Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: zOXzcW7dzGsrnlJ0vGnw78PLH8mhTICeS609VkMS4oE=
Subject key identifier: 2B:92:4B:CC:E6:3F:AC:48:55:9D:03:2A:E1:CE:52:2C:48:D3:92:AC
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019E1D22338E1916F7A8366F4592BDC19E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 056F
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: 0KN4+p7KKXbD61EpdbeVPkdQNIohkVdXdkps5f5mR/k=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:33:8e:19:16:f7:a8:36:6f:45:92:bd:c1:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=2b924bcce63fac48559d032ae1ce522c48d392ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:c8:84:65:bd:3f:09:74:44:b8:75:3a:f8:
2e:62:35:0f:f9:bc:68:8d:0e:9a:81:5c:86:14:7c:
00:41:d2:44:6f:c5:9f:2c:5f:5e:40:3e:19:07:ff:
30:8b:7b:30:67:fb:63:4c:79:36:a8:45:9f:47:20:
fd:2e:75:21:1d:99:58:6d:ad:71:88:67:30:9c:8d:
8a:ef:fa:34:7c:f9:d1:b7:90:ce:9f:a5:60:f4:4c:
bd:71:61:2c:06:69:15:c3:0d:23:3f:2f:27:ce:35:
45:62:41:df:7a:eb:0b:e3:dd:7a:0d:01:d8:66:c6:
17:87:82:5c:fc:14:79:5b:92:22:7e:b1:c7:0e:b5:
0c:f6:d8:ad:2d:9d:eb:5e:b3:d2:01:33:03:6a:88:
e1:95:ab:3e:84:2f:3b:b0:d0:35:47:0f:0e:0c:16:
68:bf:4b:39:0a:6b:73:de:72:d2:51:c8:dc:c9:73:
14:da:e0:bb:73:26:0f:f2:ca:1a:5b:21:ac:40:07:
af:9b:5a:f4:0d:0b:76:15:06:67:56:5a:02:9d:f1:
92:56:40:5a:d4:90:fc:ef:a6:32:f0:58:14:a5:26:
cb:50:3a:6b:cb:d3:61:10:c8:0f:05:08:60:fc:75:
12:4e:48:c1:3c:43:e0:4b:4b:ca:7d:45:d5:5e:7e:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:4B:CC:E6:3F:AC:48:55:9D:03:2A:E1:CE:52:2C:48:D3:92:AC
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3d:e5:d0:f9:bd:90:4f:15:b8:6c:7f:a1:8b:ca:9e:82:6b:
f5:e5:37:25:d8:9e:fc:cb:3b:0b:17:a0:fc:6b:8d:0e:e9:6d:
b0:5b:2d:23:90:9d:72:86:44:e6:51:78:78:e0:e1:74:d9:ee:
1a:e7:c5:d8:d1:84:f3:54:89:c4:c2:e3:fd:af:2f:2c:ee:f6:
49:75:0f:96:28:fc:46:91:fe:c3:3b:bc:bf:73:d6:3c:16:6d:
15:8c:5d:da:78:ba:47:94:00:95:6b:6c:aa:e4:35:1b:bf:ba:
ab:07:f5:c0:52:52:97:b5:d8:64:a6:a0:ce:f2:b9:02:bb:42:
5b:ca:d3:0f:b2:87:72:ce:1e:46:0c:51:06:ab:41:2f:c8:e4:
8e:de:e4:02:4f:b2:1b:eb:12:9e:9f:b3:7d:8e:24:55:eb:2b:
e2:a6:c9:87:07:2c:74:bc:db:1c:b8:9c:7e:51:54:15:52:d1:
3c:47:69:8f:3a:22:b7:bb:ee:63:70:b2:0a:93:b1:0c:b7:db:
30:22:b0:19:2c:c4:ff:48:24:2d:4b:8a:37:8f:85:94:82:3e:
53:27:1c:48:b8:a1:2f:28:e3:b8:f1:7c:08:df:8b:9f:d0:8a:
6b:94:df:6c:33:61:ab:45:54:fd:e0:13:32:0a:f4:90:d4:16:
cf:6e:b4:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIjOOGRb3qDZvRZK9wZ5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjYwNTEyMTcwMDQxWhcNMjYwNTEzMTcwMDQxWjAzMTEwLwYDVQQD
EygyYjkyNGJjY2U2M2ZhYzQ4NTU5ZDAzMmFlMWNlNTIyYzQ4ZDM5MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnznIhGW9Pwl0RLh1OvguYjUP+bxo
jQ6agVyGFHwAQdJEb8WfLF9eQD4ZB/8wi3swZ/tjTHk2qEWfRyD9LnUhHZlYba1x
iGcwnI2K7/o0fPnRt5DOn6Vg9Ey9cWEsBmkVww0jPy8nzjVFYkHfeusL4916DQHY
ZsYXh4Jc/BR5W5IifrHHDrUM9titLZ3rXrPSATMDaojhlas+hC87sNA1Rw8ODBZo
v0s5Cmtz3nLSUcjcyXMU2uC7cyYP8soaWyGsQAevm1r0DQt2FQZnVloCnfGSVkBa
1JD876Yy8FgUpSbLUDpry9NhEMgPBQhg/HUSTkjBPEPgS0vKfUXVXn6YFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuSS8zmP6xIVZ0DKuHOUixI05KsMB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD3l0Pm9
kE8VuGx/oYvKnoJr9eU3Jdie/Ms7Cxeg/GuNDultsFstI5CdcoZE5lF4eODhdNnu
GufF2NGE81SJxMLj/a8vLO72SXUPlij8RpH+wzu8v3PWPBZtFYxd2ni6R5QAlWts
quQ1G7+6qwf1wFJSl7XYZKagzvK5ArtCW8rTD7KHcs4eRgxRBqtBL8jkjt7kAk+y
G+sSnp+zfY4kVesr4qbJhwcsdLzbHLicflFUFVLRPEdpjzoit7vuY3CyCpOxDLfb
MCKwGSzE/0gkLUuKN4+FlII+UyccSLihLyjjuPF8CN+Ln9CKa5TfbDNhq0VU/eAT
Mgr0kNQWz260Mg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:35 2026 by rpki-client