Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File: 5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier: BFITXpXQwX3qPp9UT4dzgxpDy2OuFDoJTtIZp5/V5sU=
Subject key identifier: CE:38:BE:41:5A:74:0B:C0:4A:EB:F6:58:DD:00:F8:14:7B:95:50:86
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer: /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial: 019DFFF3F2E4436D3F8CED8AD29591A0EEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number: 0140
Signing time: Thu 07 May 2026 01:01:10 +0000
Manifest this update: Thu 07 May 2026 01:01:10 +0000
Manifest next update: Fri 08 May 2026 01:01:10 +0000
Files and hashes: 1: 1K-wZ5uPostKh-fkGAk4IVnMfEQ.roa (hash: T108aWezzyk0uJTlEQH1843+W6VdA3vjDPONZfC4M34=)
2: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: lDQKxDc2M4mdabFgIHwVKR+inc6I66vWQB+zYwhuieQ=)
3: WJpRhcAh1CAtYyAM_DLd9bpr2Js.roa (hash: /W0CGNihCPhIf7S2HH4RB+ml0KPuTVy+3/SiD+h8lEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:f3:f2:e4:43:6d:3f:8c:ed:8a:d2:95:91:a0:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
Validity
Not Before: May 7 01:01:10 2026 GMT
Not After : May 8 01:01:10 2026 GMT
Subject: CN=ce38be415a740bc04aebf658dd00f8147b955086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:31:cd:45:8f:47:ef:16:13:fd:86:f1:17:
73:6d:16:cf:39:e0:c1:cf:01:a1:55:af:17:8b:2e:
0b:6d:74:78:b0:82:3c:18:40:19:41:33:b4:cb:9f:
29:f6:cc:e4:62:b0:06:56:88:c6:48:ab:47:e6:00:
b5:15:4a:1d:e2:e1:c1:0d:df:4c:f6:94:0a:a6:5e:
85:03:49:fa:ef:7f:c0:c8:3f:65:9d:9f:51:1e:1e:
bf:2b:5f:b9:96:0d:72:ae:d2:f2:bd:9b:07:1d:3f:
7d:0b:8b:3b:37:09:ed:7f:70:2d:56:45:e4:35:c9:
a2:2d:cf:94:41:0f:99:8a:a1:e4:e9:3d:14:7c:16:
26:6d:73:11:a4:2d:41:11:83:36:b3:92:57:9a:6d:
76:cb:98:68:33:aa:6f:8b:3e:18:c7:21:15:0a:42:
bb:50:a8:48:30:9e:48:5a:63:07:ea:f6:98:52:e3:
dc:72:33:46:31:30:1d:bc:a1:87:00:56:34:49:63:
a8:44:f4:f5:bd:5c:c1:a9:7d:b4:d0:fd:a0:b3:ee:
3b:5f:3f:c3:02:e8:dc:70:f6:f2:68:0b:22:0c:03:
e7:82:a4:e9:1a:1a:8a:47:f9:e2:f1:5b:79:2b:a1:
1f:87:56:38:cc:93:38:71:7d:66:ce:fe:33:91:f1:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:BE:41:5A:74:0B:C0:4A:EB:F6:58:DD:00:F8:14:7B:95:50:86
X509v3 Authority Key Identifier:
keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:74:2a:d4:02:68:e5:fd:ed:d2:cf:68:46:66:68:4e:dd:
55:4a:69:b9:18:8e:5a:80:31:0f:e2:19:74:80:a9:f4:37:41:
b9:fc:11:68:ae:91:07:f1:98:ae:2a:42:69:76:4a:c5:4a:02:
79:81:d9:8f:0c:77:5d:5c:47:30:f0:70:e6:a4:9c:2b:dd:59:
84:fd:93:ae:40:f7:46:41:5b:f2:97:11:61:3c:22:44:22:08:
09:3d:84:41:28:7a:9f:47:37:02:f7:9b:9c:7f:47:36:49:61:
d7:22:70:ef:c9:40:1e:a3:79:5e:75:dd:b5:fe:23:bb:4a:1b:
bc:c9:42:bf:52:9e:2f:c6:9e:30:66:4d:a6:ce:eb:08:67:f2:
07:0e:27:3a:dd:c5:a8:93:43:2c:41:01:de:cb:eb:f3:c8:ad:
00:b3:fa:80:03:57:bf:0e:37:65:3a:9a:20:ac:09:a4:45:c3:
e0:af:04:d3:a8:fe:a0:c3:1e:a7:1c:bf:a2:e7:cd:b8:94:31:
64:08:f8:ab:fe:d2:2b:49:18:25:c6:dc:47:92:7a:a9:09:c6:
6c:37:8a:72:56:de:9e:bd:68:87:fa:9b:41:a6:67:ae:5a:c2:
c6:c4:0c:c4:27:4b:0b:7d:21:3a:e0:42:4b:b8:cd:0a:6c:11:
9c:93:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:36:47 2026 by rpki-client