Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: B9PMn5jQlOW4wZgdyJFrsumc+kn4rFZfPoEqOiyQ2F8=
Subject key identifier: 71:9B:34:2A:5C:9F:8A:1E:25:CD:5A:C1:F6:2C:A8:DC:7D:44:9B:1C
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019E1F1116A46BEBA86FECF90594A8C57940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 05AA
Signing time: Wed 13 May 2026 02:01:13 +0000
Manifest this update: Wed 13 May 2026 02:01:13 +0000
Manifest next update: Thu 14 May 2026 02:01:13 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: 0owfrBZTsjLbmDMSZ8SNuwaYeeifHdzFll81XxHsyg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:16:a4:6b:eb:a8:6f:ec:f9:05:94:a8:c5:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: May 13 02:01:13 2026 GMT
Not After : May 14 02:01:13 2026 GMT
Subject: CN=719b342a5c9f8a1e25cd5ac1f62ca8dc7d449b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:2f:e1:ff:1c:1f:55:9f:1f:e1:d7:27:50:
44:48:66:11:88:b8:bd:9b:e1:3a:69:58:e6:d0:9f:
ef:22:e1:8b:ca:fc:fc:bd:ff:bc:f3:a9:50:0e:f1:
09:26:86:c9:03:2a:3c:92:9a:59:73:83:3a:24:29:
7f:7c:ad:88:9e:05:df:81:7a:3d:07:3e:d3:00:28:
72:9b:83:8d:92:6c:b8:fd:8c:de:36:7e:b3:30:02:
cd:28:15:24:e2:12:3e:01:b0:39:d2:0b:27:85:a4:
32:25:76:ab:74:01:95:d7:9d:b0:a8:28:6f:14:10:
45:f2:6a:2d:02:c9:9c:2e:24:39:39:78:e1:6b:d3:
87:11:9f:e2:a5:58:50:71:fa:21:4d:e0:01:6f:72:
38:a8:4e:e5:d5:39:17:50:cf:3f:8e:4b:17:61:9b:
fb:9b:23:ba:99:2d:df:12:95:f2:d8:45:23:b3:da:
67:9e:18:12:90:fe:45:30:53:44:4e:57:51:4a:8a:
0b:67:d8:58:c8:24:d9:b9:5b:a6:01:4c:3c:a1:b0:
d6:d7:79:a3:04:1e:7f:30:14:92:8a:ac:4e:af:9c:
0f:c5:64:ba:fd:c9:a0:cf:86:50:83:49:3d:8f:4c:
73:d7:c9:73:b9:8e:53:2f:16:19:41:b4:07:06:dd:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:34:2A:5C:9F:8A:1E:25:CD:5A:C1:F6:2C:A8:DC:7D:44:9B:1C
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:40:3f:7a:c9:0f:8f:b2:4b:52:b7:21:89:8e:93:4f:8e:
33:a2:84:80:6f:b2:a4:39:ec:aa:fe:c7:51:2e:71:4f:b1:fd:
0a:a1:c9:6d:1a:b7:7b:25:08:78:3a:8b:71:3b:65:b2:10:57:
65:20:ca:6e:75:ac:e2:7a:19:f5:13:e3:1b:8a:01:2f:43:0c:
10:82:a4:75:0a:dc:cd:fc:bf:3d:5a:9e:ca:25:8a:3a:6e:1f:
51:42:1a:81:ab:a5:3d:ff:c7:75:64:c0:2c:82:f7:84:27:bd:
2b:77:5b:94:19:f4:23:3f:92:dc:81:64:63:59:08:8c:8b:44:
f9:23:0d:77:4a:57:b5:07:07:9d:ed:df:34:cd:25:7d:62:c3:
88:bc:77:0e:18:5c:ae:18:14:f8:f5:36:5b:95:7f:e5:09:df:
91:96:3a:70:b5:de:2f:c1:9f:65:3d:f8:86:9a:55:b8:82:50:
24:9d:b8:58:05:71:7d:c0:d5:9f:f0:e1:0a:ea:c6:f2:fc:dd:
bf:f7:e3:e2:d7:91:5e:97:8a:d0:74:bb:d2:3a:0a:91:58:d7:
49:d6:75:52:22:ff:6a:cc:e1:1e:5a:c2:3a:47:70:b1:67:93:
8a:28:8b:47:09:58:49:da:ec:14:c2:8b:b9:d5:c0:e6:81:fa:
2c:76:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:42 2026 by rpki-client