Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: Wyx3oWDHc0u62zCmNbpZ5IErUsC+owlpTS1OgefAy2k=
Subject key identifier: ED:E1:6D:1D:49:6D:4F:38:5A:B2:01:B7:DE:66:04:91:9E:DE:4D:FF
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019E1D225320A51855F422514704DF97698C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 05C0
Signing time: Tue 12 May 2026 17:00:49 +0000
Manifest this update: Tue 12 May 2026 17:00:49 +0000
Manifest next update: Wed 13 May 2026 17:00:49 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: rdEDPc2uaFgdFl9D8Yc4zxaxOMAjIRtCMThrT19CYYw=)
2: Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (hash: E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=)
3: NPoJ48rOlMylXSV9suu4vTiIJd8.roa (hash: aQKCUY2SNtZbLIRkM+mjutTaN8ryl5E8Zuu6G5SpnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:53:20:a5:18:55:f4:22:51:47:04:df:97:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: May 12 17:00:49 2026 GMT
Not After : May 13 17:00:49 2026 GMT
Subject: CN=ede16d1d496d4f385ab201b7de6604919ede4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:64:41:c9:68:df:b2:e1:0a:89:10:45:9e:
71:37:1f:55:61:8f:dd:48:0d:5e:87:c9:6b:d6:75:
ab:be:62:07:59:15:2a:0e:6f:6d:83:dc:6f:72:32:
16:b8:d2:3e:70:58:ae:a4:6f:31:84:64:e6:28:f9:
09:2a:ee:d6:3f:d6:df:52:77:6a:05:77:77:ab:5a:
31:4e:59:bd:ac:2c:3a:1d:11:4c:00:1b:ed:3f:54:
46:11:15:df:ff:3e:9f:57:75:54:83:fb:27:4c:05:
ba:a9:98:a1:72:01:e2:92:ba:ca:c4:e3:e9:91:88:
a7:2d:cc:8b:09:ff:5a:a9:41:0b:f1:94:f8:4f:e1:
13:ce:26:89:63:ac:ea:db:ab:2c:f0:a7:1f:80:7f:
da:18:48:cd:54:03:6f:71:64:dd:5b:19:63:cb:24:
84:11:fd:22:c4:f0:fa:fc:88:14:2e:c7:9d:87:3b:
98:36:69:ca:86:77:95:5d:f4:b2:05:92:aa:1d:e8:
1e:30:fd:54:d8:89:d0:e8:c3:04:ec:a2:c1:4a:86:
10:e5:b6:6d:0a:14:d8:e7:38:39:81:0a:f1:05:fc:
16:00:25:c1:e1:0d:68:a7:ae:ac:c0:b4:d2:9c:2e:
5c:ab:ef:25:a7:af:ca:b6:3a:96:20:c8:e3:b1:00:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:6D:1D:49:6D:4F:38:5A:B2:01:B7:DE:66:04:91:9E:DE:4D:FF
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:80:50:ab:83:54:db:e6:0d:73:32:1f:78:60:e7:78:3f:
fa:30:14:8e:69:ca:c5:8e:f8:c1:05:d6:34:c5:79:d1:80:78:
6f:27:f3:dd:ac:63:e7:7e:57:54:86:4c:30:26:4b:f5:bc:28:
9f:02:5f:2e:29:5d:2a:d0:e4:4c:c7:bc:b1:39:ef:3d:e2:86:
71:fb:1d:c2:1b:4c:49:29:65:34:a5:5a:81:b3:ea:33:7b:16:
18:1f:da:32:08:95:65:f1:e4:b4:21:b4:95:8d:3b:ba:f5:b0:
d1:a3:22:00:d4:64:4d:db:4e:c3:2c:7d:55:2e:29:e6:c8:0d:
09:bd:43:cd:46:7f:14:39:45:d1:03:2f:b1:c2:88:10:74:ce:
60:75:cd:fc:cd:fe:fe:3e:d7:a5:27:8b:ee:d3:e3:6c:f3:ff:
de:fd:23:60:0e:a4:52:9c:d6:99:79:9b:60:37:67:92:5f:b3:
b8:52:ed:31:0f:91:92:c5:dc:f3:43:2b:07:4f:4c:1a:c2:b5:
3b:f3:12:1e:d7:b9:78:a3:8f:62:dd:65:68:7d:11:95:50:f1:
82:98:db:13:15:24:0d:ce:ec:4f:5e:94:1b:c6:10:d3:2c:29:
1b:ee:b5:f4:11:6d:30:17:d6:73:69:78:75:10:07:1b:3c:1d:
88:3e:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:23 2026 by rpki-client