Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: B5DPMxIATnLERL34yIAEw+3I1Bw6AdD5gxfmBe3k2iA=
Subject key identifier: 55:55:AF:CE:BF:D6:0C:50:F2:2D:33:60:DA:69:87:2A:B9:68:46:DC
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019E30E0211CD9A49ED65976F3AA7E23659F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 0523
Signing time: Sat 16 May 2026 13:00:55 +0000
Manifest this update: Sat 16 May 2026 13:00:55 +0000
Manifest next update: Sun 17 May 2026 13:00:55 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: 0FYNByN3WsDy3WkLNP7UbLmEUNF2p3jfhIyhTMbiIhs=)
2: DVxcthJ5zcZ8COkBA3rotGAlLFU.roa (hash: vJnipHRerz0UttumCZypDHr2IzvHL7fPbWoqduV1jL8=)
3: iDjUHReMaiMBvtjZdmRz4HvetFg.roa (hash: jPu0BoNWhKVwiGPpdPSY4iU5CH4YO6NsUMtetTUIS9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:21:1c:d9:a4:9e:d6:59:76:f3:aa:7e:23:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: May 16 13:00:55 2026 GMT
Not After : May 17 13:00:55 2026 GMT
Subject: CN=5555afcebfd60c50f22d3360da69872ab96846dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:c2:a2:18:8d:b6:c2:21:e2:66:c3:5c:b5:
73:7d:2c:40:b0:b0:32:dc:f8:65:dc:90:08:a8:ab:
cc:c2:4f:1d:44:b7:92:4d:1b:22:4d:65:67:cd:95:
eb:bd:47:c4:27:e0:0f:72:39:74:b3:1d:ef:0f:99:
4d:da:2e:0e:18:4f:1c:7d:ae:44:86:6c:ec:13:26:
d2:6b:11:8a:d5:ba:79:d9:7b:15:59:9a:0d:7f:86:
af:fc:c5:11:ab:c0:f4:3e:66:96:8e:f0:67:cb:15:
19:46:49:96:26:1c:5c:ad:2e:d7:c2:2e:37:4b:e5:
53:86:33:49:e7:d0:0f:b0:39:9b:d0:84:9a:c0:ae:
cb:2d:fd:ad:19:1e:e6:1b:ff:f8:d6:41:9e:d9:44:
01:66:78:aa:32:27:da:79:5c:ea:a6:fc:f4:e3:3d:
8a:a4:f3:73:24:df:ea:31:b2:1f:2c:df:d5:44:e0:
19:a8:5a:a1:00:84:ae:1f:b3:4b:1b:6d:d4:4d:ca:
67:b4:38:c6:d3:35:bf:58:55:c2:67:86:bd:bf:26:
d4:d2:69:e2:46:55:e7:79:b7:3d:4a:20:78:06:a3:
63:a2:82:bc:64:b7:1b:7b:f3:d3:1e:a1:27:b3:7d:
70:14:56:03:2a:55:06:28:e1:22:19:b7:13:bb:1d:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:55:AF:CE:BF:D6:0C:50:F2:2D:33:60:DA:69:87:2A:B9:68:46:DC
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6a:8b:37:2f:28:42:65:ea:25:37:ee:67:48:0a:76:13:93:
18:9b:d7:d2:e3:d2:f0:4d:57:8c:c7:18:23:d4:eb:3c:8a:49:
66:46:6d:d1:28:7b:6a:ab:e6:53:9a:65:7e:31:5a:ab:cc:ac:
61:97:1b:e2:45:5a:5f:cb:1f:36:65:49:43:1e:4a:f2:9a:ee:
bc:3b:b4:b8:2a:23:b7:a4:ac:a4:12:7f:68:c6:75:df:a6:06:
ae:74:87:c9:c0:93:d3:d4:95:49:8b:e8:bd:4d:af:7c:d1:fe:
c2:92:2f:21:5c:86:ba:ae:53:73:6a:be:39:88:7b:17:60:6c:
f2:a3:d9:3d:62:b3:e2:31:5c:df:8d:33:7e:ed:85:87:c7:6b:
dd:16:69:b8:1b:d6:f7:ba:20:ff:7a:97:42:c7:c7:e5:e9:fb:
4f:96:4b:ff:ef:d1:61:4c:da:54:af:2f:72:da:dd:fb:dd:75:
75:33:d1:df:5a:cd:03:f9:cf:7d:92:2f:49:99:d2:f5:00:ae:
1c:ed:d2:33:42:43:71:f9:65:40:5f:45:41:24:e7:b3:25:12:
48:f8:a9:34:57:e7:b5:b7:45:a0:24:27:22:1e:25:c4:63:37:
89:5f:b5:c4:a9:ce:1d:e7:92:7c:e7:24:b6:4a:6d:c9:ea:2b:
71:44:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:10 2026 by rpki-client