Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: S8Az9kGZcCPw+4LdBUMwm9Y5vN8y2isNwn+b/9GcdAg=
Subject key identifier: 04:EA:E6:F9:58:6E:16:CC:DE:15:BA:B4:47:AE:BA:1B:6B:36:F5:DE
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019E1BD8B2343A6498715EB1BCEC418EF103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 04D6
Signing time: Tue 12 May 2026 11:00:46 +0000
Manifest this update: Tue 12 May 2026 11:00:46 +0000
Manifest next update: Wed 13 May 2026 11:00:46 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: NLKQUgw5ZRM/cfbe4WqToYMr7my2Ygw5vVORKV9rJ5c=)
2: i19szVZhRKN0uM8PI30DBqNVBcc.roa (hash: BxpnJWWpyzAJHpDXAkgY/3s3l/OZgniCap33rZlXUMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:b2:34:3a:64:98:71:5e:b1:bc:ec:41:8e:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: May 12 11:00:46 2026 GMT
Not After : May 13 11:00:46 2026 GMT
Subject: CN=04eae6f9586e16ccde15bab447aeba1b6b36f5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:be:87:06:c4:33:b5:b7:8d:e5:c5:2b:9f:
0b:c1:35:82:23:18:b9:dd:e5:91:5a:de:3d:b7:e4:
1a:5a:88:fb:9c:9f:be:14:95:4b:90:cb:ef:d2:85:
28:ae:24:ab:0c:d5:20:e9:5f:94:a3:3b:47:72:6b:
67:42:ee:20:79:65:ad:f6:3a:29:e5:b2:aa:76:cf:
2f:6c:c6:9b:17:c5:78:89:91:f1:41:96:fc:bf:e0:
65:ce:d6:05:21:00:2d:4d:dc:10:a8:09:a3:7c:ac:
d1:c7:12:63:f8:01:00:f7:40:72:80:95:c8:f3:01:
c4:dc:9c:68:a5:e0:d6:f1:bb:a0:b0:ba:50:18:a6:
04:fa:c6:e2:94:ae:2f:0c:53:58:df:66:7d:c6:ed:
b4:ab:a8:ff:dd:9e:27:cb:a7:c0:14:d9:53:8d:02:
cb:fc:e5:06:f5:3d:41:38:e7:87:4f:06:3c:37:f6:
0d:68:03:f3:91:45:71:88:f0:c4:29:06:aa:de:9b:
24:a9:62:60:17:05:00:56:c2:8e:97:20:66:7f:02:
7e:d8:72:40:84:22:db:db:82:20:6e:c5:f2:f3:79:
4b:2a:e8:8e:9d:07:e0:16:8a:26:63:c8:22:d9:a9:
19:4c:29:e6:33:ec:10:1e:e9:ff:49:b7:d0:2b:25:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:E6:F9:58:6E:16:CC:DE:15:BA:B4:47:AE:BA:1B:6B:36:F5:DE
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:0b:42:c8:2b:44:c9:dc:99:8e:cd:2e:ee:5a:f4:f7:59:
b6:33:7e:de:25:db:4f:07:13:98:e3:0f:74:b2:84:03:50:4d:
73:d8:ad:92:b2:60:bb:8a:fc:16:86:d9:b7:28:9b:8a:92:ff:
02:07:ea:d6:c3:ff:a4:4a:f4:b3:81:77:84:28:8e:45:30:23:
61:df:1d:9e:13:f4:68:e8:45:13:3a:4c:f2:be:42:68:d4:09:
be:20:44:f5:9c:43:81:ef:da:2b:89:86:08:e6:da:d8:23:e0:
a6:3a:c9:78:2c:0e:ca:0e:8b:28:3c:aa:3e:fe:4e:2c:40:7d:
20:a7:90:8c:a2:d8:c6:3c:86:76:3b:5e:56:d6:03:48:42:43:
dc:5d:2b:e8:a2:1e:e7:f8:b8:88:bb:43:8c:b3:08:8b:dc:81:
99:d1:86:0d:c0:b5:14:6b:a8:73:05:04:55:b4:42:fc:fc:53:
25:cf:54:91:40:56:85:e8:de:2d:78:43:d9:51:5d:08:ce:fe:
f9:8b:8b:d9:52:ee:e5:0a:80:2b:a0:24:ef:7d:84:68:5b:fe:
38:3d:fe:72:3c:22:5c:1a:bf:18:78:bb:f9:7b:f3:32:ef:be:
bf:f2:48:1e:31:59:4b:67:b5:fa:f7:85:ea:b2:c2:dd:56:67:
2e:dd:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:23 2026 by rpki-client