Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: kllW5A3rFVn9xZjxXuHuTpOl2PNmocXuFJbxn+88nUA=
Subject key identifier: FA:14:D7:B7:7B:59:5C:6E:47:0D:20:2E:B8:B1:82:60:28:94:FC:2F
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 019E1D2313BD60A1A6E5F433F74EBA3812E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 138A
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: qptGSeFpwkibkDOmZa9kdNE3aH5LeAp5cQnMQ+PvWYw=)
2: 8aSgnBiee21nHnHdoWG0UhIValQ.roa (hash: YhuSs4FGn4TIHIwZ7BzCcCCzXr8oW9ygTIMAtZY8VYk=)
3: Pp2H3bThZ25FtqSAcHrrrq1QhOM.roa (hash: y6+Od+cDPN3tOCm1DH2AXWHd6equQ1v8StvCRb4Nogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:13:bd:60:a1:a6:e5:f4:33:f7:4e:ba:38:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=fa14d7b77b595c6e470d202eb8b182602894fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:9d:7a:6d:1a:56:d0:f8:09:18:9a:29:0c:
cf:2e:e7:5a:7b:85:a7:cc:5a:46:c5:72:1e:7e:8f:
e1:db:a4:f1:42:be:39:d4:49:28:93:95:b5:d5:17:
28:65:c7:9d:f5:79:a2:0b:01:6e:57:0f:8c:73:43:
c7:46:77:97:da:63:f6:b6:46:3e:0b:50:d0:69:e3:
15:0c:31:ba:80:d2:b0:33:f1:ea:17:72:98:f6:72:
1f:df:93:64:43:c2:6e:57:34:10:05:8f:41:2a:fa:
fa:de:f8:ce:4d:38:a3:b0:cd:78:fc:cf:4c:10:44:
67:cc:06:d1:67:4f:04:a8:ed:c5:18:c4:df:4b:21:
33:f4:46:26:51:87:8d:27:d3:02:18:62:44:2e:01:
14:42:df:bc:27:09:0f:06:5f:1b:d9:eb:9a:5c:43:
77:82:c9:54:38:87:7d:a7:0e:72:3b:53:65:2d:3a:
0d:66:a9:d3:ef:95:77:a6:e8:b3:50:39:1b:b6:99:
b7:1a:88:80:b6:93:9f:8b:4f:5d:cf:c9:3e:30:ad:
76:ec:a8:d7:72:08:d2:a6:f9:35:3b:6f:f7:50:67:
8b:22:62:28:a0:cd:79:2d:c4:69:7d:6d:ae:cb:61:
f9:f4:46:13:98:85:75:7d:28:e3:f7:b8:ea:82:57:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:14:D7:B7:7B:59:5C:6E:47:0D:20:2E:B8:B1:82:60:28:94:FC:2F
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:14:eb:dd:93:c5:96:f5:16:6c:43:06:4f:99:4c:66:9d:ff:
e5:eb:a2:d8:0c:e6:24:66:11:b0:41:cd:40:78:b2:8f:1a:52:
b3:ed:95:2e:03:45:6c:e0:3c:1b:9b:90:a7:95:f1:71:c7:05:
1b:83:a2:2b:fc:b6:04:1c:4f:a0:86:8a:26:75:12:6a:ec:34:
f9:d1:88:d1:81:3b:b4:bf:0f:13:cf:85:a6:08:a3:f9:21:26:
2c:eb:fb:8d:8b:48:46:9b:64:84:46:64:5b:86:ea:5c:0a:00:
69:93:f7:52:e6:8a:af:a8:29:76:c9:50:59:b8:5c:27:e2:6e:
83:3d:52:02:1d:ec:7d:ed:4d:c6:2d:1f:c2:3c:20:9c:77:66:
a1:11:19:35:16:bc:dc:99:76:e9:5e:d7:4d:5e:62:1e:08:32:
c5:96:04:b7:4a:90:d8:40:f7:66:4b:dd:4e:65:81:bd:5e:3f:
18:66:66:f3:1b:fe:1a:3f:7e:05:cd:52:96:46:a3:65:d2:e5:
20:08:96:e4:89:b7:f6:4f:d1:eb:9d:0c:11:66:a1:c3:e5:c5:
a7:0b:1b:2b:8b:4f:eb:78:16:4a:ab:e2:aa:14:8b:c1:d2:4d:
4e:6c:5c:d9:e4:d9:ac:a3:e6:af:eb:30:f9:25:e8:2b:3e:12:
84:0a:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:09 2026 by rpki-client