Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: 8jB5DQVMGIEhjzgpQQvMnE5e+FH+G1vMqoqwkGibA2c=
Subject key identifier: 58:A8:9A:5B:5A:5A:B5:A1:05:8D:3D:DE:0B:3E:18:1C:FD:41:09:C9
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019E1C10450B7C92C2EA5FA517373AB63222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 14FE
Signing time: Tue 12 May 2026 12:01:28 +0000
Manifest this update: Tue 12 May 2026 12:01:28 +0000
Manifest next update: Wed 13 May 2026 12:01:28 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: L8yvAM6+S50kBRss4kZe48uu8DoXjezvAQ/n0pYaGhA=)
2: JZiy3r9PkYB8MElyL5xGJo1pVPk.roa (hash: xvNOkN38iMVfLqxF6m1PTaRdbwBZf+HM7rmKu9Qh53U=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:45:0b:7c:92:c2:ea:5f:a5:17:37:3a:b6:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: May 12 12:01:28 2026 GMT
Not After : May 13 12:01:28 2026 GMT
Subject: CN=58a89a5b5a5ab5a1058d3dde0b3e181cfd4109c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:cd:e2:d9:62:13:23:34:44:38:58:93:69:
0f:9e:50:82:a1:8a:1a:f6:99:dd:f6:e5:ae:ad:0b:
b0:ce:1a:25:30:f5:f9:33:c0:0e:e9:83:d4:9d:4d:
e0:3b:e7:15:5f:5a:6b:f1:16:3a:71:8c:d8:0b:08:
d3:14:d1:35:16:a3:79:c0:e7:50:2c:59:ef:0f:e1:
c0:c0:49:65:10:f6:fa:f7:ea:d4:36:ad:f0:d6:08:
d3:0a:de:8a:51:73:e3:f0:b0:52:42:63:52:e7:39:
4f:2a:8a:17:06:dd:f9:40:64:82:f8:58:aa:8a:78:
f0:cc:e6:5f:d1:8b:4a:ab:2a:9f:34:d3:5c:8a:73:
c3:ca:58:45:df:5b:e2:92:3a:bf:44:7a:b6:ab:32:
53:3e:64:83:de:66:80:e0:6a:c2:2f:c5:1b:86:a3:
88:13:3b:40:44:b1:39:c1:d3:2a:d1:ec:56:44:1e:
af:df:d9:27:f7:3e:4b:65:0d:e9:a9:a7:1e:30:9e:
b9:76:eb:17:78:fe:5f:31:74:b8:77:fa:fc:83:f4:
2a:ba:8e:eb:a6:2e:34:75:7f:de:9e:ec:6f:1e:1a:
51:e9:63:54:93:a2:e1:75:59:eb:c0:d3:50:e3:f4:
d8:82:75:20:dd:22:1b:5e:c9:d6:2b:ea:38:f7:e8:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:9A:5B:5A:5A:B5:A1:05:8D:3D:DE:0B:3E:18:1C:FD:41:09:C9
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:3a:e6:f0:4e:72:cb:58:d5:e9:3d:4e:ed:03:58:09:c2:
74:30:18:65:c6:a8:5d:ba:3e:a1:8f:08:5e:68:31:8a:df:04:
53:67:4c:5d:bb:f3:8d:15:a8:a7:94:e1:bf:e6:fa:f3:d1:09:
40:54:c9:49:88:53:71:77:e3:a7:90:a0:b4:fb:e3:0c:dd:4d:
ae:2c:81:7b:a2:b0:34:64:a3:5f:8a:1b:89:17:83:bd:80:54:
35:dc:85:87:d0:06:d9:5d:f3:b0:d0:1d:a7:ca:70:ed:c5:1c:
fc:1d:c9:0b:b8:c1:68:26:58:b6:49:c0:f0:d3:73:e1:fd:bc:
1d:91:9e:db:77:77:96:bd:8f:d8:49:2a:06:52:c3:92:18:e0:
ba:79:27:9d:20:f4:86:e4:0e:1a:c1:ef:c8:64:fd:c6:13:bb:
a3:fb:2f:32:17:0c:71:a0:c1:ee:c2:31:86:a0:37:e7:07:8d:
a7:e8:a0:e4:0d:db:f3:3c:33:29:8f:a1:cd:42:82:03:93:cd:
99:44:56:58:ec:5a:f5:46:5f:c4:36:bb:84:9d:2c:3b:4c:a7:
07:0a:f2:f9:dd:dc:da:ee:4c:c8:61:e0:6d:1a:6a:aa:1c:c8:
a9:46:1b:cd:0b:2b:ce:76:eb:6f:65:cb:e6:68:c4:f0:4a:aa:
33:99:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:58 2026 by rpki-client