Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json)
Hash identifier: ZH0Ew5af33Uie4Bpp2w+RKs4qWJU5RI/SsQdnHGVdgQ=
Subject key identifier: B9:02:A8:A4:6B:A6:6E:D2:3E:21:64:4C:13:03:EC:48:AE:67:E9:71
Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Certificate serial: 019E209151DD5CDB61CFAD004299BF6F73A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
Manifest number: 0328
Signing time: Wed 13 May 2026 09:00:54 +0000
Manifest this update: Wed 13 May 2026 09:00:54 +0000
Manifest next update: Thu 14 May 2026 09:00:54 +0000
Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: oryKqRVKnu4TLjzA8yuz1ZGHS/QEzzUkoeO5FyaUkRY=)
2: KbZLx2_rFtlHuG7zcnRaRaQol2w.roa (hash: +PvTCrqc0M/beR/HvEF/hRLA4hC3UuAO8zDUgE+xCOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:51:dd:5c:db:61:cf:ad:00:42:99:bf:6f:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b
Validity
Not Before: May 13 09:00:54 2026 GMT
Not After : May 14 09:00:54 2026 GMT
Subject: CN=b902a8a46ba66ed23e21644c1303ec48ae67e971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:f0:d4:fe:05:dd:5a:50:df:46:ae:e5:37:
1a:d4:0b:bc:b1:84:9e:f7:2e:6b:46:cb:be:ef:27:
58:d1:a2:cf:bd:35:33:ab:ce:d0:f1:2c:64:e1:f6:
f7:5e:5e:fc:96:da:53:73:1d:2b:6e:36:71:f2:28:
d1:6a:cd:36:fc:20:e2:3f:c3:e1:ae:a6:90:24:82:
5a:30:4d:78:2f:33:2c:8f:db:97:74:52:fd:77:4a:
f9:03:1e:db:9b:0d:c4:d6:68:3a:51:5f:7e:9f:f1:
6c:68:1b:f1:42:91:cb:e2:48:f8:2a:04:23:47:c7:
89:bd:d7:42:8e:74:ae:79:36:7e:ce:75:d4:14:18:
20:9d:1c:9b:1d:65:3f:fa:ab:4d:f7:94:9a:a3:d6:
44:ce:7e:f5:3b:45:16:7f:aa:60:fd:97:10:83:ff:
04:8a:56:0b:68:ac:6e:cf:ce:89:ca:73:5e:f3:b8:
1b:e0:12:06:39:3c:7f:52:80:7d:df:7f:16:70:87:
4a:a0:1a:4d:9b:3b:5b:19:88:ee:c8:a3:7e:ee:d0:
a5:bd:e9:85:5b:ff:b4:f6:6a:1a:1d:b6:df:b8:f1:
cf:45:5e:fd:e2:9d:a1:fa:51:99:1c:85:ef:9e:87:
24:f1:41:0c:32:74:0c:65:12:da:57:a8:44:33:ab:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:A8:A4:6B:A6:6E:D2:3E:21:64:4C:13:03:EC:48:AE:67:E9:71
X509v3 Authority Key Identifier:
keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:58:b3:2c:fd:ef:0d:66:51:ed:3e:9c:13:21:72:8d:86:16:
9b:36:d8:ac:71:fd:f6:42:d1:4c:33:9e:68:a2:2a:7f:12:8d:
4c:f8:ab:4d:0e:ba:71:cb:d8:39:a8:37:71:3f:29:55:ff:2b:
1d:8a:94:e1:e1:3a:54:9d:09:88:ca:6b:10:5d:ca:2c:5e:99:
12:4a:9b:1d:70:b8:a7:e2:cf:55:c4:c9:8b:76:27:20:4c:8b:
00:ff:fb:a9:12:7b:68:23:eb:1f:58:90:34:5a:69:65:c0:79:
b4:5a:55:27:01:d9:a5:16:72:6d:b9:5a:7a:40:f4:2b:84:7d:
0b:26:69:94:d5:61:46:45:1f:eb:d1:54:7d:bd:93:b8:08:90:
5b:d2:28:55:66:6d:94:63:df:b8:4b:cc:3c:46:a4:26:b3:30:
2f:88:43:1a:91:af:c6:8e:d2:c7:5a:9f:83:38:7c:e3:76:40:
49:e6:5c:10:a5:87:2a:8b:83:80:5a:04:64:a2:1b:9c:f5:59:
ca:a2:0b:ce:13:53:ce:67:69:2a:f6:25:e4:80:ee:2d:41:ff:
78:e0:16:67:cd:17:b6:fe:16:b8:a9:e9:9b:cf:68:cc:e1:6e:
a3:74:93:7a:25:bc:de:a2:17:d1:4c:72:9f:93:19:29:13:ab:
19:d4:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:38 2026 by rpki-client