Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 5AVGnssBWH+bRch4n3MLITGJUe5sgE4OYt1ZO2CEJKI=
Subject key identifier: 0A:E3:57:60:F2:0E:58:CA:F8:A3:21:69:D3:7C:D9:FC:A8:E1:DB:88
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 019E1F7F933F4C8BA91C7BC63E4F8F2DE1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 133E
Signing time: Wed 13 May 2026 04:01:54 +0000
Manifest this update: Wed 13 May 2026 04:01:54 +0000
Manifest next update: Thu 14 May 2026 04:01:54 +0000
Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: XoVxuQ5GLS49Cix0D86gYlfBTIDQU/zRaYhwvkjHNgc=)
3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:93:3f:4c:8b:a9:1c:7b:c6:3e:4f:8f:2d:e1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: May 13 04:01:54 2026 GMT
Not After : May 14 04:01:54 2026 GMT
Subject: CN=0ae35760f20e58caf8a32169d37cd9fca8e1db88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:28:91:14:24:aa:e3:03:2c:7a:51:b0:8a:
ed:8a:40:5a:8a:d5:d3:33:2b:f5:1f:14:47:0a:a4:
fc:d4:c5:c4:e7:fe:e2:c9:4b:f2:90:b9:cc:7d:29:
c2:95:79:f5:16:f3:d0:97:b8:19:39:fb:de:e7:cb:
e7:ac:04:b4:44:13:00:67:2e:97:b9:bd:97:03:02:
c5:b4:07:6f:2d:d7:20:0d:b9:1d:d9:27:e5:ea:a6:
e6:9e:e3:1d:58:53:a6:95:26:93:22:ed:42:7e:ff:
4e:41:b7:11:98:d4:e7:e9:63:8c:3a:8b:46:67:ce:
1d:fe:4e:38:ac:6d:e9:b7:84:7c:0f:e3:82:27:3b:
ad:64:59:55:69:0a:59:a4:96:d4:3b:fe:52:0c:bf:
79:61:20:05:dc:af:ff:c0:ef:b6:29:17:72:d8:e3:
7c:05:0a:0d:67:d0:f1:fe:cf:27:c4:46:a6:59:a6:
fb:da:97:ad:7d:c1:cd:ac:61:bd:91:f1:00:48:39:
ae:ae:54:af:73:7c:d5:3d:93:04:4e:da:83:96:97:
6a:92:9d:a2:bb:e6:1b:92:d4:b1:57:45:b2:37:b1:
8f:d9:57:78:b7:74:1b:de:99:ec:d7:7c:42:fe:73:
c5:dc:7e:bd:ec:2d:b5:43:0d:08:04:2f:e4:93:88:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:57:60:F2:0E:58:CA:F8:A3:21:69:D3:7C:D9:FC:A8:E1:DB:88
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:fc:37:f7:45:42:1c:28:a5:fb:d2:3b:2e:56:8b:d5:4f:
87:76:3f:fc:46:1f:08:db:32:0f:0c:d6:89:0e:bf:f6:3c:8c:
c1:26:4b:51:72:b9:1a:e5:c6:38:a0:50:ea:38:93:8a:89:a6:
f2:4f:51:c9:6c:74:4d:2e:5b:9d:13:50:7d:e6:eb:f9:28:61:
05:be:fa:38:a0:65:ef:6c:52:99:a5:b0:0b:fe:be:bb:44:68:
36:c8:6e:99:7c:b9:aa:9e:f2:d0:41:84:08:31:60:75:3e:28:
13:a3:c6:e1:b5:cc:84:e9:7c:b1:1b:59:af:1c:0d:9f:03:2a:
40:08:ea:85:99:4e:51:06:4b:05:20:51:b2:e5:39:6d:3a:b9:
b1:81:7c:0a:b6:09:73:47:ea:f7:91:4e:7b:33:82:7f:b4:30:
d6:1d:bf:fe:46:32:db:7e:c3:92:c0:93:e8:a8:37:05:32:89:
18:5b:bb:91:c5:55:e9:dc:a3:4a:90:84:c9:71:de:9e:68:37:
06:75:8d:99:4c:76:75:e1:6b:74:8b:db:9f:77:01:f5:1f:9b:
2e:60:c8:51:d2:c3:c4:ef:5a:f2:4c:3d:61:5c:86:d1:2c:5f:
4b:10:eb:e1:8a:9e:e4:f2:9f:62:b7:7c:f7:e4:9a:95:52:29:
7b:91:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:36:16 2026 by rpki-client