Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: O2+mS4ibgCEVcv+4LT08TpUR71nJQXseO0H5oAbeX8A=
Subject key identifier: 5D:36:69:9B:9A:B5:40:AB:3A:02:95:93:A0:32:F9:34:01:F7:7B:4C
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019E1CB49DF1CD96E115D19911FFD6589304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0A02
Signing time: Tue 12 May 2026 15:00:59 +0000
Manifest this update: Tue 12 May 2026 15:00:59 +0000
Manifest next update: Wed 13 May 2026 15:00:59 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 2qA4TjeogRP6gtVXFzzDugad8TJYdUYNufdvUQk7Ogc=)
2: jUi6SuFHxWUcf3BLcRXfDSJcijA.roa (hash: j8KVEbuo6sxSwDOmodToJ+V3aOkB4CrJpEr50CscFoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:9d:f1:cd:96:e1:15:d1:99:11:ff:d6:58:93:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: May 12 15:00:59 2026 GMT
Not After : May 13 15:00:59 2026 GMT
Subject: CN=5d36699b9ab540ab3a029593a032f93401f77b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:9f:47:e7:c5:46:95:98:c4:da:23:29:6e:
ad:0c:cd:12:a4:04:db:51:7f:44:17:32:b5:30:e0:
3c:a6:38:65:1a:03:a9:26:10:1e:84:97:0d:9b:69:
33:89:0c:6e:64:89:6e:ea:1c:ff:78:33:96:e9:30:
ab:c7:fa:b9:66:d2:b7:f0:96:6b:a0:c9:dc:7f:39:
05:24:01:42:64:6d:38:5f:b4:f7:64:17:89:ff:0c:
cd:68:97:a7:49:2f:15:ff:e6:66:53:8c:bf:37:73:
6f:0f:b5:42:f6:88:ee:e7:b0:0a:da:92:2b:c8:cb:
3c:c2:e4:b2:09:48:99:95:74:1a:0b:39:45:30:3a:
1d:f7:51:a1:e7:ac:23:3c:73:e3:47:91:28:d2:65:
64:b1:65:d1:e9:62:4f:23:b7:41:c5:14:c8:12:40:
49:0a:42:22:3a:83:e2:36:8b:99:7e:eb:c3:e5:ac:
99:27:a2:f4:b6:d0:11:2b:f8:5d:ea:9f:0a:4b:b5:
f7:eb:d3:5c:a7:0c:0c:e5:80:a3:21:3c:ca:fd:88:
10:d3:f4:03:af:53:38:d6:ad:c5:5d:68:8b:0a:15:
6f:6c:42:74:36:66:4d:d2:ad:4b:9c:df:52:25:56:
d3:58:fe:c5:aa:bf:2b:d8:7a:5f:a3:db:d4:b2:36:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:69:9B:9A:B5:40:AB:3A:02:95:93:A0:32:F9:34:01:F7:7B:4C
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:7c:84:6f:97:bc:c4:6d:6b:d4:26:77:7c:05:13:d9:a6:
3e:56:cc:7f:44:c9:1f:26:8a:97:f1:c6:c9:00:57:99:b9:ab:
cd:9a:b1:ab:12:cc:76:29:f8:13:6f:64:39:9f:0b:b1:e1:8d:
63:47:29:6e:bd:1f:3e:8a:09:07:9e:b8:84:6d:32:97:24:5d:
b7:ff:5d:99:7b:5e:21:28:52:c8:b2:a7:7c:5c:5a:07:c6:3a:
0f:d3:57:a3:23:76:12:ef:fa:5d:ee:43:14:46:fb:39:71:65:
af:9e:50:ec:95:07:1c:34:91:67:9b:83:d0:8d:40:1f:e0:cc:
cb:82:c4:ec:f4:de:e7:44:97:73:7d:0a:40:d8:c4:16:cc:dc:
1a:68:a1:f0:a6:6f:5f:89:99:8d:5b:a7:02:d7:2e:e0:44:ea:
4d:16:bc:7c:2c:fd:fc:48:fd:e3:dd:d5:68:2e:c5:96:97:4c:
02:9f:35:a7:b0:f3:a5:d8:32:c3:1c:f4:c0:78:08:0a:d4:e0:
67:0e:5e:71:0d:07:f1:24:12:e9:3a:53:ca:63:8f:2e:77:6c:
cb:c9:db:4a:7b:11:56:6f:b4:e7:3c:07:26:ba:ee:ef:3f:ba:
d5:f1:61:83:66:ed:34:dd:bf:01:13:04:99:ce:55:25:6e:e8:
8b:fb:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:33 2026 by rpki-client