Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: 3DzTKZBMtwYHGh5hF/8Km+SDS6PBG2EcWIsvo5/4y18=
Subject key identifier: C1:44:87:22:32:42:AA:28:42:4C:17:54:14:60:17:03:71:B7:36:99
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019E30047192E46B8A34048041B9331D6B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 15C1
Signing time: Sat 16 May 2026 09:00:58 +0000
Manifest this update: Sat 16 May 2026 09:00:58 +0000
Manifest next update: Sun 17 May 2026 09:00:58 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 2J1ciXO+AaLEItqHnLhiAm69YnB0ELKlC0hulyZkZsw=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:71:92:e4:6b:8a:34:04:80:41:b9:33:1d:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: May 16 09:00:58 2026 GMT
Not After : May 17 09:00:58 2026 GMT
Subject: CN=c14487223242aa28424c17541460170371b73699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:4b:f9:19:28:05:69:f0:41:d0:ca:c0:c1:
f2:38:6c:29:85:0e:67:72:0d:a1:fa:14:a8:b8:4f:
af:53:d0:59:76:85:47:f9:56:1a:33:1a:52:67:2c:
43:cc:18:31:b1:3a:22:4e:bc:b4:d1:b2:cb:df:72:
a1:44:51:ee:15:c4:d1:2c:b8:3b:a5:01:63:3d:f1:
15:d7:e4:46:cb:49:d0:ff:d9:22:ca:b4:88:cc:21:
82:75:6b:6a:98:1d:8a:18:5c:c4:9f:28:ca:fe:6e:
2d:a3:05:ce:6c:99:c3:44:0f:46:37:9a:b3:2c:6c:
01:cf:b0:d3:e2:22:e4:ff:84:78:96:4f:7f:39:74:
68:e1:86:06:64:60:6b:13:02:83:65:81:b3:18:bc:
3b:60:69:e5:72:71:6a:7d:a7:dc:c1:ec:0a:08:68:
45:c1:91:43:4d:84:f4:59:cb:65:72:0e:a0:e5:1d:
0a:ae:ce:31:8f:e1:66:37:18:18:3b:be:5a:07:04:
5c:1c:9d:d8:d6:d0:ce:8f:ca:aa:0f:f7:d0:1b:39:
be:25:09:65:c8:cc:c5:33:8a:72:95:1f:2a:8c:12:
26:41:c6:fb:ff:b0:1f:46:5c:33:d1:76:c8:5e:3d:
b0:99:ec:1a:39:11:46:52:74:2a:63:eb:0b:94:d6:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:87:22:32:42:AA:28:42:4C:17:54:14:60:17:03:71:B7:36:99
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bf:7e:2a:6a:8e:8b:5b:9a:65:cc:db:e6:51:a0:f4:9e:42:
39:f4:70:f7:1a:37:8d:78:cf:ca:0a:ab:63:e3:40:94:e3:4c:
f5:c7:8b:19:25:14:c8:df:30:e3:d9:4e:50:38:ac:6d:57:51:
2b:03:80:0c:43:b6:22:e2:08:f8:c7:fb:53:4e:64:83:d2:60:
8f:96:90:9f:41:e6:f3:2f:a0:66:74:61:c1:db:02:86:bf:9d:
56:3d:eb:4c:18:b6:32:34:d6:29:d7:d0:1c:f5:91:be:6d:53:
0b:c4:1d:64:2f:6f:32:e5:eb:36:01:1e:32:af:f8:3c:6d:1d:
03:d8:03:36:5c:6e:f1:49:75:b3:35:bf:9a:b0:12:b2:ab:c3:
0d:52:9b:6e:cf:73:ea:99:1e:a7:eb:12:9f:33:c1:d1:13:aa:
4b:2b:b4:f0:0d:01:9d:cb:63:e7:78:0a:e9:9e:d9:b6:2d:3e:
b9:c8:cd:20:4c:e2:f0:ff:f4:a9:5c:7b:79:63:89:26:ff:12:
0f:f0:71:94:49:66:b3:84:18:f5:0d:c9:fc:d3:e8:30:49:08:
ce:aa:7e:4f:cf:44:38:16:cd:e3:72:58:41:57:3c:da:bc:0f:
68:ba:05:65:5d:92:9d:83:4c:2d:ba:44:2b:ae:5e:eb:47:29:
dc:a0:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client