:26:3b:be:17:55:b7:
d3:2a:c7:eb:58:b7:40:7a:7c:fb:e3:1a:52:21:7a:93:71:49:
ba:f8:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:46 2026 by rpki-client