Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: Jwa3AITZurC3HV2yAPuF6DNNLlAnTYyly21hG/KCyzg=
Subject key identifier: 01:E2:42:CE:03:3D:58:76:49:58:E8:B0:BF:AD:AC:9A:0F:C5:22:AD
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019E1DFE422B2A241B88FC9BE04E939F210B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 12E5
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: dir/ovn6bZZqCrK6SX+xWgiGxmXUc+pbc3jPqfR9EAo=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:42:2b:2a:24:1b:88:fc:9b:e0:4e:93:9f:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=01e242ce033d58764958e8b0bfadac9a0fc522ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:e2:a8:3a:fb:20:93:e7:0c:ab:26:e0:da:
2e:2c:d2:19:d3:ba:51:e1:ec:5c:d4:51:ab:4f:b8:
17:45:b2:c0:15:53:2c:68:12:58:47:be:a8:d6:47:
cb:8e:8c:16:16:ad:84:a0:32:b4:42:41:43:a1:8b:
7f:a8:ec:e3:0d:58:0c:78:b0:0e:6b:c2:39:08:6b:
8e:b7:93:46:e8:da:55:42:55:9d:ab:7f:60:9e:32:
ff:1b:9c:77:a3:eb:16:92:60:45:94:4e:6a:2e:e7:
69:32:ae:c3:2e:43:fa:85:a9:10:09:51:47:c7:28:
92:21:b9:ae:b4:c8:38:ab:85:e0:8f:e0:0f:c9:f4:
02:0d:47:c9:16:cc:d4:63:78:4c:12:57:78:9b:bf:
07:a0:d1:1d:a1:e0:0f:47:96:63:3b:01:c2:b3:a8:
f7:74:05:41:69:d3:26:c2:99:a3:3e:37:02:2d:de:
6c:5f:38:ab:a7:75:45:c6:81:a8:c2:f8:e6:f0:ba:
ef:d4:f8:ce:29:70:8c:77:3a:7b:c2:92:3c:70:57:
68:16:66:d8:40:0e:70:98:b8:0e:72:d0:37:20:46:
31:31:00:dd:c4:d7:60:2e:c6:2b:61:c4:d0:d8:cd:
39:8d:ba:4e:23:ca:6c:a5:21:24:f0:1a:b8:65:e2:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E2:42:CE:03:3D:58:76:49:58:E8:B0:BF:AD:AC:9A:0F:C5:22:AD
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8d:0e:e6:29:0c:f2:f5:c3:1a:4b:bd:4b:79:7f:1c:b8:b2:
f8:66:46:cc:68:cc:88:d6:e9:97:65:cd:65:23:9e:10:ea:99:
c2:91:08:4d:a5:14:49:82:77:3e:68:fa:98:32:76:64:f4:2d:
11:a0:4d:d5:28:d6:1e:6d:b0:d7:72:4b:f3:69:c8:01:94:e0:
f0:bc:59:1e:2f:e5:09:37:cd:97:0e:8b:41:77:53:60:c1:67:
3b:4a:88:41:d1:3c:66:a0:54:f3:6a:25:b0:21:95:04:57:74:
b8:f0:35:76:6d:2a:a3:17:3b:ab:83:91:f9:cd:49:6b:39:3d:
a4:4a:f7:bf:b2:d0:48:09:56:4f:30:bd:36:4d:01:29:2d:e6:
d3:76:35:80:18:5d:60:05:0a:21:b5:1b:5a:35:e3:34:6d:af:
d1:05:cb:ca:1f:06:85:ea:32:71:18:ea:9d:75:84:eb:cb:56:
71:d0:b1:e5:56:44:08:f6:dc:0d:8e:a0:0d:6a:ef:00:cd:75:
fd:a0:48:3f:02:2a:33:88:c7:f9:2b:67:4b:be:d4:bd:91:bc:
a0:00:c8:6b:52:d0:6a:bd:6b:68:43:72:7f:99:91:6c:bf:90:
7f:41:37:7f:b0:eb:6d:1e:f2:cf:9c:81:fe:fa:21:a2:99:63:
7e:98:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:42 2026 by rpki-client