
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
File: 5Kx1KYEdAQxOrpKbgmncse5gQn0.mft (raw, json)
Hash identifier: sPivCuGN28Gux6aI+Rcz2Sde8rjCfYcFPKuzL0Pjo/g=
Subject key identifier: 8C:E0:56:50:1E:AD:F2:11:A7:C7:6A:BB:52:B0:F4:49:B4:D1:D7:20
Authority key identifier: E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
Certificate issuer: /CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Certificate serial: 019E1BD89BB22523C7E05935E731CEFB693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
Manifest number: 4E
Signing time: Tue 12 May 2026 11:00:40 +0000
Manifest this update: Tue 12 May 2026 11:00:40 +0000
Manifest next update: Wed 13 May 2026 11:00:40 +0000
Files and hashes: 1: 5Kx1KYEdAQxOrpKbgmncse5gQn0.crl (hash: YrfFAKk1X5VeutfTc7lDIPTk0Dt+6c9nL9DHw/N2t20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:9b:b2:25:23:c7:e0:59:35:e7:31:ce:fb:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Validity
Not Before: May 12 11:00:40 2026 GMT
Not After : May 13 11:00:40 2026 GMT
Subject: CN=8ce056501eadf211a7c76abb52b0f449b4d1d720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:3f:25:11:27:61:08:ac:16:97:c9:44:23:
8d:e5:7e:03:ec:44:c0:8f:6c:b6:85:15:26:3a:65:
5a:9f:51:3e:c9:fb:cd:d4:86:e6:33:b2:e4:d8:85:
de:d6:5b:d9:29:c8:ec:43:56:b3:13:62:27:14:22:
78:25:43:a4:f1:5b:89:f6:c8:59:eb:02:c1:22:a7:
3d:94:04:de:99:79:ca:65:84:ec:16:bb:30:03:d9:
a3:96:58:86:1a:02:75:e9:28:3d:04:c5:02:17:5d:
b0:3f:d5:dc:df:c6:be:70:1c:c3:35:f5:c3:31:06:
51:9c:ab:dd:5d:b7:c9:0c:7a:29:76:20:6f:6a:fa:
2f:c7:c4:3e:ac:02:54:ba:c1:71:e8:f8:18:2c:e4:
b7:73:0e:7e:96:ef:fb:90:dc:37:16:86:4c:ff:35:
74:a3:ee:c1:6e:76:a0:13:e8:c0:2f:48:b8:bd:34:
58:ed:38:7f:c8:5a:cc:21:dd:25:3a:f2:48:10:a9:
4a:06:e5:b2:50:3a:97:e4:88:cc:ae:66:80:0b:7d:
1b:c0:77:ab:f8:c5:0c:dd:97:9e:91:a8:c4:fa:5b:
a1:c8:27:e1:06:43:e4:04:7f:30:8d:1f:07:ba:bd:
13:b2:6c:6f:86:f6:7b:5f:ba:cf:0a:b8:3d:9e:07:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:56:50:1E:AD:F2:11:A7:C7:6A:BB:52:B0:F4:49:B4:D1:D7:20
X509v3 Authority Key Identifier:
keyid:E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:54:9f:4b:f8:3e:e2:9f:f2:44:19:d9:6a:56:6a:c1:f1:62:
f5:eb:61:b2:61:e4:b2:e4:19:ba:bc:0b:9a:b8:d2:ee:ed:67:
eb:da:db:95:5b:67:14:3e:37:62:f6:f2:ff:21:6a:7c:0c:37:
0a:b3:4a:82:fa:6f:c1:a2:9e:2b:ba:b0:a4:f9:6a:47:00:11:
6b:f6:e3:73:7d:11:d8:77:a0:f4:6b:9b:29:88:5c:e3:03:00:
ee:bd:a7:95:df:a7:cf:73:d0:3b:f9:b5:0e:73:e4:f4:f4:1f:
f9:24:1c:d7:95:ca:c9:59:9d:5f:50:6d:12:d4:2c:d2:d4:9d:
4c:2e:11:fe:33:0c:dc:18:cb:b0:4b:fb:83:52:9a:40:f7:49:
02:c8:5d:30:60:47:e2:4e:8c:69:b0:38:20:0d:c5:ec:04:d4:
e2:6c:9d:4c:30:05:0b:dd:42:78:de:e5:ee:9d:db:50:0c:35:
78:2b:20:22:6a:f6:98:38:e3:7c:c8:49:8b:bf:60:80:9a:90:
be:38:17:ec:20:ed:2f:5b:90:95:b5:c4:03:7e:1e:5e:70:04:
62:03:76:21:aa:b0:a6:77:da:34:dd:c7:1f:54:8e:e8:d5:51:
ae:92:90:b8:64:63:68:9d:63:8a:a7:b9:60:f6:ca:55:99:ad:
ef:55:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:16 2026 by rpki-client