Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: WUJEadzCBkSZzpOAcmVvptf53KdAIO/X2udfwVhMtYU=
Subject key identifier: E3:87:06:59:90:8B:17:7D:1F:FE:07:D5:66:5B:47:A2:C2:AA:80:79
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019E3072C665485A2D34D72E6122320D0231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 11:01:28 +0000
Manifest this update: Sat 16 May 2026 11:01:28 +0000
Manifest next update: Sun 17 May 2026 11:01:28 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: in/y5sFO6fU2RFC22AFH2rF6dKutyhQrFKrLSGbKxfs=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c6:65:48:5a:2d:34:d7:2e:61:22:32:0d:02:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: May 16 11:01:28 2026 GMT
Not After : May 17 11:01:28 2026 GMT
Subject: CN=e3870659908b177d1ffe07d5665b47a2c2aa8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:d6:77:b6:48:39:60:80:3f:d5:ae:e5:d7:
20:70:d6:12:9c:51:11:b9:2e:cc:a8:13:77:7f:44:
e6:ed:87:b6:0c:4e:3c:86:25:93:cd:11:f1:da:51:
96:4f:ba:65:cc:cb:95:9f:02:0f:11:99:0a:d9:f7:
5c:54:96:19:ed:fc:1a:df:4d:62:8d:de:d9:26:fa:
48:9b:52:aa:47:2e:d7:dd:eb:cb:98:ee:b3:6e:aa:
08:5c:b8:38:92:ed:40:55:27:e1:fa:ea:13:4a:f5:
37:85:c7:2a:6e:63:4b:54:fc:84:fd:40:cc:93:53:
14:24:b5:33:f8:0a:8c:6f:10:7d:61:b6:e5:bb:3b:
b6:1b:b8:b7:97:d7:1c:20:44:f6:09:ee:c3:48:a9:
1e:1d:52:c2:fd:0f:cb:71:4a:84:58:13:d7:8d:54:
b5:e1:e3:d3:7a:cf:81:63:47:ab:b4:47:c7:b9:62:
03:9e:97:bc:26:73:b3:54:24:06:05:6c:c1:5f:a2:
03:24:af:7a:9f:b9:66:dc:48:95:b9:ea:8f:31:07:
ef:15:bd:70:32:c7:3f:dc:33:ae:74:79:6e:7b:97:
b7:52:23:56:4f:61:12:f0:b5:c8:eb:50:4d:27:45:
c6:ef:11:15:43:c6:60:ea:b0:b6:f8:80:46:ee:d3:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:06:59:90:8B:17:7D:1F:FE:07:D5:66:5B:47:A2:C2:AA:80:79
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dd:ac:a2:f9:73:4a:cb:d3:ed:31:8d:b7:ce:01:e7:29:f7:
3e:1a:c8:69:0c:08:a1:8f:f7:30:dd:50:6d:81:f3:b8:fe:5a:
7c:86:53:99:15:45:ef:68:52:d2:4c:b0:b2:48:a5:71:d1:9a:
5c:60:f5:a8:5d:ac:c3:a4:8b:41:7f:6e:9d:ff:0a:10:46:82:
bb:9d:53:63:fc:86:6b:fc:14:1d:a5:61:3c:88:be:4e:c8:b5:
b9:a1:51:9e:02:5c:40:63:68:96:de:2f:16:0d:78:99:4e:74:
ff:fd:c9:6d:d5:fa:da:ec:d3:ce:22:9c:fc:02:67:b5:47:88:
71:b7:d3:eb:ef:f8:3b:75:dc:39:77:15:f6:5a:88:62:65:58:
4f:47:6d:cd:65:8a:d3:08:9b:9e:5c:31:6b:32:e0:c1:d3:02:
35:cc:42:a0:43:21:50:60:96:59:1b:fd:30:13:1a:64:57:f3:
ff:6e:5b:1e:a5:c1:ca:73:0f:f8:e0:a9:ba:f1:8e:34:d6:70:
ca:64:00:b2:6a:6b:6a:8f:2f:fd:de:b2:c2:55:c4:92:46:25:
8c:e6:79:38:51:9d:19:df:38:29:d3:4e:7b:ed:22:84:1f:db:
71:4b:43:09:60:88:05:01:19:0d:7e:b9:19:06:b4:d2:a2:dd:
a1:8d:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:44 2026 by rpki-client