
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
File: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft (raw, json)
Hash identifier: Y/Lgzl/Kq82V8LXqQjtgAc//dThMdk+JSUxnNSt7ItE=
Subject key identifier: 84:C4:26:98:C5:5F:2A:89:A1:57:42:06:6F:D7:FC:A4:68:93:CD:CB
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Certificate issuer: /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial: 019E1D59A6E5FBDEE5D61B95ACA30A8ACE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
Manifest number: 0244
Signing time: Tue 12 May 2026 18:01:15 +0000
Manifest this update: Tue 12 May 2026 18:01:15 +0000
Manifest next update: Wed 13 May 2026 18:01:15 +0000
Files and hashes: 1: 1Xd9T-vmTqWcRzDMcqdo4DeoQuQ.roa (hash: xBqelHlXV4izENr8HmikmcGOwsrcVkd1Rr1h+hdnJUI=)
2: 2zoKFMcGfaIUIi0gjgVI6WP5WyM.roa (hash: Is6VwvQ998n5+DQaPOHXWLSY0DuPhfOU5Gr/Ve2Nr3w=)
3: 5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl (hash: 8dLEvrQbFFRnZMi+HsXiGdBrqKv6TCf2MDzCsPAlybY=)
4: r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (hash: 8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a6:e5:fb:de:e5:d6:1b:95:ac:a3:0a:8a:ce:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Validity
Not Before: May 12 18:01:15 2026 GMT
Not After : May 13 18:01:15 2026 GMT
Subject: CN=84c42698c55f2a89a15742066fd7fca46893cdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:f0:e4:64:1d:52:4f:9d:bc:b8:0b:53:0b:
1c:cb:9d:ea:64:d6:b3:74:77:a1:d8:51:a6:dc:06:
06:ad:e9:ae:37:7b:09:0c:c6:64:44:98:cd:da:16:
2b:3c:9a:a9:63:f4:a5:19:d9:a3:d3:45:4f:e8:1e:
fa:8b:7d:48:e8:e1:2d:d6:93:65:f6:72:f4:21:50:
79:96:11:36:7e:0e:66:0b:f2:6c:7e:8b:97:73:0a:
25:6c:92:81:f0:9c:02:d7:d7:6c:d4:74:8c:73:bf:
c7:2f:96:79:6c:08:0d:bf:66:a3:9d:e2:67:9c:bc:
60:ff:f1:e7:fc:a0:90:22:ea:79:70:55:e3:7c:56:
e6:ea:a3:3c:1e:14:11:9b:8c:a4:6b:cd:dd:c1:e5:
eb:9c:df:69:c5:15:3a:ff:da:49:a2:91:49:61:a9:
55:39:a7:88:df:82:1b:c2:b2:9d:5f:09:02:9c:27:
3f:67:2f:86:e3:1f:63:ab:b6:4f:a0:62:8a:52:0d:
d0:07:6a:8b:d5:c2:5f:a4:26:67:5d:78:25:2e:81:
c9:42:47:b1:b0:47:97:7c:ed:1c:b8:0a:f0:81:ea:
92:36:30:11:89:dc:48:65:78:00:67:10:8f:27:60:
cf:35:66:2e:1f:c2:81:0b:dc:98:da:d2:e4:65:43:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:26:98:C5:5F:2A:89:A1:57:42:06:6F:D7:FC:A4:68:93:CD:CB
X509v3 Authority Key Identifier:
keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:17:d2:be:4b:d8:df:1e:00:5e:96:4c:ba:65:16:3d:2d:1d:
d7:c2:0d:f8:1b:54:86:97:31:b8:8e:0f:3f:a9:4f:24:2c:45:
8a:d1:eb:04:91:8a:fd:d0:95:7f:5e:41:75:4b:8e:e8:84:37:
85:69:b7:b4:4a:84:a6:ab:10:3d:84:6d:34:41:42:2f:f2:46:
e5:62:f4:58:0e:8c:29:99:70:ac:dd:3d:fd:76:70:ae:8f:59:
a9:c1:66:06:db:65:fa:89:75:cd:40:5b:72:09:44:53:b4:4b:
82:e7:b8:a8:81:c6:00:1f:cd:29:7e:ee:b6:0a:13:d5:fb:18:
9f:40:94:0a:96:7b:6a:b1:19:29:2c:05:f3:a3:d7:49:93:49:
87:e1:13:b8:4b:5d:65:c9:7e:3a:93:28:09:79:db:f8:d4:be:
58:39:8a:23:df:7a:4f:db:98:98:d4:df:7f:e1:17:3e:23:1f:
f8:41:a4:5c:29:7b:3d:53:3a:ab:97:1a:fe:56:17:10:f7:4b:
4f:0e:e8:03:97:bf:7b:8a:4f:85:d1:b4:41:0a:7c:b7:82:3d:
30:c2:af:71:9d:ed:bb:d8:14:b3:ee:7f:46:d6:57:08:49:1b:
07:bc:a4:7e:66:92:d1:e1:f0:74:80:1b:e9:19:dd:5e:24:c9:
43:d5:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:58 2026 by rpki-client