Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: toTI6DVffT2YVtDA/pJEcsQ+/1QMUCI2OnWTxtk5+Kk=
Subject key identifier: 9A:A9:DC:B4:63:B8:C3:9A:10:3F:FB:0B:7B:9A:7A:61:B9:4C:0B:FB
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019E1D9035954D893BFBE01E2BBF4ADA5E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 19:00:50 +0000
Manifest this update: Tue 12 May 2026 19:00:50 +0000
Manifest next update: Wed 13 May 2026 19:00:50 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: v/CEYXkV6qZZew8hUSeZGGjT8RnHzAI4m2EAdiOFLkA=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:35:95:4d:89:3b:fb:e0:1e:2b:bf:4a:da:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: May 12 19:00:50 2026 GMT
Not After : May 13 19:00:50 2026 GMT
Subject: CN=9aa9dcb463b8c39a103ffb0b7b9a7a61b94c0bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:70:85:96:8f:10:85:3e:fc:7c:75:e6:39:
d4:64:2a:be:bd:fd:f3:58:99:73:a4:cf:49:e3:3a:
23:ff:70:2a:14:e7:2a:cd:2f:7b:56:e0:6c:4f:41:
6f:8c:3f:0a:98:61:89:84:88:0a:84:eb:ae:d6:41:
5b:b9:58:02:ae:67:1f:9f:08:62:9b:35:53:93:12:
f5:e3:cd:39:4c:71:1a:be:66:e6:f4:7d:71:44:bd:
f5:f8:ac:e6:e7:a3:b6:14:4d:ec:70:95:1c:8e:aa:
5c:5f:90:99:6a:50:66:d9:c2:da:7f:fc:db:30:15:
6d:6b:42:12:0d:68:64:e4:11:87:ff:76:22:2b:3e:
37:27:15:ba:29:f1:23:97:52:0e:c6:47:69:25:42:
fd:6b:ac:30:58:17:13:e9:02:54:8b:8c:4b:a5:9e:
54:1f:f0:33:6e:f3:f7:52:6c:b7:ff:9d:16:bf:9d:
98:ed:8f:cd:18:45:2f:37:f4:ab:a8:d2:7c:c8:af:
01:c9:26:25:f8:f2:19:06:9c:f0:17:ef:4b:f4:9f:
aa:df:5a:2c:45:50:5f:a7:a3:92:ee:34:c8:16:07:
18:50:6b:7d:f3:a9:6b:f3:a7:d5:e2:0f:67:3e:c9:
08:0e:19:bb:a3:8b:de:e2:4b:53:fe:3f:50:05:c7:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:DC:B4:63:B8:C3:9A:10:3F:FB:0B:7B:9A:7A:61:B9:4C:0B:FB
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9e:6b:3d:82:77:0e:88:b6:74:71:03:dc:2b:2e:7f:b3:f9:
f1:69:79:be:63:f6:c9:65:c3:b4:2f:80:11:00:b9:09:bc:cf:
b6:8f:58:07:e3:a2:ce:15:f6:e1:10:b9:af:c6:cf:a2:42:8b:
9f:a9:97:6c:f8:8b:f0:b6:df:22:c5:e8:a7:26:af:8e:9d:29:
84:7b:52:3a:fb:b8:85:f4:51:0e:78:50:f8:d2:c5:7e:ba:88:
1a:2f:60:42:ff:8e:c0:d6:57:68:08:2d:5e:e6:d8:e7:e5:32:
38:c9:cd:ed:a8:92:f4:0e:7f:87:bf:f0:d0:be:99:a9:1b:a4:
a8:03:a8:c4:95:9e:c1:99:5b:bf:e9:af:db:b4:18:a3:b0:61:
2f:52:18:2f:86:b1:28:85:3d:74:9b:03:e5:e8:00:72:92:ff:
f7:57:e6:47:16:34:86:d2:1c:be:f3:43:44:f8:50:f3:80:16:
ac:6d:28:c5:ab:09:f9:e6:f7:99:ed:f8:d0:d1:ca:05:b1:2c:
d9:e9:3e:c7:5c:7a:bf:2c:df:31:cd:d7:c4:49:44:60:a9:3f:
54:3d:26:fe:ed:08:c6:e1:d5:cc:93:2e:0b:86:31:0a:c4:68:
88:f6:4b:47:08:3a:9d:79:33:bd:b7:a1:f0:62:6d:04:7b:af:
f1:9d:e5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkDWVTYk7++AeK79K2l4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjYwNTEyMTkwMDUwWhcNMjYwNTEzMTkwMDUwWjAzMTEwLwYDVQQD
Eyg5YWE5ZGNiNDYzYjhjMzlhMTAzZmZiMGI3YjlhN2E2MWI5NGMwYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65NwhZaPEIU+/Hx15jnUZCq+vf3z
WJlzpM9J4zoj/3AqFOcqzS97VuBsT0FvjD8KmGGJhIgKhOuu1kFbuVgCrmcfnwhi
mzVTkxL14805THEavmbm9H1xRL31+Kzm56O2FE3scJUcjqpcX5CZalBm2cLaf/zb
MBVta0ISDWhk5BGH/3YiKz43JxW6KfEjl1IOxkdpJUL9a6wwWBcT6QJUi4xLpZ5U
H/AzbvP3Umy3/50Wv52Y7Y/NGEUvN/SrqNJ8yK8BySYl+PIZBpzwF+9L9J+q31os
RVBfp6OS7jTIFgcYUGt986lr86fV4g9nPskIDhm7o4ve4ktT/j9QBcelJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqp3LRjuMOaED/7C3uaemG5TAv7MB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw55rPYJ3
Doi2dHED3Csuf7P58Wl5vmP2yWXDtC+AEQC5CbzPto9YB+OizhX24RC5r8bPokKL
n6mXbPiL8LbfIsXopyavjp0phHtSOvu4hfRRDnhQ+NLFfrqIGi9gQv+OwNZXaAgt
XubY5+UyOMnN7aiS9A5/h7/w0L6ZqRukqAOoxJWewZlbv+mv27QYo7BhL1IYL4ax
KIU9dJsD5egAcpL/91fmRxY0htIcvvNDRPhQ84AWrG0oxasJ+eb3me340NHKBbEs
2ek+x1x6vyzfMc3XxElEYKk/VD0m/u0IxuHVzJMuC4YxCsRoiPZLRwg6nXkzvbeh
8GJtBHuv8Z3lgw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:39 2026 by rpki-client