Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: zzajT/+2nJpcNRYlvYMPjohIniUsIVkifc1iQz6vvDE=
Subject key identifier: AE:AC:97:61:FF:7C:8C:CC:69:73:71:1E:07:32:1A:49:3E:8E:4F:F8
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019E1D228A47A8A010D605CB0C0CC08F0B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0889
Signing time: Tue 12 May 2026 17:01:03 +0000
Manifest this update: Tue 12 May 2026 17:01:03 +0000
Manifest next update: Wed 13 May 2026 17:01:03 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: kEYXTYK5Qq0ulMLd95YuyRS8lGfgQKtMhtn8aawd+Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:8a:47:a8:a0:10:d6:05:cb:0c:0c:c0:8f:0b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: May 12 17:01:03 2026 GMT
Not After : May 13 17:01:03 2026 GMT
Subject: CN=aeac9761ff7c8ccc6973711e07321a493e8e4ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:9b:4a:96:6f:e0:a5:a6:30:69:2b:0f:00:
f2:cd:18:1c:73:6a:f9:d0:37:5c:1f:fe:d9:6f:fe:
73:4f:df:a2:5a:1e:75:44:86:73:e3:f9:99:83:b2:
6d:14:01:96:6f:f6:f0:2e:75:7b:03:d4:49:37:64:
09:3b:0a:f0:94:05:ae:71:72:0e:88:e6:55:a0:6d:
cb:34:66:17:26:b3:35:bd:66:7f:f4:5e:c6:bb:9c:
66:ff:20:90:0b:df:94:04:4d:3a:15:f6:08:50:3c:
52:5c:b1:fe:3e:be:ae:39:d7:e1:c4:2f:f8:a1:4d:
9e:72:4b:4e:de:58:91:d6:1f:c4:a5:69:12:b3:3c:
cb:e0:79:9c:e6:bc:bb:10:62:74:7d:f0:dd:5a:0e:
59:2f:8d:ce:c1:06:fe:3a:b8:63:08:ca:3c:ac:30:
3f:21:be:8b:d3:a4:18:63:49:a7:03:60:de:32:87:
f8:d8:df:7b:a9:7d:33:56:a7:ac:4d:cc:b6:5f:aa:
1b:f3:fb:6f:b2:b5:03:23:9c:3a:6c:41:e3:64:b0:
1d:32:cf:b6:bb:d3:20:30:70:3c:11:01:f1:ea:1e:
40:36:5c:2c:c2:4a:5d:fd:ab:03:90:bb:c2:6f:1d:
97:88:5f:a3:27:97:7c:e2:f0:65:67:bf:ab:24:39:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:97:61:FF:7C:8C:CC:69:73:71:1E:07:32:1A:49:3E:8E:4F:F8
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:98:23:02:16:a8:c9:0f:b1:9f:5f:20:c6:f0:78:ef:9b:14:
75:a4:d7:db:5a:05:5c:5a:5a:be:8a:95:17:b5:b3:af:17:19:
53:bb:6f:bf:9b:cd:64:82:0a:c6:28:66:be:61:d2:6a:2b:c9:
69:76:2e:ea:99:fc:ab:de:5f:11:db:2d:be:41:c1:8b:e8:c0:
bd:7d:92:e2:54:c4:fd:ab:80:98:d5:a6:04:6d:57:54:78:c8:
73:82:bc:af:fd:0a:53:86:9a:c0:de:b4:7f:e8:44:c9:92:a9:
af:85:f0:38:4f:e0:e5:d3:b2:30:df:5c:79:5e:ba:05:f3:38:
1e:9f:bb:4d:67:89:a9:af:00:17:3a:af:82:90:17:91:90:e2:
a3:81:7a:e1:df:12:60:9a:2b:36:3f:55:bd:bc:98:26:38:db:
3d:1a:5f:ba:ff:45:53:fa:cb:e6:ac:51:5d:8f:46:be:f0:18:
c0:af:cc:1a:04:b3:ad:2a:6d:0a:37:f3:ac:8b:ab:6a:5e:22:
45:1d:56:01:e1:33:e7:d3:07:56:ce:bf:85:a6:9c:1d:c3:67:
ac:d3:4a:fb:a6:ce:dd:95:a9:5a:70:5c:55:f7:d4:f6:47:ba:
2d:3f:c4:c2:6c:cf:46:ba:39:5f:36:de:46:5e:69:e0:38:38:
63:4f:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:02 2026 by rpki-client