Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: TdXZpLXWFp6T1J+IvKbO2k18YG9j7fffuYdnoX9TLYA=
Subject key identifier: A5:60:EE:67:BA:42:06:DE:37:0A:95:6E:B4:59:7B:C7:36:11:AA:FE
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 019E303B8BC247BE2426D38E55908B2DDADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1920
Signing time: Sat 16 May 2026 10:01:09 +0000
Manifest this update: Sat 16 May 2026 10:01:09 +0000
Manifest next update: Sun 17 May 2026 10:01:09 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: UNXgjkteoteQUWjyphLPRKcmGP1ST0wneb3dauDghdA=)
2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:8b:c2:47:be:24:26:d3:8e:55:90:8b:2d:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: May 16 10:01:09 2026 GMT
Not After : May 17 10:01:09 2026 GMT
Subject: CN=a560ee67ba4206de370a956eb4597bc73611aafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:99:b7:ad:2d:13:45:6b:c9:db:d7:7f:ed:
8d:49:d0:b0:f8:3a:bd:28:9a:cd:ee:1f:90:18:76:
1e:f3:38:85:91:60:e3:3c:a0:1d:a5:72:88:33:c0:
4f:40:db:c3:ec:ba:0a:8f:01:77:80:cb:20:3c:2e:
ab:74:c1:5f:9c:dd:52:8f:17:af:e9:57:e5:3b:05:
9a:03:52:7a:28:03:0b:0b:12:5a:28:74:f0:a7:97:
19:49:57:9a:93:75:39:4b:9c:d9:b4:d6:37:13:11:
ee:06:eb:d9:e2:4f:b0:5d:04:b3:79:b5:6b:e9:8b:
c9:53:47:f2:cc:67:c1:3b:31:fd:d5:68:4a:f1:d4:
73:90:cf:0c:07:a4:6a:05:63:39:a3:36:a7:30:31:
f2:e2:b8:26:d7:3b:c7:8b:07:3f:82:82:ab:ed:8e:
34:38:38:9e:e9:90:30:cf:4b:45:4d:c5:39:95:63:
35:78:2e:7d:bd:9b:eb:b6:2c:0c:8f:f1:a5:69:18:
c2:e3:c5:ea:70:5f:cb:ca:75:71:14:46:86:80:ed:
95:14:f3:51:b4:bd:ef:fe:e2:69:88:32:83:ef:cd:
98:ad:0f:23:91:6b:75:49:50:d0:cd:16:56:15:2a:
f3:08:60:4e:20:d1:64:31:70:53:a4:c7:53:6a:0b:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:EE:67:BA:42:06:DE:37:0A:95:6E:B4:59:7B:C7:36:11:AA:FE
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:de:53:e3:44:79:3c:34:be:99:66:05:28:be:5f:0a:fe:
5d:0e:66:fd:b1:2f:e5:bf:95:f9:ff:e6:8d:ac:e9:04:11:f7:
91:5e:08:7a:9d:0e:57:b0:24:6d:cd:60:a6:ba:a3:fd:38:bf:
8f:77:3c:57:06:44:24:d0:56:89:be:47:d9:06:51:2e:c6:2a:
3f:4f:43:53:8a:27:6d:0d:19:48:15:84:b7:85:04:25:a4:d2:
7e:f3:e4:bd:af:6d:45:35:ab:81:dc:cd:97:a2:dd:6f:7c:2b:
29:ba:4f:50:91:ae:b7:91:d6:3d:18:d1:cc:8c:71:a0:0e:e5:
92:a0:d1:ca:87:4e:6a:b6:f5:6c:9a:d1:d4:22:73:ba:66:ae:
af:60:79:71:c9:d2:af:5a:f5:c0:42:ca:e8:42:9a:5d:46:00:
f4:da:e7:16:0b:a5:af:3d:4c:08:f3:82:ab:1f:95:6f:46:39:
8e:45:90:40:5d:14:5e:db:eb:1a:26:71:34:0b:d7:c5:6b:db:
bd:39:48:a3:07:19:55:b4:c0:b6:2f:9d:eb:8d:0e:f0:8d:60:
85:72:c6:01:dd:39:bd:a8:e3:b5:25:f0:98:89:5d:e5:92:a7:
da:21:bb:80:3f:ae:88:5a:59:1d:d3:1c:95:09:dd:6b:19:ac:
3e:08:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:11 2026 by rpki-client