Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: ZfY7X+xHUS3rZpazQqDXMc8JNcWeUWswiBLPbqorKmg=
Subject key identifier: 40:17:6C:4A:83:73:8E:82:37:16:D6:E1:AD:F9:07:4A:58:9C:FE:D4
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 019E1CB446B448489FE898A16E94B783C22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 15:00:37 +0000
Manifest this update: Tue 12 May 2026 15:00:37 +0000
Manifest next update: Wed 13 May 2026 15:00:37 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 5BC4qWublErU96V9mw8oV+0j14wRJF7ObAmYaPwIhgE=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:46:b4:48:48:9f:e8:98:a1:6e:94:b7:83:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: May 12 15:00:37 2026 GMT
Not After : May 13 15:00:37 2026 GMT
Subject: CN=40176c4a83738e823716d6e1adf9074a589cfed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:f1:4c:ed:47:7a:2c:0f:ce:e3:12:79:54:
7b:95:71:72:d1:bb:d8:31:a0:74:a7:cd:85:2f:b1:
4d:7f:ac:e1:ed:f8:cd:0a:e1:a8:e1:37:78:1d:5e:
12:9e:c9:5e:b1:d0:08:f2:f7:ba:dc:91:59:9e:0b:
0c:9a:4f:f7:49:c4:0c:30:95:61:32:4c:86:40:88:
20:1a:0a:09:8e:92:06:5a:69:c3:da:04:ac:ea:7e:
40:51:58:95:6c:31:63:f9:a4:d0:cc:7f:f6:b2:e3:
2f:1f:d7:91:27:dd:42:ea:3f:93:b7:11:4e:97:18:
a5:b0:89:4d:c3:ab:1a:68:15:57:87:22:c3:8a:bf:
51:2a:85:49:d8:cf:70:7c:48:3b:18:80:4d:3a:df:
e5:74:7a:21:d6:f0:94:fe:00:9c:12:2b:60:5b:81:
2d:25:83:ef:04:cb:1f:5f:a3:26:80:26:23:f0:bc:
45:07:0e:8a:fc:4f:fc:50:72:d8:93:6c:20:f8:76:
54:89:0c:03:02:39:10:7a:5b:2c:43:16:79:68:01:
76:86:c5:8a:51:70:e9:d6:66:8b:52:63:d9:96:ee:
f1:9f:ec:05:db:b0:f3:6e:88:5b:ab:a6:0e:ba:b2:
c2:07:c6:d6:7c:98:63:7b:f4:82:3b:db:a5:ad:6b:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:6C:4A:83:73:8E:82:37:16:D6:E1:AD:F9:07:4A:58:9C:FE:D4
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:32:69:e4:89:ec:d3:ac:2f:b5:22:a4:3f:77:64:78:12:
bc:30:62:ad:96:a5:b7:02:9b:2c:85:7b:4a:d0:81:c6:c8:09:
09:27:da:c4:fa:c2:8b:c1:75:75:96:d8:4a:9a:1e:28:78:ae:
19:f7:b7:49:b3:4e:df:17:57:0e:40:bf:01:7a:88:6b:81:91:
ef:0c:79:31:e7:06:a9:1f:29:c4:5c:2c:98:bd:28:b6:c7:87:
34:47:84:ed:18:a1:76:80:53:1a:6f:12:28:05:da:ea:52:85:
15:25:47:9a:1d:11:01:fe:7f:63:80:5c:c8:fc:db:93:07:24:
25:8d:7b:55:d0:2b:cc:a7:56:28:22:7c:d0:6e:20:7d:45:8e:
e4:2e:2a:2b:c7:be:8c:5a:14:5a:98:f3:46:44:0f:72:f5:7a:
f0:c0:cc:83:b1:01:dc:92:17:5a:6f:37:dc:85:fc:f0:48:9e:
56:dd:a4:68:10:2b:0c:1e:af:78:6c:36:f4:51:c3:65:c0:4b:
63:a3:9e:c1:c8:c6:fb:15:f3:a5:cc:f7:3d:5e:e0:e7:8a:28:
a1:95:a3:21:70:22:3b:6f:9c:40:43:03:9f:06:33:be:9d:7f:
36:06:76:16:56:3f:35:bb:bd:80:3a:20:40:f0:f3:c3:47:a0:
93:ce:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:47 2026 by rpki-client