Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: JqfBZOcXScDwritJaxGOPJyMk0jvd2dk2/yY/XT3Xqk=
Subject key identifier: B5:DB:03:6D:04:04:8F:4B:11:54:56:A4:9D:A1:41:16:64:A4:31:17
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019E1C475E2FA58C413B7D301F9BA4B389A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1086
Signing time: Tue 12 May 2026 13:01:39 +0000
Manifest this update: Tue 12 May 2026 13:01:39 +0000
Manifest next update: Wed 13 May 2026 13:01:39 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: +tMnxCSHEkbgM4Y8FgDaM3A3onXziV8UN529s2q15aU=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:5e:2f:a5:8c:41:3b:7d:30:1f:9b:a4:b3:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: May 12 13:01:39 2026 GMT
Not After : May 13 13:01:39 2026 GMT
Subject: CN=b5db036d04048f4b115456a49da1411664a43117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:e7:dc:e0:73:05:3b:9e:35:8f:de:35:5a:
42:3d:5f:46:3d:01:2c:58:d1:e8:c1:4a:7a:24:b2:
c3:77:14:95:27:b2:76:74:5b:47:e4:83:23:36:1c:
9c:11:1b:48:8d:59:fb:0b:ac:fe:44:53:2d:bc:b0:
b1:bd:ac:e4:bb:4e:f4:c0:1c:9f:56:51:df:b2:2e:
59:53:65:6b:c1:0e:a7:e8:76:3a:5e:f9:f2:4e:c6:
44:b5:96:d4:36:c4:8c:fa:bc:25:01:37:7e:29:8a:
36:13:57:9c:fc:43:60:2c:b8:5c:4c:86:52:50:5a:
9b:5a:a7:7a:bb:38:04:14:83:4c:ee:89:5b:ab:13:
59:05:9e:00:fa:8b:2c:44:a4:47:72:74:2d:90:43:
1a:03:b8:8e:1e:3d:1c:e2:db:25:7a:eb:f6:c9:91:
4c:34:e3:cb:46:b2:0d:db:40:a2:7f:c2:19:d9:28:
d0:64:f1:78:10:34:79:44:c2:44:26:99:ce:ea:70:
cc:8e:b5:84:39:82:fb:f5:c4:f9:48:2b:b5:88:96:
4a:b3:0e:96:0e:5f:8c:60:6e:7b:bb:8c:a2:43:3e:
8a:6f:01:b2:e2:7e:71:62:b6:f7:5f:a2:45:9f:93:
61:37:32:43:c1:be:6e:8a:5e:dc:9a:8e:52:ef:d5:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:03:6D:04:04:8F:4B:11:54:56:A4:9D:A1:41:16:64:A4:31:17
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:21:aa:b2:ae:f4:17:81:35:ff:3f:a7:f3:f7:1c:7e:ff:2b:
b5:84:74:2c:78:29:e5:4b:2f:29:b1:00:ec:ee:af:0f:3b:c4:
90:aa:2e:2e:a6:15:b7:5b:5a:f3:95:6a:f8:78:87:da:ae:cd:
4b:5f:47:0a:63:e5:cc:8f:ff:ba:bf:cb:36:5e:c6:c6:d9:50:
e6:6b:2c:78:16:5e:53:51:72:70:10:5e:f4:4a:fb:7f:f4:4c:
bd:7b:d1:1e:f6:5a:0b:40:8f:1f:23:1a:53:61:7b:80:5d:74:
36:b4:6f:04:92:8c:14:45:38:71:53:a2:16:a3:c6:16:82:3d:
9f:cd:1d:59:22:29:77:61:71:aa:b2:5c:26:c9:cc:af:86:22:
9a:20:dd:e3:b8:21:af:c9:42:ba:48:19:55:09:d8:dc:3d:84:
d5:48:db:27:a6:9d:51:29:79:38:52:f6:6a:d3:8e:b9:3d:82:
e1:b5:e6:ba:38:ed:15:54:5c:38:2d:8e:47:ec:45:30:32:35:
9b:96:96:38:d5:d8:0a:c0:5f:0e:67:89:c2:73:72:3b:43:71:
a7:62:28:8a:c1:e3:76:75:5e:c5:4e:a0:77:99:6e:54:a8:cf:
25:5b:fc:a7:11:56:ab:83:fd:67:35:9a:ca:58:db:c3:08:a8:
bf:96:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client