Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: u/YYtHxexjUBxEtvu5LHFv9Y8Duc6cMH+4pClSFFOso=
Subject key identifier: 24:45:1D:2F:77:1E:4C:F7:81:69:13:5A:CC:23:42:73:17:CD:34:E8
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019E1BD90D3FC80AEAFCA688A8B97A74C458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 11:01:09 +0000
Manifest this update: Tue 12 May 2026 11:01:09 +0000
Manifest next update: Wed 13 May 2026 11:01:09 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: 4SPqYyaoK15FdR4a2tNQAs1+NPIDxStO/Bn7GUpD+B8=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:0d:3f:c8:0a:ea:fc:a6:88:a8:b9:7a:74:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: May 12 11:01:09 2026 GMT
Not After : May 13 11:01:09 2026 GMT
Subject: CN=24451d2f771e4cf78169135acc23427317cd34e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:cb:75:99:f2:e5:9b:f3:90:55:3a:2e:60:
7f:63:ea:d2:66:f8:96:28:23:b4:26:6b:f9:c8:28:
2e:08:ed:56:d4:7b:38:f3:da:70:76:32:8f:cb:c0:
84:25:e2:d4:4f:fe:8d:21:82:0d:c9:9e:c9:2d:c8:
b3:56:7e:3d:cd:81:7c:34:1e:3d:0f:b4:a1:82:54:
fe:f5:59:43:7d:c3:5d:e0:c2:e9:47:bf:63:14:b0:
2d:b6:b3:76:a8:db:a1:bc:02:56:b8:4c:52:9b:60:
a1:fb:d5:3d:6b:e4:d1:7b:0d:de:27:c1:2c:3c:7b:
8a:59:2a:25:36:c7:46:c5:04:07:d3:c1:39:32:77:
0f:8a:2b:25:d3:3a:6b:14:8e:b7:5c:d3:6d:67:28:
5e:9d:02:39:e1:63:bc:b8:cf:b3:f5:fb:eb:97:73:
2d:24:48:d8:ef:42:44:41:3e:b5:39:7f:42:67:ec:
be:07:6e:84:55:21:df:f6:32:73:4f:0e:52:76:35:
1c:06:1d:66:09:4a:b5:5a:7b:0f:06:b0:92:6a:29:
c2:26:b0:b4:df:61:8d:26:7b:b4:2b:e6:2a:4d:df:
5b:63:bf:42:be:af:3f:2d:ef:10:3b:83:b0:44:59:
03:96:74:91:aa:e8:7e:33:6d:bf:bd:f7:44:ce:6f:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:1D:2F:77:1E:4C:F7:81:69:13:5A:CC:23:42:73:17:CD:34:E8
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a3:1c:b3:ee:82:84:67:a1:cf:b8:4e:41:c1:1f:24:64:c7:
62:4f:11:d1:b3:4a:f7:3c:4b:c1:18:ab:d6:87:98:3f:f7:08:
cf:44:d8:a2:65:9e:fe:5b:3c:a4:30:03:e8:f0:78:e7:4b:db:
1a:4a:61:ad:5e:91:c9:37:c9:e7:4a:4c:79:57:a1:d1:c0:e1:
1e:c4:ee:cc:57:77:4f:7c:b8:91:6e:8a:f1:dc:c7:78:20:ef:
89:3d:e0:43:34:6e:e2:49:53:f1:e6:86:f9:b6:42:a7:f6:54:
32:18:04:28:cf:8e:47:d6:28:ef:0b:06:e7:8b:b5:aa:1d:dd:
d1:39:a9:0b:86:d3:5c:f0:6e:2e:cb:03:f1:05:a4:f2:07:9f:
2e:e1:30:05:84:2b:8c:ac:54:f3:bf:0b:99:29:93:40:21:e0:
8c:8d:0d:f5:fc:5e:bd:87:e0:1d:61:9b:87:c7:ec:f1:72:40:
53:34:e4:fb:0a:b9:e3:ee:92:4e:66:b8:6d:f2:c1:5b:bc:7d:
50:53:ee:22:48:d4:b7:88:7d:75:2b:5b:ff:8f:07:ac:2b:8a:
97:ea:01:e7:f2:b0:af:d4:54:37:7d:f6:c4:16:22:57:f0:8d:
d0:55:75:6e:f6:ed:4e:47:50:65:ed:ed:f3:7b:a4:51:bd:8d:
f2:75:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:08 2026 by rpki-client