Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: G2mvgylZa660q8FwMsmxleFDqXUjaDsJJUdIhLpb+2w=
Subject key identifier: 7B:4D:A1:0D:BD:C9:A8:53:33:74:72:2A:54:22:AA:AA:A4:71:F8:0E
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019E1D90D32BF2A8DDEF75C30560FA42AB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1086
Signing time: Tue 12 May 2026 19:01:30 +0000
Manifest this update: Tue 12 May 2026 19:01:30 +0000
Manifest next update: Wed 13 May 2026 19:01:30 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: KC5FRzQ2tBSZ3V90My3Rts1sCHZeg7UUTUb0iiSMc90=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d3:2b:f2:a8:dd:ef:75:c3:05:60:fa:42:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: May 12 19:01:30 2026 GMT
Not After : May 13 19:01:30 2026 GMT
Subject: CN=7b4da10dbdc9a8533374722a5422aaaaa471f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:58:cd:3c:93:b4:24:e9:23:a3:8b:39:62:
98:15:22:9d:5b:b8:24:da:ec:a0:23:54:8f:59:96:
78:d5:80:a2:8c:6a:7b:98:08:a9:5a:62:ee:34:11:
b4:41:f8:c4:e1:ea:e4:8c:71:56:34:06:c8:c0:8d:
3c:c9:80:29:c4:0d:a9:7f:0d:0a:b6:9f:84:41:64:
a8:1c:51:5b:d7:97:e2:e1:c7:8d:98:47:8f:b4:43:
45:8e:22:19:0b:c8:94:24:a6:e4:a9:f3:0d:73:66:
18:6d:5b:e6:a6:c3:b9:44:da:b1:6f:de:cc:31:35:
1b:b7:61:30:7e:18:b5:ef:7a:f8:b3:bf:ea:ae:f4:
d7:80:bb:02:12:8c:36:9b:86:13:e3:e4:7f:72:a4:
88:7b:5c:a8:52:0e:58:85:bb:d1:57:0a:f9:1e:c4:
39:8a:50:ed:83:5f:c2:4e:7f:a0:cf:92:e7:45:18:
dd:5b:b9:a1:ef:6b:ab:2c:08:be:2e:f1:3b:0b:26:
16:3b:1e:d7:99:50:94:02:a5:51:5d:60:28:79:d8:
51:65:c6:f8:9b:e2:08:9f:af:1c:fc:43:92:69:5c:
3c:48:aa:bb:53:b4:7c:42:c4:f5:62:f8:6b:42:ef:
9d:4c:1a:0e:93:06:49:20:ab:5c:c4:c2:92:15:b4:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:A1:0D:BD:C9:A8:53:33:74:72:2A:54:22:AA:AA:A4:71:F8:0E
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dd:41:2a:c5:3f:ab:79:dd:f9:d8:59:99:8c:11:da:c8:8b:
33:ee:bb:97:f4:f0:78:6c:74:3f:fe:b6:c6:0f:64:94:98:31:
3f:ff:a5:e3:ee:25:c1:cd:8f:5e:66:ed:66:44:77:e0:e8:43:
2c:70:23:76:8a:38:9e:60:1e:31:af:17:6a:73:7e:02:97:91:
cb:88:f5:f1:a7:06:14:f8:a5:89:9f:05:ec:95:86:47:4a:60:
d3:ec:31:92:09:1a:20:90:8e:e0:23:24:1b:80:5f:0c:1f:a2:
af:83:3f:da:e4:1f:86:fe:2e:c0:04:a2:57:18:62:10:5a:c1:
b4:62:d9:b4:7c:3b:c4:16:22:08:b3:ac:55:e7:7f:ac:81:6a:
ee:1d:b1:6d:5e:f6:05:61:83:ad:f7:3e:4b:87:e2:09:01:5b:
ff:4c:2d:5b:81:d1:1e:28:08:7a:e3:30:ec:69:6b:28:ce:8d:
25:0f:e9:c8:c0:97:ae:31:da:95:15:9b:b9:d6:89:ec:e1:bc:
9f:10:c0:f4:a8:43:33:eb:e6:16:30:ba:ed:39:e9:50:7f:66:
e8:99:13:3c:a3:7b:f5:5d:6b:70:da:30:56:a7:bf:2d:61:42:
7e:c1:75:bc:a6:fe:9d:d1:3d:cc:39:c1:c1:88:31:84:27:de:
96:81:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:19 2026 by rpki-client