Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: RnvY0mCp7QLBUorXlLPymcHgxKzBtpyFZAWOt+mZH0o=
Subject key identifier: 70:B9:87:55:12:E1:4C:A6:52:2E:27:F3:58:23:F6:6E:8E:8E:9E:9A
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019E1CB4838EC72EC192A0680EC7665FCE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1629
Signing time: Tue 12 May 2026 15:00:52 +0000
Manifest this update: Tue 12 May 2026 15:00:52 +0000
Manifest next update: Wed 13 May 2026 15:00:52 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: hwFYeguNw78PH7/8EipPlhUvtgph8Qb7kJ6vYY7MYvU=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:83:8e:c7:2e:c1:92:a0:68:0e:c7:66:5f:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: May 12 15:00:52 2026 GMT
Not After : May 13 15:00:52 2026 GMT
Subject: CN=70b9875512e14ca6522e27f35823f66e8e8e9e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:f4:cd:ae:a9:17:2b:f5:c7:ec:b7:5d:d5:
a4:c7:f2:ca:c3:af:9c:db:ea:7b:4d:42:6c:2d:8c:
6a:f2:36:f8:68:66:f3:e3:7a:b9:97:a5:3b:40:80:
a4:21:23:4c:c7:9c:0e:08:09:4d:5c:e3:7c:91:6d:
4e:cb:3c:96:1b:a9:4a:39:0f:8a:60:76:04:c4:82:
44:0d:b7:aa:43:96:fd:f1:cc:7f:00:cb:96:0e:8f:
73:7f:3f:e8:6f:6e:79:0b:9d:b3:ee:c1:01:ee:fe:
f9:31:b8:bb:c8:d6:89:31:40:25:a8:29:e2:52:45:
29:f9:26:3b:01:44:de:b7:9d:fd:b9:53:f6:4e:42:
71:2d:b4:3e:b5:b4:9e:a9:ce:35:38:96:cd:1d:f2:
25:cc:24:f1:78:b6:13:73:12:8e:80:7a:69:40:ba:
55:90:5f:2d:32:95:41:7f:db:5c:1a:ff:90:94:7b:
7c:c8:2d:3e:29:37:d5:0b:31:bd:cd:a8:07:5f:91:
3c:ec:e4:b1:12:96:b1:8a:1b:ed:5a:b0:f1:19:e4:
1b:ed:6f:66:b5:b7:15:76:95:43:9b:6d:c7:59:c6:
24:91:c2:71:73:cb:3a:b4:f4:96:9f:94:e6:e4:79:
dd:61:3a:b9:40:2c:ee:d6:31:7a:a4:49:a9:98:e6:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:87:55:12:E1:4C:A6:52:2E:27:F3:58:23:F6:6E:8E:8E:9E:9A
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:2b:e5:8a:c9:a9:12:a5:b8:71:c8:0e:63:41:4e:3c:62:
f8:c2:d2:03:38:1d:80:eb:4e:b8:a7:59:ef:01:59:18:98:b2:
fe:a7:b7:bf:75:74:57:d0:36:5c:b9:85:e2:1f:40:fb:e4:61:
d1:41:ff:30:68:a4:f2:e7:2e:e7:bf:03:0d:69:18:26:84:91:
d8:8e:fc:4a:e8:27:5a:93:2a:fc:54:81:a1:28:19:49:6a:da:
14:4f:ef:2e:8c:78:71:34:9b:c1:89:c9:8e:73:bb:87:ec:0e:
29:55:67:30:54:31:3c:d8:b0:10:84:72:5d:47:54:cd:34:e1:
99:52:b0:27:40:ec:4a:f0:a7:0c:cb:91:91:9e:bd:fa:38:74:
03:f5:19:6e:d3:2c:e1:e2:9c:d0:d2:a9:b6:f4:28:54:b6:a7:
84:38:d3:3e:7d:c6:a0:92:f7:f3:7b:7c:02:3c:b0:7a:5f:d8:
12:01:b8:96:61:2d:f7:a9:27:57:89:16:4b:19:21:ec:d5:43:
7e:de:67:57:7c:6a:fb:66:69:1a:88:c7:34:c4:3e:fe:bb:96:
f4:78:3f:01:bb:d3:c6:69:f9:f8:3d:26:cb:9a:60:dd:e5:77:
71:c4:99:f0:88:e2:30:24:9c:4c:93:02:36:64:55:b2:14:d9:
16:10:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:47 2026 by rpki-client