Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: 6Q43/79EnckOnF8Le4VAyAFtxMUfSoXT7BXaMvpd8Iw=
Subject key identifier: E0:07:B8:F7:56:45:A1:4B:78:90:38:13:62:7D:19:F1:41:7F:40:DA
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 019E1C467A473068E0E7A0BC2B02DE7BAC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 044F
Signing time: Tue 12 May 2026 13:00:41 +0000
Manifest this update: Tue 12 May 2026 13:00:41 +0000
Manifest next update: Wed 13 May 2026 13:00:41 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: beu7gHvzDxVOAmlCYbwwgGnlwy4KAlc+IBy7PBrfJDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:7a:47:30:68:e0:e7:a0:bc:2b:02:de:7b:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: May 12 13:00:41 2026 GMT
Not After : May 13 13:00:41 2026 GMT
Subject: CN=e007b8f75645a14b78903813627d19f1417f40da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:29:0f:88:5c:0d:61:d0:e7:c7:34:84:d6:
c7:1d:c2:eb:68:f5:8b:ab:f0:79:d1:d4:e4:e1:fa:
48:d2:9b:cb:f9:2b:c4:39:6c:a6:71:6b:15:e6:a9:
2a:6e:d3:da:3f:ba:f4:38:98:cb:90:86:c2:c8:7e:
20:d2:c0:62:36:e6:b4:c8:18:b7:9e:f1:17:bd:e6:
5b:ee:5b:df:d6:ee:55:b5:d3:a6:d5:55:8f:57:00:
64:0e:f1:08:33:3a:23:31:9d:71:81:5e:62:18:24:
a4:23:cf:40:1d:4b:e2:b6:d0:b5:73:77:77:a5:16:
50:49:02:0c:fa:60:84:d5:d8:8e:7a:56:ec:f5:5e:
89:9a:27:27:f3:2e:d5:e5:cf:94:d7:16:45:f0:d1:
41:0e:6f:e8:f5:8f:8f:1c:d4:db:7a:fc:6f:7e:a3:
5a:23:6b:d2:c6:b7:69:c5:d3:bb:ab:9e:4b:30:81:
cb:32:a2:d7:90:b2:90:3d:63:79:08:af:91:7d:de:
0a:f7:71:7e:79:48:54:c5:1b:5d:32:47:0b:13:27:
81:dc:31:5b:5a:20:de:45:b7:b3:03:f2:fe:de:55:
a6:df:5a:ab:73:fd:c3:6c:fe:0f:75:82:b6:c7:0e:
2b:0a:cf:70:6f:fb:ae:b7:1d:71:97:8d:5d:cb:14:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:B8:F7:56:45:A1:4B:78:90:38:13:62:7D:19:F1:41:7F:40:DA
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:aa:a0:39:c3:ce:f9:26:26:bf:86:c8:be:b3:7e:73:8f:
c4:84:69:5d:f6:55:77:14:dd:3a:ce:5b:5f:54:c3:65:4c:4a:
0f:ca:6f:70:5e:f8:5d:40:75:e8:b5:b5:11:57:b7:e0:16:a7:
63:ac:a1:63:55:5e:0c:64:b3:dc:5b:b4:99:a5:45:28:68:87:
e6:f5:f6:74:68:23:5d:17:09:b4:29:47:31:98:db:c8:08:41:
c7:81:66:71:dd:5c:6d:4e:af:7e:57:fc:e8:95:37:99:d9:71:
6f:70:d9:ca:b3:0f:50:80:5d:7f:9b:0f:b0:dd:d6:22:75:e0:
9f:0e:37:89:7a:4a:87:94:2e:91:fd:7c:6d:23:88:3b:0c:19:
34:af:e2:c1:01:13:65:6b:3e:6d:27:9d:f6:60:e5:cf:cc:68:
a5:8a:8a:a9:33:5b:c2:38:33:74:db:dd:a5:d1:86:96:af:1b:
49:d8:37:f7:88:01:0e:04:70:64:ee:03:21:ad:44:1c:76:45:
1b:54:99:4d:45:b4:8c:76:d9:14:01:7e:77:aa:00:2c:fd:0d:
7d:25:73:7e:a4:7e:ab:a5:b7:9b:8e:8b:c8:af:f3:db:ab:0e:
72:81:34:34:05:84:e9:91:c1:8d:7b:f8:e5:9e:dd:39:0d:cb:
b8:88:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:52 2026 by rpki-client