Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: EctDd9PBZFXSQLMLWZ/c522PyU+e3DkiPB375evFOZA=
Subject key identifier: 58:7E:9E:7D:40:47:51:F3:2F:48:AA:E7:98:3B:54:2B:72:BB:5A:59
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 019E1D222A2C1A7A1C235A0E5C2C84EB7880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 17:00:38 +0000
Manifest this update: Tue 12 May 2026 17:00:38 +0000
Manifest next update: Wed 13 May 2026 17:00:38 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: csbCmE84B2DhkTUhWY7hd6Ll5F3o3Ek8LOPvYt3khDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2a:2c:1a:7a:1c:23:5a:0e:5c:2c:84:eb:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: May 12 17:00:38 2026 GMT
Not After : May 13 17:00:38 2026 GMT
Subject: CN=587e9e7d404751f32f48aae7983b542b72bb5a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:aa:f1:f5:e9:7c:ee:4e:d1:99:bb:3a:65:
b5:62:1b:09:f3:35:55:7a:4d:ad:5f:09:72:3b:9d:
dd:d0:22:85:5d:fc:d2:4f:2f:78:42:23:dd:20:bb:
92:ae:ce:f6:3a:7a:45:c8:9b:7e:5f:19:4a:af:dc:
6b:55:48:00:6e:68:77:cc:aa:3f:39:e2:de:74:f0:
f1:2e:18:2b:df:ae:da:89:9f:72:5e:e2:ce:a9:c2:
ba:61:36:db:42:9e:ca:32:62:af:61:8c:25:78:8d:
38:13:90:8d:9c:df:ca:df:33:8c:ea:98:28:da:d3:
ae:6a:cb:ca:18:d4:43:3a:ac:b7:54:be:3c:d7:9a:
21:e6:b6:07:38:60:9c:a8:75:20:1d:13:c9:6e:cb:
3f:ca:3c:ff:73:a1:5d:5a:e4:5b:a8:3b:9c:e2:3b:
33:1a:03:93:ab:e1:12:a4:4c:97:f0:b1:f9:59:8e:
c7:d4:95:cf:4f:be:23:17:da:a3:79:e0:63:59:90:
8f:64:91:c8:56:86:e6:cf:f4:af:1d:67:2c:f4:f0:
eb:78:6b:c2:e9:0d:f4:a3:93:30:d3:da:69:85:b9:
51:31:92:26:91:e6:d5:16:6d:3f:60:6c:d7:f0:a4:
1f:fb:62:aa:95:67:b9:0e:cc:cf:20:7e:b2:9c:84:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:9E:7D:40:47:51:F3:2F:48:AA:E7:98:3B:54:2B:72:BB:5A:59
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e7:66:73:90:6d:63:56:29:5e:c5:3d:94:c5:5f:75:e5:aa:
1f:7d:a3:16:88:9b:a6:b5:16:2f:93:d7:59:c3:a4:8f:42:34:
cc:ba:19:b7:fc:a3:eb:b6:f5:6f:4c:6d:ff:8c:02:ae:e7:5e:
93:9a:4f:3e:5f:80:64:17:e3:71:1c:7e:83:07:6f:27:0f:9b:
32:7d:cc:7d:86:9e:62:5d:3e:d0:e0:1e:d6:9b:a5:37:14:77:
fc:b8:49:58:6b:b7:93:74:22:11:86:eb:1e:41:d3:69:a1:d3:
79:5a:6c:23:b7:81:44:c7:86:66:0b:64:e8:fb:6d:c8:16:f5:
40:20:de:61:72:f1:47:2c:2e:97:47:f9:c0:9a:14:bb:d7:47:
42:b8:85:d2:08:f2:92:7c:61:96:81:42:60:3f:cf:6d:ad:65:
59:e5:2d:51:75:c9:b9:1f:d7:e9:e3:3f:09:1d:0f:91:e6:35:
e1:b4:74:1c:f0:ed:a9:b6:41:49:dd:d6:e7:2d:d9:17:47:3e:
d7:86:ac:21:4e:75:85:7c:87:41:a7:c5:ce:f7:f0:0b:3c:bb:
a5:ae:9a:2d:da:9f:c7:dc:ee:9c:02:70:b2:61:ee:30:39:68:
96:d4:04:39:16:c6:31:0e:0e:8b:c8:1f:23:8c:01:d7:e5:50:
2c:dd:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:30 2026 by rpki-client