Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File: 5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier: YzarYuz8Uoq2dE5nRH1Dp471Hp8xt3Y6AjxmA0wf7Lw=
Subject key identifier: F8:43:E0:8B:D9:73:F4:BB:6A:16:90:F5:5F:ED:2F:4E:2C:DD:0F:2F
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 019DCC73DF01C7B3A3793219C08FE14CE18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number: 13B9
Signing time: Mon 27 Apr 2026 01:00:38 +0000
Manifest this update: Mon 27 Apr 2026 01:00:38 +0000
Manifest next update: Tue 28 Apr 2026 01:00:38 +0000
Files and hashes: 1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: leQOHz1rcMY2UVPIV7/eAO6RjNx06ryG9zmyeky4bBQ=)
3: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
4: Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa (hash: jLiOckt+vrx8TOSEJT6TLvtJFvKCadRGVP5+VbDfoXE=)
5: dyKVgNsjZxg_ms1n2E7Bfw10stc.roa (hash: BqmZyOOtyNCSkSJ7x/mGSb0glowMzHs3l/S8+cc3Vzw=)
6: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
7: krebELS6FLfilnA__hBq0uhvWyo.roa (hash: XGJZqlWxpa74go/FmTdiLNyWAGB5hXKCDhTD8hHKfr0=)
8: r6u9dpLSj0CY155j3O_twzf6XaM.roa (hash: 5n0yIUoXlWVJAu7RaNAjMF0M5FSiyxRzAHjcXV59g30=)
9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:df:01:c7:b3:a3:79:32:19:c0:8f:e1:4c:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Apr 27 01:00:38 2026 GMT
Not After : Apr 28 01:00:38 2026 GMT
Subject: CN=f843e08bd973f4bb6a1690f55fed2f4e2cdd0f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:0a:8f:0b:72:af:40:d5:a5:3c:87:06:c6:
a1:e4:19:aa:89:41:52:b7:b9:5a:63:a9:a3:74:36:
b5:1f:8b:64:2a:1d:a4:f7:3e:83:03:8a:96:e0:bd:
89:27:07:2f:fc:8f:11:69:b9:b4:49:9d:6b:0f:c2:
b6:c5:38:f2:87:15:a1:f1:6c:ee:b3:46:90:cd:a0:
7e:dc:93:b7:fd:28:78:68:c0:17:2f:07:82:bd:18:
46:b4:97:97:d3:69:01:a8:23:0c:86:84:06:24:72:
af:84:0e:d6:f7:6f:7e:76:04:96:02:77:ef:37:da:
01:ce:05:98:d8:53:13:fc:ff:46:ce:4a:1d:0a:1d:
45:d3:72:c0:f9:fe:48:9b:cf:90:5a:38:ba:40:92:
b6:09:63:00:5d:d3:d5:f6:57:ca:2e:d1:c2:64:64:
db:01:89:92:0a:af:34:12:6d:f6:86:42:fc:c9:57:
8d:e5:10:a4:2b:5b:af:28:57:bd:60:e6:78:0b:d3:
6f:6a:ee:b1:08:a6:bd:36:e2:e3:0f:cf:3b:9b:5a:
b2:ad:2b:5b:e4:19:10:66:49:6e:3c:38:bd:4a:02:
4c:96:07:07:bb:66:9c:61:ea:e0:fe:e6:9a:d1:ba:
52:28:7e:c1:bd:dd:a2:1f:43:27:fb:a7:49:16:66:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:E0:8B:D9:73:F4:BB:6A:16:90:F5:5F:ED:2F:4E:2C:DD:0F:2F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:2b:26:77:a5:2f:03:5b:8f:ad:ab:0d:c6:d0:9b:fc:77:
ce:0c:73:0a:6e:1e:22:6a:ea:5f:e0:42:42:a1:9a:26:a3:ea:
0b:eb:36:7a:62:e2:7d:ac:aa:03:9c:18:f6:33:f9:9c:cf:2d:
5c:b3:be:9b:1a:af:81:7b:32:ac:20:00:d8:d0:d5:20:b2:66:
f4:00:0c:28:74:58:4d:3b:59:ca:1f:80:10:52:eb:9c:7d:d4:
df:4a:3c:a9:9a:20:8d:02:45:b6:b7:8c:44:d4:ce:7c:ee:67:
50:7a:ab:f2:f8:ff:e1:4a:d0:ba:a7:54:f4:f3:eb:87:5b:a5:
44:c6:6a:30:cd:19:a5:45:5f:52:3d:44:31:1d:49:f0:a1:75:
cb:2d:65:4f:37:66:2b:9b:a5:ca:cf:08:28:2f:00:f3:96:96:
6b:20:2f:28:c4:a8:5b:6a:b3:7b:e5:d2:b8:66:af:5b:f7:74:
fd:4e:24:07:8a:b3:cd:70:bc:ef:37:1f:37:16:11:9a:c6:4a:
4e:9a:1f:29:f9:25:9a:55:65:f2:08:b3:08:15:cf:0f:34:b1:
a9:6e:9d:b9:27:89:0f:64:45:53:6e:b5:75:14:b1:26:6a:be:
82:ab:16:3c:c3:81:4d:f2:f0:d2:0e:d9:86:56:2a:2b:bf:70:
c1:8a:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:12:24 2026 by rpki-client