Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: UcRTR4iU/8ndEI2aq+GHhLCeaZvq9i6zMZKQUdbdrSU=
Subject key identifier: 29:BA:BA:A9:7A:0E:78:F7:2C:B2:37:63:03:82:A2:17:34:07:86:DD
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 019E1CEC18A992EE7174803FD2E8042B9B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 1916
Signing time: Tue 12 May 2026 16:01:35 +0000
Manifest this update: Tue 12 May 2026 16:01:35 +0000
Manifest next update: Wed 13 May 2026 16:01:35 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: PP1jX0nDWFkUu0ExI3shYnpsLZzbCaw0l2LyYz04o9Q=)
2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:18:a9:92:ee:71:74:80:3f:d2:e8:04:2b:9b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: May 12 16:01:35 2026 GMT
Not After : May 13 16:01:35 2026 GMT
Subject: CN=29babaa97a0e78f72cb237630382a217340786dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:31:dc:32:ef:57:38:0e:cd:85:c4:9e:da:
9e:23:32:7a:aa:0c:f8:27:2b:38:55:41:66:31:05:
47:0c:e4:1c:8f:5d:eb:df:e5:bc:49:7c:f1:f8:c7:
04:f8:28:cf:4f:d0:e5:6e:13:1e:b8:62:2e:07:5b:
40:c3:ac:dc:8f:b5:55:03:4d:80:42:ed:eb:c9:47:
46:e0:1c:ba:69:8e:53:38:9b:71:9e:a6:74:eb:61:
94:90:af:48:99:36:89:9f:5b:c9:a6:d6:7e:d4:da:
f8:d4:cf:00:f1:c7:39:9d:1f:77:b1:84:49:76:68:
f5:e9:41:8d:08:67:bf:aa:49:eb:a1:28:cd:00:61:
3c:f3:9f:71:d6:5a:79:41:a1:c8:08:d8:d7:cb:c3:
62:fa:24:2e:30:91:b9:1b:be:91:f8:c0:36:19:13:
f7:fc:8f:c3:a2:cf:25:24:3c:cc:2f:41:6c:6d:ec:
20:63:8e:91:de:95:c8:50:37:5c:44:62:25:bb:97:
1e:f2:e7:bc:e6:38:1f:8b:9f:d6:e1:ac:34:16:b0:
fb:3d:89:8f:d4:91:27:28:ca:d3:23:77:1a:5c:c9:
30:99:ce:9b:12:18:55:a6:d9:9f:9d:95:b0:54:f2:
d4:8c:0d:a7:30:7d:64:ba:0e:5f:81:56:a8:d1:b7:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:BA:A9:7A:0E:78:F7:2C:B2:37:63:03:82:A2:17:34:07:86:DD
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:28:66:43:cd:9c:0d:98:17:9d:09:74:66:ee:5c:53:22:
a0:56:24:81:77:13:2c:eb:03:b2:81:2b:02:e8:d3:8c:99:e7:
7a:99:88:d1:e1:ec:c8:88:83:84:96:c4:8f:d5:57:c2:45:a0:
57:0f:fb:08:62:29:39:55:a3:84:c1:06:81:0d:54:62:c8:a0:
46:e3:67:b5:31:82:99:cc:9a:40:53:9b:e2:0b:36:fa:4c:b2:
0f:d2:1c:90:05:e9:ef:93:ff:dd:68:ad:8a:da:7d:17:d5:ff:
21:8b:3d:bc:3a:c0:d0:b2:a5:6b:24:82:9c:42:61:ca:28:a3:
25:77:12:21:f6:21:49:5b:56:41:d6:fb:f6:e8:2f:49:01:d5:
57:44:fe:d9:df:a5:57:14:f7:93:81:07:4d:18:23:a1:4f:a9:
d9:b1:97:56:e6:66:49:de:6b:eb:7b:fe:51:d2:51:70:a9:e4:
60:f4:e7:ff:19:e0:a0:ef:c3:3d:6c:a3:4c:de:02:ba:68:59:
ef:f1:b4:ca:cd:64:b3:24:97:87:21:18:58:6b:80:e1:4e:74:
37:76:1f:8d:b2:a5:f9:21:c2:5b:2c:49:f4:61:66:14:fc:de:
62:16:3b:ed:08:75:93:f0:4a:da:70:3d:aa:ff:a5:b1:11:19:
9e:75:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:26 2026 by rpki-client