Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: Uux0FCZnE4ZZAwjTsnmNlQFDV0eCOj7kDKITco6m3xg=
Subject key identifier: 5D:6F:54:68:AF:46:EE:A0:B7:C7:F0:52:B1:3A:8A:F1:6F:8A:2D:4B
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019E1FED0676BF3E78044E79B6FE73311A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 0288
Signing time: Wed 13 May 2026 06:01:27 +0000
Manifest this update: Wed 13 May 2026 06:01:27 +0000
Manifest next update: Thu 14 May 2026 06:01:27 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: s1n+HTyi7RQxWO0ItfI4yG12/3qjK3OHuQlGUvwBxtk=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:06:76:bf:3e:78:04:4e:79:b6:fe:73:31:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: May 13 06:01:27 2026 GMT
Not After : May 14 06:01:27 2026 GMT
Subject: CN=5d6f5468af46eea0b7c7f052b13a8af16f8a2d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:52:bd:19:c4:e8:c6:3a:f9:57:c0:bd:fe:
87:fb:58:5c:e5:cc:d3:28:b7:3f:1a:40:2f:5b:c7:
c4:9d:b6:04:4b:88:d7:fd:38:1d:f8:19:f5:ac:ce:
6c:67:3c:3f:75:79:43:eb:1e:28:34:2b:82:a4:f5:
83:ca:cd:83:2e:eb:54:91:40:d5:9b:79:b6:e5:c7:
66:96:65:1b:ed:fc:4b:f8:a0:84:f2:1a:4c:75:2a:
93:ad:b6:5c:05:c3:63:7f:08:ca:70:3e:0c:45:4e:
b1:30:eb:20:ac:34:9e:8d:bf:0b:b2:fc:78:6c:95:
0a:14:54:a6:12:97:8e:e2:75:64:91:30:f5:5b:dc:
4a:85:b8:9b:33:d7:3a:02:77:8b:52:e2:e7:42:49:
d7:15:56:eb:0e:11:e3:d4:47:6c:93:45:0b:8b:a5:
ec:a4:2a:0b:4e:5e:96:67:5b:db:20:73:64:99:d7:
19:ff:58:22:de:60:26:e2:08:8d:7d:30:0b:f5:fb:
69:e3:03:1a:b7:ee:f2:51:ad:26:93:e6:1e:8b:b7:
e3:9d:16:56:1c:06:a8:30:d5:de:fc:bc:2f:2a:83:
44:d7:68:39:fc:37:91:f1:1e:56:a1:1b:0b:90:96:
9e:1b:09:5b:31:8f:ef:0b:fe:6f:aa:5b:e8:67:bc:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:54:68:AF:46:EE:A0:B7:C7:F0:52:B1:3A:8A:F1:6F:8A:2D:4B
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:93:d1:fa:09:e5:b5:db:c8:9b:51:07:5e:2b:be:71:03:70:
55:6d:4a:8e:a3:2b:3e:5b:c0:03:97:41:85:2e:c1:90:75:ac:
51:73:61:9e:e2:89:39:ea:db:b5:03:ec:51:45:ac:e7:ad:c4:
3b:12:4e:58:a2:4c:e4:a0:4f:cb:ac:ce:8b:75:af:2b:c8:cd:
36:81:04:67:d5:25:8b:ea:2d:a2:09:2b:60:ff:95:12:a9:ad:
be:24:73:be:c3:fc:9a:f3:08:25:9c:e8:52:5a:67:ed:47:09:
66:0c:c1:dc:ff:14:dc:fc:3e:30:eb:d0:84:25:2e:a3:ca:34:
d1:73:fc:89:8c:0d:79:60:a5:51:f4:fc:92:f9:12:76:b2:3c:
7e:bb:1a:d7:f3:00:c2:51:31:4b:da:fc:63:1f:3e:9f:cf:e8:
b4:bb:c4:fb:34:3b:84:17:43:f4:58:bc:86:aa:18:e9:c8:a3:
eb:fd:7e:f3:8c:05:9e:64:d0:ab:d0:ae:0d:54:e2:57:16:28:
00:05:97:b5:5c:14:f3:1c:fb:74:16:fd:41:c3:a3:43:cf:6c:
2f:9f:03:62:84:5a:2e:22:67:46:55:7c:77:77:65:df:f4:2a:
34:b4:ef:d3:9b:ad:9b:71:bf:6b:9b:ab:9c:d1:28:54:5e:61:
b5:9e:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:53 2026 by rpki-client