Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: 2b+p0XFe32LQx4WTNS0cJ2UfRO7iv05VpeL8HiDbyL4=
Subject key identifier: 2E:E2:FF:CD:5D:03:28:02:DC:36:DD:3B:CB:1D:FF:73:9D:D6:0C:7D
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019E1CEBE2AFE4B75776BBC963B1D07CF84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:01:21 +0000
Manifest this update: Tue 12 May 2026 16:01:21 +0000
Manifest next update: Wed 13 May 2026 16:01:21 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: CY+DINqwX/PE/rRpKkD+p4N/k6cEfOyWsf9WKJAz5Co=)
2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e2:af:e4:b7:57:76:bb:c9:63:b1:d0:7c:f8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: May 12 16:01:21 2026 GMT
Not After : May 13 16:01:21 2026 GMT
Subject: CN=2ee2ffcd5d032802dc36dd3bcb1dff739dd60c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:8d:bf:20:ee:f5:13:7d:32:aa:c1:a5:0f:
64:73:db:4e:20:6d:6e:01:a0:98:f0:12:00:08:78:
1d:7b:e9:cd:16:2e:3b:1d:f8:5a:17:6f:c2:e3:bc:
ed:1e:21:05:26:f7:23:3c:02:4d:bc:7c:c2:0f:3a:
26:84:00:25:8a:77:1a:3e:5a:58:33:3f:2b:10:56:
29:5f:ab:19:bf:1d:6d:b5:99:4c:31:99:8f:7c:a4:
d6:ec:58:7c:1c:fd:8b:d7:92:97:1e:19:e4:0f:22:
ba:32:ab:3e:3d:81:7b:e2:f2:b3:a1:af:93:6f:b0:
27:f1:98:80:da:86:b1:d5:aa:bc:fb:80:07:1d:96:
cb:20:9e:e7:ea:6c:03:58:6e:06:5e:f5:1c:3b:33:
6c:23:d9:68:29:22:5f:1b:c7:f9:c7:7b:b0:a8:9a:
9f:bb:f4:35:5b:44:d9:9d:90:db:34:4f:5e:f5:1e:
4d:3c:8e:38:a4:15:c0:2d:5d:36:12:80:2c:c2:f4:
24:e9:92:53:b6:1d:8a:48:da:dd:2b:32:fc:4c:b3:
be:73:b8:9e:2f:f2:20:b3:a5:94:8f:f9:06:f4:7f:
7c:aa:9a:9c:5d:b7:b4:85:fb:c4:15:bd:25:39:2f:
bb:eb:7a:f3:94:a4:8e:c6:f6:3b:97:3e:76:c5:d1:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:FF:CD:5D:03:28:02:DC:36:DD:3B:CB:1D:FF:73:9D:D6:0C:7D
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b3:5b:4e:b2:8d:c5:e8:09:bb:31:61:aa:ec:69:ca:82:89:
2e:e6:a2:e8:d8:42:ab:29:9c:e9:58:11:c8:22:27:64:b9:d9:
a5:7d:dc:d0:9f:b7:cf:48:36:e0:0c:f6:5d:25:3b:db:6b:be:
5d:ff:5a:22:95:83:4a:06:70:9f:cf:85:0d:51:8e:03:d4:f6:
f5:ad:d7:4d:8b:69:89:d4:6b:44:23:6e:30:f1:d2:4e:91:c4:
cd:e4:62:4a:27:43:d2:3a:07:87:87:8e:0d:17:ef:f2:9c:fe:
dc:44:15:a7:7d:2e:2a:58:ae:d8:17:5f:e2:9d:f6:2a:1f:3f:
72:00:dc:78:f3:2e:ee:a8:d8:8b:f3:b3:38:93:44:c5:6f:fa:
8c:be:3d:21:e6:24:05:b0:75:92:c0:56:94:fc:a4:6a:a5:01:
0a:a9:bb:96:3c:d0:b3:c8:ef:f8:8e:07:79:1f:32:e2:ef:ff:
2e:35:7c:1c:a4:bf:d5:b8:d7:a6:5c:c5:30:85:41:04:3d:fd:
f4:54:86:6f:48:22:64:79:80:3e:b0:42:ac:dd:e9:1d:ec:b8:
5c:21:04:fd:08:fe:6c:dd:f8:ec:1d:a6:37:af:a3:fd:e4:7c:
15:c6:fe:75:ea:ff:f0:33:07:ac:0b:12:01:76:42:ba:24:8e:
fc:2a:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:18 2026 by rpki-client