Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: hSKeTW+W8c/2zDafc1lu1VwlTZSQe1GuOCIDvEeaC3M=
Subject key identifier: DD:37:40:6E:47:0E:22:E8:FB:53:D2:A9:58:C8:6C:3A:1B:6B:8B:16
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019E2136250EEF494C00E6DDCC145A110078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0F0F
Signing time: Wed 13 May 2026 12:00:56 +0000
Manifest this update: Wed 13 May 2026 12:00:56 +0000
Manifest next update: Thu 14 May 2026 12:00:56 +0000
Files and hashes: 1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: iQfhHUG2aPtScq/AND6gLc63PCFpbRzyKp31mvJ7lvU=)
2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:25:0e:ef:49:4c:00:e6:dd:cc:14:5a:11:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: May 13 12:00:56 2026 GMT
Not After : May 14 12:00:56 2026 GMT
Subject: CN=dd37406e470e22e8fb53d2a958c86c3a1b6b8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:3e:e3:4c:f5:65:f1:c3:5b:a8:16:e4:80:
40:64:22:19:aa:9e:97:92:cb:e1:b2:b0:d5:a1:9c:
f2:30:6b:d2:f7:d9:19:bf:d2:8d:6e:55:6e:27:00:
11:51:68:45:aa:e9:8a:ea:db:9e:ed:7c:af:53:73:
e0:3f:4c:45:9f:63:37:a5:57:9d:41:4a:f6:c9:ec:
a6:7f:b8:60:e9:48:78:0a:5d:c5:42:df:d0:e1:c3:
89:a7:93:ea:69:6d:56:42:3a:c9:ef:68:f9:9f:ab:
09:ab:89:12:8a:04:10:91:99:d1:0b:84:3b:eb:08:
c7:c7:8f:64:52:2c:73:46:f6:6d:a3:d9:a7:3e:e3:
c2:09:07:56:82:bb:5c:d0:16:9f:8d:c4:95:13:37:
42:0d:2b:96:cf:be:78:b1:7f:52:3a:b7:14:f7:ee:
dc:e1:1a:0a:14:c7:9c:9f:34:64:02:a2:73:08:01:
3f:fa:8c:7c:eb:0f:9e:a2:5f:75:11:26:56:30:6a:
91:5d:5f:76:af:6f:84:be:f1:f2:08:20:0e:2e:a6:
90:28:38:cf:42:10:df:79:29:15:d4:a1:33:ff:ce:
72:7f:b1:72:ec:38:d5:f5:ae:3a:4b:7c:32:00:9b:
35:7e:c8:18:18:2b:04:96:9d:02:aa:45:a1:8f:41:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:40:6E:47:0E:22:E8:FB:53:D2:A9:58:C8:6C:3A:1B:6B:8B:16
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:93:99:11:71:61:c5:70:2e:43:e1:b1:53:03:90:b5:ec:d4:
c7:1e:19:f5:fd:8c:3a:ff:66:82:89:38:18:35:82:a6:67:46:
ea:81:85:1a:6e:98:81:e1:60:05:35:80:35:b5:62:81:63:f5:
29:fb:fd:ce:b2:ed:f9:b9:cb:4c:93:4a:cc:94:42:fd:96:e8:
cb:52:41:09:eb:4c:32:0a:87:bf:df:cb:36:81:c9:a4:34:18:
7a:d5:8f:df:a0:02:e8:00:d2:e7:d7:b5:0a:a1:50:bc:64:c8:
ad:f2:61:a8:a8:ff:27:aa:f8:91:36:45:f0:03:ec:f4:9f:00:
21:b9:cd:a6:8e:47:0b:bc:08:d5:72:85:56:7d:af:83:9c:d2:
b0:4d:a2:9f:30:48:db:82:a1:98:e0:d2:41:ee:3d:46:c8:df:
e0:6c:3e:13:22:a0:79:3b:ec:9b:53:d9:ac:72:28:53:90:3a:
c7:07:c5:ed:2b:bc:d0:b7:d5:52:9b:70:23:2c:da:7c:ff:17:
e9:49:82:82:a2:c5:ed:7f:0b:3a:e8:1b:c5:fc:a1:03:28:be:
6a:bd:b2:40:62:02:31:40:71:38:20:ee:20:f9:ad:c0:31:66:
e1:b8:ee:74:48:bb:01:3f:7a:90:cc:ae:20:7e:53:4b:5d:be:
ad:ba:d0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNiUO70lMAObdzBRaEQB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjYwNTEzMTIwMDU2WhcNMjYwNTE0MTIwMDU2WjAzMTEwLwYDVQQD
EyhkZDM3NDA2ZTQ3MGUyMmU4ZmI1M2QyYTk1OGM4NmMzYTFiNmI4YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxA+40z1ZfHDW6gW5IBAZCIZqp6X
ksvhsrDVoZzyMGvS99kZv9KNblVuJwARUWhFqumK6tue7XyvU3PgP0xFn2M3pVed
QUr2yeymf7hg6Uh4Cl3FQt/Q4cOJp5PqaW1WQjrJ72j5n6sJq4kSigQQkZnRC4Q7
6wjHx49kUixzRvZto9mnPuPCCQdWgrtc0BafjcSVEzdCDSuWz754sX9SOrcU9+7c
4RoKFMecnzRkAqJzCAE/+ox86w+eol91ESZWMGqRXV92r2+EvvHyCCAOLqaQKDjP
QhDfeSkV1KEz/85yf7Fy7DjV9a46S3wyAJs1fsgYGCsElp0CqkWhj0GzuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN03QG5HDiLo+1PSqVjIbDoba4sWMB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipOZEXFh
xXAuQ+GxUwOQtezUxx4Z9f2MOv9mgok4GDWCpmdG6oGFGm6YgeFgBTWANbVigWP1
Kfv9zrLt+bnLTJNKzJRC/Zboy1JBCetMMgqHv9/LNoHJpDQYetWP36AC6ADS59e1
CqFQvGTIrfJhqKj/J6r4kTZF8APs9J8AIbnNpo5HC7wI1XKFVn2vg5zSsE2inzBI
24KhmODSQe49Rsjf4Gw+EyKgeTvsm1PZrHIoU5A6xwfF7Su80LfVUptwIyzafP8X
6UmCgqLF7X8LOugbxfyhAyi+ar2yQGICMUBxOCDuIPmtwDFm4bjudEi7AT96kMyu
IH5TS12+rbrQcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:21:06 2026 by rpki-client