Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: b1ItIfaWUOuMvfsC/iaFhh7qh5Yd+v3HPKB/ykYF1zc=
Subject key identifier: 20:90:92:23:0B:27:59:A2:3F:2D:C5:93:3D:DA:9C:F3:B9:B9:16:BE
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019E1D5914FD510872C5F9CAFC70EEE5D6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 03B6
Signing time: Tue 12 May 2026 18:00:37 +0000
Manifest this update: Tue 12 May 2026 18:00:37 +0000
Manifest next update: Wed 13 May 2026 18:00:37 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: r6RGM42aqJ2Peji/HQILS8a+BCVZG6NPZX56RBL15y8=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:14:fd:51:08:72:c5:f9:ca:fc:70:ee:e5:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: May 12 18:00:37 2026 GMT
Not After : May 13 18:00:37 2026 GMT
Subject: CN=209092230b2759a23f2dc5933dda9cf3b9b916be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:56:fc:0f:e4:ad:9c:a4:d1:ac:73:ed:fa:
ee:35:49:65:83:3d:c6:01:b9:32:6c:09:82:1b:06:
cd:8d:95:65:3d:61:61:71:14:67:ea:2b:0f:e6:4f:
01:53:6a:b6:5d:48:4d:55:a6:5b:f8:99:d6:ef:7f:
0e:32:ec:7b:00:1d:55:d5:a1:bd:4f:4c:fd:97:10:
f8:9e:f7:02:b9:2f:6b:a6:4c:e1:c4:8c:54:e0:ec:
a4:6f:5e:67:b3:72:c6:c3:a5:4b:b9:79:e7:a0:a5:
3c:10:54:52:f7:e3:6d:c6:24:5c:bf:50:8b:6a:22:
7f:3c:75:5b:e2:cf:1a:0c:37:12:cb:42:36:da:f0:
f1:7d:5f:37:60:17:81:81:c8:3a:9a:26:1e:b2:d3:
77:4c:ed:55:4e:59:02:66:a5:77:32:93:be:cc:fd:
6a:47:f6:53:65:c9:69:a9:2f:90:35:e6:1b:97:90:
31:f3:be:c3:a1:80:15:09:a7:6e:8b:31:a0:73:99:
94:33:00:d2:28:7a:36:5e:7f:77:db:86:48:46:0b:
aa:cc:cc:0b:77:78:43:f6:d2:b5:80:2e:97:6c:ca:
03:91:75:ba:97:eb:05:87:a4:45:08:24:6d:74:16:
e8:9c:fd:42:10:a1:d9:0f:70:75:5c:e2:4f:3a:c0:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:92:23:0B:27:59:A2:3F:2D:C5:93:3D:DA:9C:F3:B9:B9:16:BE
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:99:2c:7e:62:04:43:74:56:e4:9f:35:c4:04:f8:ef:c8:
40:c7:58:10:ab:99:43:94:67:5f:bb:e2:d2:1e:8f:66:e1:e7:
d8:8d:d1:63:d1:db:55:5f:99:ed:d2:e9:96:2f:53:8f:c9:d6:
44:56:fe:57:05:14:62:9f:04:9e:a5:2e:af:84:0a:f0:7e:73:
39:5a:43:a8:fc:b7:96:70:8f:47:ce:30:36:8c:94:4a:b6:81:
6b:4f:75:6d:d7:13:c4:8b:9d:27:a8:61:21:e1:ff:a3:2c:ec:
8a:bb:0e:fb:24:08:e2:71:46:3b:09:9c:bc:2c:a6:04:64:c0:
cb:7e:d2:7e:e0:e8:81:93:f7:6a:d9:df:19:fd:71:e2:9d:b0:
31:aa:c8:6e:6d:c7:16:75:54:b3:ea:38:c4:5f:37:c0:07:a7:
d2:72:a9:fb:2e:a4:fb:81:72:65:e1:17:06:96:e3:e2:1c:2d:
c2:ac:bd:60:af:f7:34:85:96:50:59:1d:a4:d0:a8:77:01:62:
c0:cc:f4:34:93:0f:59:f8:a1:49:8c:d6:e3:63:0f:73:78:6b:
d6:0f:0c:47:75:d6:7d:0d:a4:83:64:40:65:93:7a:3b:1f:4f:
20:a5:05:a4:65:5c:78:de:14:d4:c6:64:63:65:54:58:ad:bc:
dd:4d:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:05 2026 by rpki-client