Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: G1GX+I4NFx2QjFxHvp9nzKaJM8bAa6G1ETo/OnKSVgk=
Subject key identifier: E2:28:99:F0:1B:D4:41:B0:2A:8E:DD:CC:2C:21:DD:57:22:1C:97:1C
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019E3072B44DAA9730C10874FCAB9A7D0390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0FCF
Signing time: Sat 16 May 2026 11:01:24 +0000
Manifest this update: Sat 16 May 2026 11:01:24 +0000
Manifest next update: Sun 17 May 2026 11:01:24 +0000
Files and hashes: 1: 1s9edady0IlLFTjAVGX74BTlTOU.roa (hash: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8=)
2: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: 9P8oNFM4cdqjDcbDG2G2BipHLUG6K9UdoOYQZXFitGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:b4:4d:aa:97:30:c1:08:74:fc:ab:9a:7d:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: May 16 11:01:24 2026 GMT
Not After : May 17 11:01:24 2026 GMT
Subject: CN=e22899f01bd441b02a8eddcc2c21dd57221c971c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:2e:93:1c:ce:ad:5c:52:46:c1:64:5e:bf:
8e:bc:d7:0a:b5:cb:4a:b3:02:ad:5a:2b:1b:e3:01:
03:85:4a:b9:d7:e4:2e:c5:2d:a8:51:7c:a3:21:23:
a5:4a:21:9a:22:db:82:1f:5e:c4:fa:a8:91:25:8f:
50:09:0c:fc:a6:f8:f9:e0:ff:06:ec:79:0c:8f:bd:
18:a6:56:92:60:11:ec:2d:32:3a:5f:64:33:84:0a:
74:d3:ad:dc:54:76:ef:2b:f7:4c:ae:37:9b:74:45:
9b:32:5d:91:c1:12:c2:0f:c3:68:e0:eb:5b:90:0f:
41:e2:d2:cf:48:69:af:c4:01:27:2a:3b:3f:a7:25:
88:37:f9:20:e5:92:b4:db:63:1f:38:13:de:d1:89:
21:58:b9:94:aa:e6:ff:e5:b0:94:7c:8c:50:2a:97:
2c:db:d0:92:34:ef:2c:5f:02:d7:c5:ec:7e:11:b5:
1b:64:b2:50:d6:cc:99:04:da:8c:81:3a:cb:65:d7:
8a:6c:8a:66:cb:be:04:97:a9:8b:9c:15:d0:1b:52:
2a:c1:9c:f1:ef:e6:f8:1f:2d:13:d4:0f:a1:49:ef:
e5:7a:4f:12:b8:11:23:9e:7b:ed:f0:71:d3:34:f9:
02:df:8d:60:66:13:06:63:41:82:9f:c3:23:76:2f:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:99:F0:1B:D4:41:B0:2A:8E:DD:CC:2C:21:DD:57:22:1C:97:1C
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:47:d0:b3:b4:66:aa:2d:44:08:61:22:61:ca:d5:df:dc:
1a:da:de:20:52:24:89:ff:39:05:72:ad:7c:66:f6:72:5f:e6:
f4:f5:b9:59:cd:1f:47:06:c7:08:32:58:2a:1f:21:53:84:2a:
30:cf:cc:9c:e7:1a:01:2c:f8:8e:95:dc:18:49:a6:e4:06:14:
a9:63:aa:7e:1c:9a:85:ea:16:7b:c9:7b:c9:f5:43:3f:a8:56:
d1:5f:f0:c1:9f:39:45:dc:54:5a:a5:49:6a:a4:69:b7:72:69:
41:0b:17:40:7e:0f:a4:8f:ec:1f:08:30:c4:9d:0d:4b:9e:27:
b6:80:6d:42:c9:1f:c5:85:ff:eb:19:bc:f8:22:0d:cd:9b:fe:
e2:2f:93:f1:63:d0:b0:61:c2:47:41:25:46:18:ca:73:ba:03:
90:68:80:53:3e:7f:90:42:da:9d:e1:96:87:df:a4:a4:02:a4:
15:9c:b1:4c:13:eb:2d:8a:b6:75:f2:91:e9:fe:79:b2:fd:6c:
d1:48:85:49:8c:2e:4e:53:fd:6d:9b:4e:62:b9:aa:95:1a:a5:
cd:f3:59:15:ee:c4:30:c2:7d:b3:a6:8e:e5:64:51:6c:a4:14:
a4:ae:d8:f9:3d:c4:cd:b4:95:5e:f5:10:bb:f2:31:3a:f6:37:
63:df:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:03 2026 by rpki-client