Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier: RRhacu0Q+PfqAobCRslBuyOgq/1J0SDvIfaQOTMwpIU=
Subject key identifier: 60:0C:89:A7:5C:82:F5:3F:B4:B6:54:F8:A2:97:89:43:73:D3:B9:3A
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 019E1CB4A5C6E3C22BE53709D46079413EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number: 0AC9
Signing time: Tue 12 May 2026 15:01:01 +0000
Manifest this update: Tue 12 May 2026 15:01:01 +0000
Manifest next update: Wed 13 May 2026 15:01:01 +0000
Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: 0+NSImkMUgE0Iqx7Um3HsTH/ncrO7XmOd+RJLZjOt/8=)
2: nwkylzsl9GQOKn32orn5yakjbK0.roa (hash: /75YPo5s/Ms0uyukdFXeyU5GUYakwPsjdM3EpdWBr4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:a5:c6:e3:c2:2b:e5:37:09:d4:60:79:41:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: May 12 15:01:01 2026 GMT
Not After : May 13 15:01:01 2026 GMT
Subject: CN=600c89a75c82f53fb4b654f8a297894373d3b93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:b9:fb:01:55:91:72:d6:97:bd:2e:bb:5a:
c5:39:91:2a:0b:10:8b:5f:21:dc:6d:cb:56:7f:6e:
0b:5e:1d:67:ea:e7:97:d3:07:1d:f2:46:8a:89:2a:
2b:af:b3:29:b7:30:1c:e6:af:60:60:de:b2:51:fa:
4d:81:de:d4:aa:ce:b2:30:45:49:e4:87:9f:cb:be:
0a:b2:cb:e1:93:02:57:c1:2f:55:db:36:a8:fa:d7:
14:59:c2:c1:e8:7a:e1:2d:71:02:99:d5:11:c9:52:
af:b0:9c:8c:f1:03:2b:6c:f7:62:c1:96:d3:b2:2d:
75:55:c2:20:76:82:2c:6f:db:9b:42:e6:f0:e0:38:
97:8e:82:ae:e5:58:cc:35:ee:cb:d1:60:41:11:02:
d5:a0:8d:e7:db:3f:b8:f6:bf:4c:3f:24:c6:39:55:
cf:78:41:ac:43:6f:1c:54:47:06:cd:93:ee:3d:dc:
b1:c0:d8:b7:09:99:74:c1:9f:0b:22:e2:d4:49:f8:
80:f0:02:d4:f7:f9:67:1d:24:55:3f:1a:29:9d:b9:
30:25:83:82:2c:f7:82:64:a2:ba:2f:37:ca:39:cc:
3c:2d:e0:74:47:66:0b:32:59:69:51:44:0c:71:59:
fd:77:8b:46:8f:8a:73:25:18:b9:11:1d:80:18:47:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:89:A7:5C:82:F5:3F:B4:B6:54:F8:A2:97:89:43:73:D3:B9:3A
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:65:d5:b4:32:01:61:6b:31:d2:ee:38:66:10:68:2a:9f:49:
8e:1e:b0:55:89:0a:9d:6b:85:3d:a0:7e:2a:aa:12:db:1f:e5:
d7:e1:7d:68:c3:9c:8c:26:7b:30:fb:73:c8:2b:62:17:74:b3:
49:1a:41:2f:a3:21:0d:4b:ed:3c:bd:1f:30:78:13:85:d4:63:
47:05:59:5b:6f:8d:05:bd:01:58:5f:5a:6d:b4:d0:7f:a8:a5:
cd:06:b6:3c:80:35:1c:df:3b:18:f8:3d:d0:0b:53:fd:9b:4d:
00:03:a5:91:9d:2b:8a:7d:ef:a8:1e:a5:26:3e:44:75:67:da:
c5:35:0e:15:f1:2d:54:8b:70:b7:b3:eb:0f:19:62:4f:35:b4:
a0:9e:9f:c0:02:58:bf:d7:08:95:a1:6a:90:65:40:47:27:c3:
d6:43:e6:f6:72:c2:b2:bf:fb:d9:5e:ac:d5:5a:8f:f2:6b:87:
6e:c5:b6:23:54:42:bc:34:32:d6:83:6d:7c:0f:d7:fb:78:d2:
59:c1:30:26:22:4e:72:92:68:94:83:f3:9a:38:17:f3:92:3b:
2f:5c:4e:11:ad:bb:7d:af:73:ef:16:62:e7:57:9c:c0:a9:7e:
e5:e1:a8:14:15:34:d9:37:e9:29:a7:47:24:d8:c5:88:c5:73:
44:a8:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:19 2026 by rpki-client