
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: TCbhxhIBinSl9ydI94nzORlToWFfd/SgJPQCoGWZMo8=
Subject key identifier: 61:9B:CB:07:5C:FD:A8:BC:F4:8A:17:14:F2:09:6A:F0:36:41:B9:2A
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019E1D225BC68AFF60A1BB0A9E050AFDE4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:00:51 +0000
Manifest this update: Tue 12 May 2026 17:00:51 +0000
Manifest next update: Wed 13 May 2026 17:00:51 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: kMqkAVk6WqSDnhHgsW7yoAtUAVtX/up+Stks5ihDLro=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:5b:c6:8a:ff:60:a1:bb:0a:9e:05:0a:fd:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: May 12 17:00:51 2026 GMT
Not After : May 13 17:00:51 2026 GMT
Subject: CN=619bcb075cfda8bcf48a1714f2096af03641b92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:4e:fd:46:1a:79:58:ac:84:b1:4a:8c:7a:
f1:18:b3:be:84:33:33:f9:e4:d6:b4:a3:20:8d:75:
ac:cd:34:78:08:97:32:77:cf:11:d3:65:d9:6e:e6:
e1:61:86:4e:a6:3b:d7:43:88:3e:e5:b2:ac:37:d2:
26:30:24:ac:9b:a9:97:a2:6f:6f:b4:73:4d:9c:d6:
e3:da:47:53:5f:b0:37:4f:d1:36:1b:d9:d9:76:2a:
78:ed:55:3b:d7:b2:5f:45:7e:39:71:8f:25:40:3e:
25:41:d1:f1:fc:b5:0b:5e:67:78:7e:f1:2a:c0:93:
bb:f9:bb:5a:6b:17:e9:1f:6c:87:b8:2f:39:9d:20:
3d:8c:50:14:3a:04:30:de:62:5a:c2:df:40:6d:56:
8c:38:c7:ff:7c:45:bb:2e:e3:03:7f:a2:33:32:1d:
74:72:2a:5c:49:ff:6e:39:fb:04:a9:26:a9:ce:24:
97:08:8f:61:d1:b7:85:dd:3c:12:2d:ed:62:46:f4:
78:d6:c5:b2:06:b3:47:c6:fa:3a:f3:a7:44:de:ba:
2d:a1:3f:a5:de:47:f2:21:b2:99:8f:65:d2:01:8c:
38:07:fa:9a:c3:1b:6a:18:47:4f:df:63:d1:f9:23:
d6:ac:65:db:29:34:83:45:b5:d6:28:da:7d:89:ba:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:CB:07:5C:FD:A8:BC:F4:8A:17:14:F2:09:6A:F0:36:41:B9:2A
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:90:87:9b:61:64:33:86:87:de:d5:5c:3f:28:9d:6b:61:de:
25:7f:4a:71:6b:7c:1d:d2:15:33:6a:8d:c3:77:5d:2a:03:ad:
72:d8:fe:4d:7c:91:37:8c:bc:1e:c7:e1:6d:90:46:a3:98:1c:
24:87:ae:d5:0a:6a:a2:ac:c4:31:cf:4e:ff:2a:95:26:43:98:
31:e4:4f:41:04:02:1b:0b:ea:06:9f:e1:c2:a4:f0:e7:d4:02:
c0:59:17:cc:10:6d:5a:f3:70:e8:ae:66:97:3d:97:56:3c:7b:
be:9c:e4:5e:ad:7a:38:b9:35:62:96:07:74:93:47:97:b8:57:
d1:a4:1d:8e:5b:cc:d6:4d:59:79:70:78:b5:c6:f1:ce:2a:3a:
fe:94:cb:51:29:c6:8f:d9:71:af:a4:93:61:e0:ee:27:b5:20:
7a:46:82:09:94:72:ec:7c:bc:35:0d:d1:25:91:71:c2:7c:d8:
b0:fb:a4:78:7c:ee:1b:71:d1:c3:61:c0:98:90:01:f2:ea:b5:
62:86:e2:66:c5:5d:d9:7a:be:40:29:5a:cd:fe:7f:aa:55:49:
67:45:dd:25:21:42:e0:a2:d7:f1:2a:d1:8f:75:0d:b6:94:77:
69:d9:cc:fb:a8:85:a1:58:52:c1:d3:1d:88:9a:45:88:4f:64:
b0:34:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:45 2026 by rpki-client