Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: l3h6cqTZsGQLiIvAYFQqj4P7Hr97DZR/aj0gNk1qxZA=
Subject key identifier: A9:9C:27:99:E5:AB:92:4A:0B:E9:5D:15:F1:CB:F2:DE:72:F0:C4:0E
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019E2FCDD17163960C25E38B213851A81E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0CFF
Signing time: Sat 16 May 2026 08:01:18 +0000
Manifest this update: Sat 16 May 2026 08:01:18 +0000
Manifest next update: Sun 17 May 2026 08:01:18 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: IU9FQSpjLzekvqLkxuaECIO4MhfYOyAb0l4e2/xse3o=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:d1:71:63:96:0c:25:e3:8b:21:38:51:a8:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: May 16 08:01:18 2026 GMT
Not After : May 17 08:01:18 2026 GMT
Subject: CN=a99c2799e5ab924a0be95d15f1cbf2de72f0c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:de:26:72:90:dd:6b:4d:08:da:c7:2c:e5:
12:20:00:2c:21:73:b8:b5:2b:1e:b3:e0:ed:eb:fa:
2d:94:bf:fd:58:c5:7e:69:c8:b9:af:93:cd:48:89:
9c:e6:de:e8:e3:6e:6d:b2:8e:f5:e7:1b:4b:50:e8:
6f:e6:92:1b:db:24:56:a7:d4:a6:92:ff:a1:f3:f9:
c2:15:3c:d9:28:20:2c:67:6b:9b:6a:a3:ca:ba:a3:
07:4c:44:30:47:57:d0:ca:91:5a:7b:08:83:ea:c9:
f5:0d:0b:08:90:67:2d:a9:35:0c:5f:49:2a:c7:59:
79:e5:94:63:ba:1c:4e:df:c6:fb:36:e9:cf:81:b0:
12:f0:85:82:33:3c:f2:94:33:b0:11:ce:77:54:58:
fa:df:36:e2:40:62:16:47:c3:5f:d3:96:9b:53:31:
0b:fc:a7:c3:d7:52:7c:91:81:72:47:c0:8b:7e:0a:
25:fa:cc:57:05:6e:6f:3b:7a:af:56:60:b9:25:52:
68:3d:8e:e7:e6:1b:8c:74:87:17:92:22:86:9c:5d:
05:64:1a:d0:a3:f5:b0:5d:0d:4f:19:6e:59:d2:d2:
4c:d6:5d:bb:87:4c:8b:4a:06:53:5c:10:b4:26:f8:
1d:34:d3:97:50:a6:d0:f2:88:9b:7b:7b:c3:ad:ef:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:27:99:E5:AB:92:4A:0B:E9:5D:15:F1:CB:F2:DE:72:F0:C4:0E
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:0f:8d:be:c4:33:f4:91:82:d8:2c:ad:63:d3:50:00:24:
9f:42:54:0f:3b:1d:91:c6:1c:16:0c:a5:c8:78:94:9d:d3:fc:
a5:0e:38:69:6b:b0:a7:1d:5c:a3:27:75:25:00:69:76:f2:5e:
dc:4e:6d:fe:09:99:ea:bd:6d:c1:f7:28:aa:d9:91:d8:d2:3f:
ce:96:b3:77:13:37:d9:86:e2:3b:b3:66:c0:08:25:d8:6f:a3:
c1:c5:16:e6:80:30:8c:30:40:5a:9e:e2:71:75:2c:c5:99:98:
4c:5b:01:25:45:04:1c:ba:8c:97:f4:b8:40:5d:59:56:06:ea:
c3:b5:71:6c:b2:0a:98:c1:c9:a1:ae:c3:5e:97:72:17:49:fa:
60:18:a2:ac:45:7c:df:05:ab:0f:3d:74:cc:cf:14:9e:00:36:
14:0c:7d:30:f3:dd:51:f0:da:bc:aa:39:d6:49:2b:73:7a:53:
f0:04:42:c5:33:f3:96:0c:4e:b5:ed:24:a2:0f:6d:b1:92:db:
b0:70:b6:d5:2c:9f:16:a4:06:19:fe:65:b4:e9:a1:fd:82:37:
4a:4d:0f:75:c2:33:5c:9d:1b:d5:cc:ee:bd:61:a9:b6:5c:84:
06:d1:8b:b5:18:98:9d:17:d5:82:30:a6:bc:e7:9a:2a:4a:3e:
71:bc:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:43 2026 by rpki-client