Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: MZL/G9HH+4AXKCYufsbqmmefRq72FnKqxdZQv18kmBs=
Subject key identifier: CE:DC:68:46:AE:4C:B4:BC:6E:6C:C2:7B:B3:6D:4F:5B:3C:18:57:D7
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 019E1E6C0DF8A6B403DD965E74C9C0757D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 1125
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: IWvXsFxRTjfiGaT7SMzRD+ULgOh4Gx80nnjVZ8DrHGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0d:f8:a6:b4:03:dd:96:5e:74:c9:c0:75:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=cedc6846ae4cb4bc6e6cc27bb36d4f5b3c1857d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:e4:a2:7b:2c:34:43:97:73:65:22:03:47:
90:d9:5d:a9:d7:14:78:bb:3f:1d:01:3e:62:71:a6:
2b:65:d6:6a:b8:e2:6b:cf:0d:1d:c8:87:db:72:14:
da:bb:9a:1d:b7:4c:fe:0c:1d:52:65:47:21:b6:6c:
9e:a4:1c:5b:33:ba:9a:17:14:ed:9e:86:da:10:8a:
8a:8d:75:38:05:39:0e:31:f4:7c:4d:e8:99:29:35:
f4:d6:37:b5:37:53:31:42:12:ea:e7:74:80:fd:63:
90:54:83:91:c8:48:da:16:7d:7a:69:c2:19:93:ac:
14:37:c3:cc:1b:01:df:d4:c0:f8:d3:73:81:4c:1e:
8a:99:4d:80:f8:76:ec:af:28:c7:d5:1b:39:09:98:
59:bf:da:1e:4e:74:a3:39:cb:37:47:62:93:c9:3d:
56:87:a5:ce:9d:4b:31:d5:57:8e:c7:34:c6:ad:ad:
d1:2a:f6:5b:ff:33:92:32:24:60:b3:cd:dc:c9:cb:
7c:a1:2f:a8:09:3a:79:ec:ae:6c:74:eb:ed:94:f2:
be:f1:08:86:49:90:db:b0:9f:e8:b9:c7:7c:af:e4:
1d:b3:89:3d:43:ff:00:4f:11:14:cf:51:62:8e:6c:
bd:8f:93:82:c2:3e:e3:14:9a:9a:69:8a:e5:32:93:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:68:46:AE:4C:B4:BC:6E:6C:C2:7B:B3:6D:4F:5B:3C:18:57:D7
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:94:dc:3f:00:23:73:93:fe:cb:05:b1:4b:42:f3:21:5b:
f4:91:84:65:b6:15:4a:92:b1:9d:2c:8b:cf:b4:eb:ff:a2:f3:
0c:3b:7d:5b:d9:00:ce:12:a6:f9:ac:30:65:07:77:33:21:14:
74:cf:a0:14:12:79:9e:26:a1:7f:f2:00:82:48:04:17:b9:55:
b0:cb:fb:da:38:52:25:f4:ea:e9:11:1d:74:73:d3:7d:a9:3d:
35:ef:03:33:fc:e6:94:97:0d:23:43:91:bd:05:8d:7a:c0:12:
0b:fa:b1:d9:92:0d:79:db:e3:35:56:18:da:b7:99:ac:2c:8a:
f0:15:f4:99:ab:9c:5f:39:f1:d4:72:7e:c4:cb:cd:f1:bc:f9:
f4:46:31:3d:53:a0:6c:45:f0:48:42:66:62:d9:64:86:50:10:
4e:d2:70:5f:9b:5e:8e:ee:0f:ca:cd:07:b0:c0:0a:ae:57:cc:
8d:b9:bf:90:59:e5:6a:9a:95:4f:1c:b8:2c:56:10:96:fc:43:
a9:a3:1c:28:60:d2:02:57:62:a0:18:63:0a:3b:76:4b:c7:d3:
16:e9:d3:6b:bd:a8:85:f8:07:6d:36:d6:b9:d9:a5:d9:8f:92:
b0:a1:fc:ba:91:6f:42:e2:7b:9b:18:e4:14:91:4f:6a:8d:69:
1c:7e:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:55 2026 by rpki-client