
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: VjWqqteN/7cFR4plxh5wIGvKfAtL8LPuJeYx2oxehwo=
Subject key identifier: D0:C6:1E:E0:76:8B:E2:F7:21:35:8B:C4:7E:53:35:3F:B2:C4:D8:C4
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019E1DFE697BB1647FD0597F01F4D01A93F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: BVsVjS1jfPkELsHPcm93l53Y6yYp3bHpWqakeXjqFNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:69:7b:b1:64:7f:d0:59:7f:01:f4:d0:1a:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=d0c61ee0768be2f721358bc47e53353fb2c4d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:67:0f:8b:80:ce:f2:cb:82:fd:26:98:9b:
f1:90:36:77:85:53:cd:1f:b1:c2:0f:96:89:9e:06:
93:cc:5f:b4:3c:13:4c:c0:aa:dd:7a:de:5c:b5:4a:
0c:4f:b1:1a:ce:4e:93:af:03:57:0b:37:01:fe:bd:
3f:35:64:1a:51:5f:cd:5c:9c:ed:6c:f9:01:bb:d0:
c7:d5:d8:77:5a:c8:f2:57:05:b1:7f:0e:6a:9b:f5:
a2:b7:9c:67:87:a6:b1:0e:53:41:aa:a5:41:7c:8f:
39:71:53:cc:6b:cc:a5:a7:57:4e:de:ef:bd:22:41:
6f:7a:3d:6e:62:6a:00:e5:93:49:91:43:ad:69:7f:
0b:01:02:54:1f:87:c8:f1:63:77:dc:df:76:d0:12:
1b:ce:3d:92:04:e2:a8:47:39:ef:04:81:28:5e:bd:
11:3d:bf:28:60:5b:7e:26:16:bf:e4:98:ec:1e:bd:
67:af:7a:b1:ee:c7:fa:c4:e9:a5:a9:56:a6:e1:59:
97:6d:14:ca:02:e8:87:02:de:de:20:0d:b4:76:31:
2c:21:0c:e2:db:bd:f2:0f:4b:06:1a:2c:1c:16:f2:
00:16:49:42:67:34:48:65:3e:86:5d:97:0e:ad:60:
97:02:6f:9e:f8:1a:44:13:28:34:c3:b6:b8:3e:59:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:1E:E0:76:8B:E2:F7:21:35:8B:C4:7E:53:35:3F:B2:C4:D8:C4
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:80:d6:21:a6:1d:28:b9:95:ed:f4:54:da:bb:79:ac:c7:f9:
7a:ce:16:c6:ae:b2:09:5f:b7:a6:90:37:40:bb:d7:37:56:00:
42:cf:e3:1d:9f:25:c5:8a:87:c2:d2:db:d5:a4:b1:c0:7e:f7:
ce:2a:77:6d:ac:f8:9e:5c:c3:41:d8:5e:95:e0:f5:66:14:5f:
bb:31:f7:df:de:bf:24:f1:be:1f:43:fe:a2:f0:da:bb:d6:2d:
92:9a:25:38:8b:f8:90:a6:4a:79:b1:4e:5d:15:f1:80:7b:bf:
a7:cd:6d:59:58:46:14:25:80:95:1b:c6:b2:cc:22:a6:c8:77:
61:8a:08:1e:94:f4:31:97:17:08:70:72:d6:d2:71:c9:af:ea:
cb:67:46:2f:bc:5b:e0:88:8d:c9:66:5f:24:40:40:cb:47:06:
4b:39:6a:4d:f3:84:01:55:6c:d3:db:42:d1:f6:36:cd:4b:1e:
f6:0b:c3:de:8a:76:a5:b1:e7:e0:42:d5:e2:a9:1c:87:26:cc:
81:4b:59:f5:3a:a5:32:ab:2e:7c:7d:9a:46:f3:37:8b:7f:50:
94:c6:c4:c7:ca:da:65:a1:c5:84:d8:f9:43:a9:e1:7d:03:ad:
2a:46:45:a4:15:71:dc:79:99:7b:b0:57:78:08:0c:ed:6c:27:
ed:36:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:51 2026 by rpki-client