Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: Z0hcTtLrch3U7xqdp+fzNqpxR0J+z2PVIeTIbW8iM8U=
Subject key identifier: CF:EB:BB:D0:C6:CB:62:F9:06:88:75:7A:98:4A:98:95:8D:BF:15:C1
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 019E2FCDAC1CBF9F3933414A6CC91362605C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0BC9
Signing time: Sat 16 May 2026 08:01:08 +0000
Manifest this update: Sat 16 May 2026 08:01:08 +0000
Manifest next update: Sun 17 May 2026 08:01:08 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: YHl5cBdRaTh7garviy++cWiTOz1YHiLVfWLHK5UWQUo=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ac:1c:bf:9f:39:33:41:4a:6c:c9:13:62:60:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: May 16 08:01:08 2026 GMT
Not After : May 17 08:01:08 2026 GMT
Subject: CN=cfebbbd0c6cb62f90688757a984a98958dbf15c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:cf:e9:21:ee:5f:2e:42:46:c7:64:2a:8b:
6a:4a:b4:bd:17:59:49:a3:96:c3:6c:55:2e:ef:94:
e7:c7:0b:ca:96:13:61:d5:94:17:e1:d2:c7:72:d1:
cd:44:f5:9c:b6:06:56:c9:3c:64:90:81:f1:02:39:
4a:19:17:21:8a:e7:66:9a:4a:be:c1:47:9e:81:3c:
6d:dd:b6:3c:d5:e7:db:5a:34:03:49:c9:cc:17:c4:
15:3a:87:d4:46:e5:cc:5d:e1:03:2f:b5:ad:48:ff:
cc:5f:43:dc:d0:dd:77:fc:66:c2:a8:58:96:5e:84:
1b:b2:27:4c:82:49:e1:99:b3:bf:f5:b1:71:4e:9f:
8d:64:a2:b2:2b:67:d3:89:8f:d5:ff:2f:25:eb:bf:
88:f7:c3:11:7d:f7:9f:0d:6e:93:b4:7b:a3:3a:08:
16:c4:b0:ce:2a:74:ed:49:8e:ec:77:ed:00:43:45:
8d:a4:d9:e8:20:42:58:2f:29:4e:64:84:0b:9d:bc:
ef:51:5a:a4:76:fa:0a:b2:8a:cb:b8:db:6f:a4:89:
f2:42:31:db:16:3e:70:6e:32:d9:9f:ca:7e:bc:6b:
b1:9b:e9:ca:a1:c7:4d:0e:50:40:d2:59:89:bc:ec:
36:07:a8:2a:af:31:ab:f9:09:15:16:ec:ae:12:74:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:BB:D0:C6:CB:62:F9:06:88:75:7A:98:4A:98:95:8D:BF:15:C1
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:51:7b:7b:72:d4:b7:30:20:08:7f:65:47:34:7c:ef:f2:
16:2e:dc:f2:20:1d:70:1f:84:6b:d8:d6:64:7d:66:c3:17:f3:
b5:f5:ad:56:fd:49:bf:8b:bb:78:42:bc:a3:ba:0f:cc:08:9e:
61:ed:d7:3c:68:8c:37:f8:6a:a2:97:24:f5:40:a7:44:32:ef:
ed:0d:9d:b5:f3:f2:0b:21:7f:9f:c0:f5:81:bc:97:cf:4c:4f:
b5:2e:3a:0c:dc:33:de:83:50:42:77:36:74:fc:a0:de:60:25:
15:16:83:46:f8:54:c9:8e:57:87:d4:a2:40:8c:f8:94:0f:9f:
db:40:72:42:4e:6e:dc:08:7f:04:c0:bb:23:fb:af:a7:29:d5:
46:ee:51:6a:06:2c:34:ad:5f:df:83:63:85:93:01:f0:85:7d:
3d:a1:90:b2:2a:f9:e7:27:22:fb:d5:8e:a7:00:54:41:d4:25:
5e:e5:89:c1:ac:b1:d0:7f:58:25:ed:03:62:41:85:55:61:da:
a7:06:2c:91:47:91:0f:33:28:c0:c4:c8:7f:2d:58:ac:54:00:
1f:d8:43:67:fe:73:e8:bf:c1:e7:d4:bc:44:26:f7:e9:d1:01:
a5:25:5f:a0:a9:dc:13:cf:61:b7:0b:40:ee:b2:a0:36:04:66:
de:59:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:46 2026 by rpki-client