Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: WNRJTUgsXQFsjNK7w9lppIkyqj6ECRcwAT2Vm2gW9b8=
Subject key identifier: 5F:83:DC:9A:C8:E9:07:41:39:2E:3A:E1:C0:77:24:11:E7:ED:E9:52
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 019DCE2B8CB89258EFEE5E890F5304C359B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 08B7
Signing time: Mon 27 Apr 2026 09:00:53 +0000
Manifest this update: Mon 27 Apr 2026 09:00:53 +0000
Manifest next update: Tue 28 Apr 2026 09:00:53 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: 2ruV5nBy56z8Gus91qcBreLZMuChOindYqNxK2iXmZc=)
2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:8c:b8:92:58:ef:ee:5e:89:0f:53:04:c3:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Apr 27 09:00:53 2026 GMT
Not After : Apr 28 09:00:53 2026 GMT
Subject: CN=5f83dc9ac8e90741392e3ae1c0772411e7ede952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:b5:19:cb:7a:4e:b9:bb:d8:46:b3:dd:ea:
ad:c4:2d:c0:f7:f1:bd:4f:9c:69:13:11:82:d2:78:
f1:b1:d6:e1:cb:3f:62:30:5b:31:04:0a:9e:50:46:
a6:21:5a:5b:a3:33:b8:e8:79:40:59:80:67:d1:50:
b5:1a:f5:46:8b:2d:e5:e1:d9:0f:ad:7e:cf:30:eb:
cf:fb:4d:d5:7d:d9:51:5e:a1:50:c7:cb:a5:65:84:
91:2d:30:3f:4c:a7:5f:6b:4f:9f:e5:7d:1b:5e:eb:
1a:0c:66:d5:cc:63:26:4e:0d:58:4f:15:2b:6f:f2:
b4:33:71:58:d0:7c:82:1e:d1:fe:bc:a8:68:1c:00:
f9:ad:93:41:ff:af:8a:a6:18:dd:b5:75:86:ba:92:
fe:7a:30:1f:80:7b:8c:e5:ed:16:53:2f:11:ac:5b:
71:43:5d:0e:2c:f1:a4:1d:d6:a6:6d:49:50:34:17:
a0:6a:f7:e8:d7:8c:a3:a4:60:16:8c:ac:fc:1f:0b:
d3:03:31:9e:16:c5:2f:25:e2:1f:5e:a8:fb:48:7b:
1f:30:b0:7f:5d:d6:ba:4b:17:e4:a0:56:ce:46:c8:
de:3d:2c:23:04:9c:ec:2a:a0:3b:60:bd:ae:b2:d8:
0d:ca:07:b1:c0:8a:d6:a9:f6:20:a1:7f:7b:0a:8b:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:DC:9A:C8:E9:07:41:39:2E:3A:E1:C0:77:24:11:E7:ED:E9:52
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7a:58:72:3e:b2:9a:bb:5b:4d:3e:7a:e9:80:15:20:b8:c2:
4a:44:94:18:7a:36:07:f8:62:86:a0:3d:de:33:3a:4b:b5:93:
9c:fc:94:77:a9:ca:c7:41:88:21:8a:67:ba:1c:6e:53:b2:d1:
10:6d:6c:40:6a:25:6c:44:c8:34:2e:99:37:8d:30:a7:0e:3c:
32:ae:04:d4:76:84:53:59:7a:2f:d8:b3:3d:ce:d4:be:6e:fd:
1d:a8:9e:90:07:88:94:c5:dd:49:25:41:82:a4:03:66:8d:4b:
af:f1:25:f0:a1:b7:ae:13:2a:c4:25:82:82:40:c0:32:db:d8:
ee:32:38:80:92:da:a4:c9:b0:f0:29:b3:0e:42:64:cc:d0:c5:
fe:dc:b1:25:d6:98:94:1d:42:8f:23:42:90:c7:ca:37:f8:e5:
d7:b1:85:be:f5:39:8d:b4:30:db:6d:a8:55:0b:04:0a:2a:01:
60:ce:eb:aa:2f:b3:ab:55:07:2c:5e:f5:1e:3f:99:42:99:a0:
7a:0e:f8:69:fb:ca:44:7b:e5:40:c1:26:38:05:3e:78:e9:34:
29:8c:28:f4:de:aa:d3:dd:83:7f:b7:9c:78:91:43:47:2a:52:
b8:75:71:27:90:20:3f:aa:fc:81:2d:41:af:37:2e:3c:e1:ad:
4c:8b:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:26 2026 by rpki-client