Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: +MOlpD/gIF1xNIsCDvnHLfiDuxEMYpltdYbXj9XwTLQ=
Subject key identifier: F9:B0:73:4D:85:C8:05:35:F5:8F:08:B9:3F:FA:BF:80:7B:5A:0D:5B
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019E1CEB6443B5E03477CD7003A7DCAF6096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 16:00:49 +0000
Manifest this update: Tue 12 May 2026 16:00:49 +0000
Manifest next update: Wed 13 May 2026 16:00:49 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: fbqedjDFD+JS0RUQrmQx3RUQcyJipmWTQV8Nwpnbq1k=)
2: 79l3omq8_o54S6Kg8vandlH5J_o.roa (hash: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg=)
3: Hp__tFbaZdaiAofy6QbTMuwaJyg.roa (hash: gy/Ii3yXNRU7ahYXH/J+iAr5bw4XRUBaMk0HedWPciE=)
4: SQTwMRoxF7FRyK6nUUWbCz4A9eo.roa (hash: uliL74kF/+emKLIjlFsJMg/YLv06A/SZL5XAxmC6u0o=)
5: bTW2H9C_f0Zyl4rbIo3Z2-aBupw.roa (hash: DXNshREIVgHPI/cdx6PYhMXkKa/NwvrXqrgQumwjc+8=)
6: fqTbi0RgE-7D6SKzQWOs1v9kD84.roa (hash: WZR3ueqxzI32wKwkJGwTbu9WI2FMxl/49YxT+UAs7do=)
7: gAoi5KcKNfH9vaBb2_wpm_FwOcw.roa (hash: cJ8BX4jA9U2tBUDrfO2OTPW3pXUTcKwubUVTAQu92zI=)
8: wULQ1rFany44hlJUjVnf6JD1px0.roa (hash: G805BanUjf0p0J0sQcSfwl8Lk7XU9K4q5pkH78H9/cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:64:43:b5:e0:34:77:cd:70:03:a7:dc:af:60:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: May 12 16:00:49 2026 GMT
Not After : May 13 16:00:49 2026 GMT
Subject: CN=f9b0734d85c80535f58f08b93ffabf807b5a0d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:a2:dd:18:2b:7c:2d:83:45:b7:3b:7c:0d:
41:63:15:06:14:94:f8:a8:47:21:75:c2:5b:1c:65:
4a:0b:64:db:93:4f:ae:1e:dc:80:7a:8d:14:10:52:
45:eb:b2:e3:07:d4:92:51:de:d4:da:f5:48:d4:8a:
d6:4b:66:fb:94:05:e8:a3:18:83:6d:01:b7:0b:37:
cc:42:20:3b:73:8d:2a:50:37:67:9b:de:05:e6:fb:
0c:d4:39:23:66:bf:4a:a6:87:03:8c:c4:bf:e7:b1:
e8:9d:0b:56:e2:94:74:ed:8f:86:38:4e:cd:8c:d6:
50:80:89:8d:93:5a:8a:c0:01:f8:5a:49:df:3a:86:
c8:95:e5:c3:bf:3d:58:e6:c1:0a:44:c2:5a:d7:5a:
79:43:78:e4:16:2a:da:cd:b6:32:49:88:cc:41:10:
a4:a5:78:ad:cd:2c:d9:80:f3:c0:1e:17:6e:0d:0b:
c8:58:50:a0:14:19:aa:81:8a:69:4c:e8:63:db:b1:
68:19:6f:c1:09:d5:f3:8f:fb:69:56:50:7e:74:cd:
58:40:10:c9:c6:8b:a5:00:a8:13:9f:bf:b3:a4:2b:
9e:56:a5:25:8d:e0:bf:fc:77:25:e4:63:02:17:ce:
02:6a:34:8d:dd:3c:d2:2c:5a:fc:2a:a4:7b:03:63:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:73:4D:85:C8:05:35:F5:8F:08:B9:3F:FA:BF:80:7B:5A:0D:5B
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:03:18:ed:6d:92:de:3c:3d:15:fd:c5:b0:d8:20:90:79:
0b:6e:84:4d:b4:ae:95:ce:4b:0f:e9:a8:59:3c:ff:71:0b:97:
32:6b:56:67:18:00:78:38:b3:66:48:09:0d:33:6e:73:05:e6:
11:79:8f:45:41:d5:d6:0d:30:3b:0a:3d:ac:ba:9b:10:c7:32:
30:92:1f:1a:8e:b7:88:f6:52:17:4d:13:94:77:14:c7:81:85:
ee:fa:3b:e3:8d:ec:75:0a:18:ad:67:a5:2c:ab:38:bf:39:22:
15:2a:7c:f1:89:2f:32:56:ed:50:39:04:d0:a1:7b:8c:1e:9f:
e0:58:35:1d:ee:6e:44:ac:ab:2f:57:6c:09:be:91:cc:47:ed:
d4:f0:8f:3e:b0:f0:76:9b:0f:72:1b:a5:e9:ff:0b:c1:26:51:
47:87:87:cf:57:07:81:7c:84:5c:33:e2:e2:9b:bc:49:22:d4:
e5:24:7b:f0:0d:bc:c0:d9:9a:b0:23:f9:5b:17:fc:94:45:e6:
7f:0b:1c:77:1d:7e:d0:ef:23:fc:67:fb:a1:ae:12:15:57:cb:
be:ec:b1:4b:6e:3c:d9:1a:ce:59:38:49:31:12:4f:03:6c:4a:
ec:71:fd:30:e7:c8:e9:9c:3c:92:9a:df:81:ff:0c:63:d3:27:
d1:6e:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:11 2026 by rpki-client