Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: +Rtq1YorN6dknD9tNA0n7cMweVO91VQWLUdz2s9/Mkw=
Subject key identifier: FF:A3:BE:34:09:B6:A2:17:EF:A5:EE:FF:F6:B7:5E:BB:19:4D:38:90
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019E1D59972CADB7813735A82D4A99013BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 18:01:10 +0000
Manifest this update: Tue 12 May 2026 18:01:10 +0000
Manifest next update: Wed 13 May 2026 18:01:10 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: XGBiyDbgEX1AD69oLW/XO2Zsh+TrXGRARXN9pmd2WVM=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:97:2c:ad:b7:81:37:35:a8:2d:4a:99:01:3b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: May 12 18:01:10 2026 GMT
Not After : May 13 18:01:10 2026 GMT
Subject: CN=ffa3be3409b6a217efa5eefff6b75ebb194d3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:2d:e9:5d:64:8d:28:78:6f:2a:98:eb:db:
75:3c:48:7f:dd:a2:b1:26:3e:4a:a6:8b:a4:83:5b:
ba:ca:01:f4:f3:ad:fa:21:09:cf:a5:89:d2:da:6d:
43:2d:d5:9b:c0:80:27:e2:af:5b:22:f8:50:a9:5b:
60:25:79:db:86:dd:cf:af:d9:58:68:80:0b:c1:52:
de:06:f1:f3:ee:f8:82:9b:3d:f9:5c:50:66:02:90:
2f:c5:52:ff:75:de:43:fa:64:0f:45:af:51:6b:41:
24:80:0b:9e:f4:cf:70:26:2c:b9:c9:dc:22:7d:a2:
7b:a5:c3:c3:74:cc:b3:4e:06:5d:20:6e:97:f3:0d:
e6:04:e3:d1:5f:3a:9e:53:81:ec:b6:ba:d8:73:c4:
4b:d3:7b:42:80:d4:e9:b6:52:06:2a:7e:d2:f6:bd:
6c:69:52:7f:b9:a2:ff:c4:0e:5a:e1:cb:d4:11:95:
4e:8a:61:f7:22:4a:8a:42:07:35:c5:66:cf:af:9f:
53:aa:42:42:dd:0a:a8:c0:ab:fb:aa:61:a7:d8:97:
fa:ac:ca:03:96:05:c2:7d:71:15:b2:67:f1:c0:d9:
45:de:5f:c9:03:93:17:e5:77:6e:52:e8:6e:2e:c0:
e5:6c:eb:66:aa:e8:1d:f5:65:4c:c1:e3:33:72:64:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:BE:34:09:B6:A2:17:EF:A5:EE:FF:F6:B7:5E:BB:19:4D:38:90
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:05:58:bd:5f:d0:93:7e:f9:60:62:35:bd:8d:89:0e:99:
f1:f9:19:47:c2:f1:9b:7a:fd:ed:fe:e1:ae:50:16:a6:b0:8c:
62:9b:c6:5f:4c:c5:bc:ce:9f:16:73:57:ee:2a:f8:eb:22:d6:
68:6c:6b:ef:56:dc:21:38:f5:6e:99:32:e3:84:6c:56:44:36:
a5:fa:9f:47:9f:14:8f:c0:49:ca:b9:bc:61:b7:a9:2d:dd:f0:
68:62:d6:52:c8:a9:ed:2d:fd:17:02:b9:34:28:a4:7c:5d:ad:
e9:22:18:7e:55:18:0c:1e:d1:25:2d:8c:f6:9f:50:bf:36:cd:
ed:af:b0:ed:42:f3:df:61:ad:66:10:14:45:87:67:3e:0a:64:
79:4e:0d:87:ca:eb:44:f4:02:b9:a4:16:c4:46:fc:44:46:ba:
c9:31:7c:f1:a3:2a:80:21:21:02:12:f9:b4:84:c9:76:c1:89:
7a:b7:77:12:6a:56:e5:c2:b3:4a:41:1f:07:14:9b:eb:52:43:
8b:47:cd:dc:1c:50:ae:6b:5b:c7:cf:df:9c:36:a4:43:f9:9a:
35:a9:ff:8e:5f:8e:69:c2:af:b3:64:64:ff:31:c1:b7:33:d3:
c6:9b:80:09:4e:0e:4c:07:be:14:fc:28:f0:d6:87:df:d1:06:
9b:9a:8a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWZcsrbeBNzWoLUqZATukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy
MzRmNzAwHhcNMjYwNTEyMTgwMTEwWhcNMjYwNTEzMTgwMTEwWjAzMTEwLwYDVQQD
EyhmZmEzYmUzNDA5YjZhMjE3ZWZhNWVlZmZmNmI3NWViYjE5NGQzODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj8t6V1kjSh4byqY69t1PEh/3aKx
Jj5Kpoukg1u6ygH08636IQnPpYnS2m1DLdWbwIAn4q9bIvhQqVtgJXnbht3Pr9lY
aIALwVLeBvHz7viCmz35XFBmApAvxVL/dd5D+mQPRa9Ra0EkgAue9M9wJiy5ydwi
faJ7pcPDdMyzTgZdIG6X8w3mBOPRXzqeU4HstrrYc8RL03tCgNTptlIGKn7S9r1s
aVJ/uaL/xA5a4cvUEZVOimH3IkqKQgc1xWbPr59TqkJC3QqowKv7qmGn2Jf6rMoD
lgXCfXEVsmfxwNlF3l/JA5MX5XduUuhuLsDlbOtmqugd9WVMweMzcmRaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+jvjQJtqIX76Xu//a3XrsZTTiQMB8GA1UdIwQY
MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt
Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz
LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC0FWL1f
0JN++WBiNb2NiQ6Z8fkZR8Lxm3r97f7hrlAWprCMYpvGX0zFvM6fFnNX7ir46yLW
aGxr71bcITj1bpky44RsVkQ2pfqfR58Uj8BJyrm8YbepLd3waGLWUsip7S39FwK5
NCikfF2t6SIYflUYDB7RJS2M9p9QvzbN7a+w7ULz32GtZhAURYdnPgpkeU4Nh8rr
RPQCuaQWxEb8REa6yTF88aMqgCEhAhL5tITJdsGJerd3EmpW5cKzSkEfBxSb61JD
i0fN3BxQrmtbx8/fnDakQ/maNan/jl+OacKvs2Rk/zHBtzPTxpuACU4OTAe+FPwo
8NaH39EGm5qKag==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:38 2026 by rpki-client