Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: dBEH/LVFq3Pl63AFT+WVxgXPHUQfeaJFsFbUGeWXRi8=
Subject key identifier: FA:8C:79:4C:F2:99:22:64:B3:13:FF:58:F8:E1:99:D2:7E:23:6D:70
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019E1DFE5EFF8990DC6EEDA4EE10C8C56A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 0E49
Signing time: Tue 12 May 2026 21:01:10 +0000
Manifest this update: Tue 12 May 2026 21:01:10 +0000
Manifest next update: Wed 13 May 2026 21:01:10 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: UXLI/4BsoxccSPf+YWxAeL7fmnenfVPgDHFIk6PpRXg=)
2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:5e:ff:89:90:dc:6e:ed:a4:ee:10:c8:c5:6a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: May 12 21:01:10 2026 GMT
Not After : May 13 21:01:10 2026 GMT
Subject: CN=fa8c794cf2992264b313ff58f8e199d27e236d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:8d:0f:33:c5:b7:07:56:b9:66:7e:5f:37:
40:ba:71:84:4e:93:4c:94:17:26:d4:16:b2:2a:1c:
3e:ca:ca:76:25:cf:b2:ed:3e:08:ba:b8:d7:4e:61:
7c:e0:af:00:7f:7b:94:69:59:73:a2:d4:f2:f9:e0:
0e:99:e7:8a:a0:a4:6a:1b:4b:ce:a8:d7:3c:98:5d:
d9:b8:8d:df:f9:b3:71:2f:c5:60:05:fb:cf:60:a3:
67:8f:3f:5a:30:fa:c0:e0:97:d6:79:fd:eb:b6:fd:
d2:42:b3:79:0c:bc:e0:ec:f9:15:eb:f9:7e:0e:64:
b5:ae:29:12:72:a0:d5:b8:e2:e8:d7:98:5b:5a:5b:
f5:43:95:14:b3:e1:ef:ac:fb:65:1f:ff:9a:44:34:
64:43:1f:27:80:f3:38:1e:41:23:5f:00:31:12:fb:
ce:36:7e:45:23:22:b4:e9:7b:95:42:7d:a0:86:c3:
a2:19:a8:6e:a7:bc:aa:70:5f:80:29:21:98:1c:c6:
1b:08:ab:76:a3:16:85:fc:02:50:eb:37:94:5e:a9:
ef:63:56:13:95:3e:41:d7:3f:49:25:22:0b:1f:e3:
32:60:c4:e7:5c:de:3d:61:36:c6:ff:40:8d:f9:6a:
33:df:12:58:18:03:cc:c3:8b:f5:74:8d:3e:b4:84:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:79:4C:F2:99:22:64:B3:13:FF:58:F8:E1:99:D2:7E:23:6D:70
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:00:c3:12:fa:49:7e:7d:c8:9b:26:49:a5:8b:d1:10:c8:00:
0a:84:de:4c:99:d6:85:a1:6d:09:0d:eb:06:8d:5c:e9:7a:ce:
bc:ea:a3:71:3b:75:1e:dc:b5:cb:26:f7:49:c3:15:24:65:c6:
51:3d:b2:8b:6f:a7:80:27:c0:d9:0f:07:6c:36:30:de:de:d6:
e1:48:a6:f2:2b:89:14:75:25:8e:cb:ca:2a:b9:d1:4a:ce:7c:
8e:a3:4e:4e:23:fd:21:11:6c:23:ec:87:1a:3c:e5:7c:d6:9c:
81:07:ad:68:ed:5f:0b:07:48:f0:51:4e:4d:ef:c9:35:3f:55:
ef:cb:78:9d:f6:55:7e:2b:02:39:b4:be:37:a6:2e:1a:76:1d:
dd:75:3b:69:72:c1:0b:1c:1a:72:8d:47:d4:45:ae:1e:4a:e7:
e2:c6:b5:f4:c4:a4:04:ae:2f:02:53:a5:4f:62:2b:a8:47:ca:
66:13:ae:c8:cf:46:89:dc:3e:f9:06:85:2a:dc:fc:71:54:b2:
ae:e3:02:b5:42:41:a2:8f:3e:a8:93:40:ee:8c:2a:e8:40:51:
91:c9:9a:ff:69:96:b2:c2:e5:af:43:6e:f5:04:e5:ed:d6:a7:
e1:ba:30:9a:b7:2e:fb:ad:25:1f:a3:14:5f:8c:cd:1e:06:83:
d2:6e:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:53 2026 by rpki-client