Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
File: 5QkPYoTNm-1eNlwJf33tcQZVj1k.mft (raw, json)
Hash identifier: ZqTceQtZbJJzd+XRdmx1natZDH0fKOVtidZw7vcCm/I=
Subject key identifier: 00:D5:34:4F:E2:53:63:4D:98:2D:FC:1E:CE:63:6E:C6:D8:CE:3D:27
Authority key identifier: E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
Certificate issuer: /CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Certificate serial: 019E1D9101B5F57C91C5CCEB6319CF10236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
Manifest number: 3E
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: 5QkPYoTNm-1eNlwJf33tcQZVj1k.crl (hash: 7i0YaJ/UA6oe/xO+dUxcTVpSXlYKFy9eyqogMZHs47k=)
2: T-nFUADDOe_gVl6vpCX2jmb_ysw.roa (hash: AOWlKIZZ81Ea4+CdSRVuTl2Mle2x0FskHzHQS5873EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:01:b5:f5:7c:91:c5:cc:eb:63:19:cf:10:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5090f6284cd9bed5e365c097f7ded7106558f59
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=00d5344fe253634d982dfc1ece636ec6d8ce3d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:33:76:62:5a:1a:15:05:07:1d:8b:46:2c:
5d:d3:38:dc:a1:a0:cd:68:e6:89:dd:a0:e7:01:9a:
ef:a1:07:69:68:11:4b:e5:88:b8:b3:c3:46:c2:74:
72:65:52:a3:df:ab:b0:62:fe:5f:35:01:a7:33:bb:
7b:67:40:ae:b7:af:28:f4:c3:10:32:af:01:35:02:
35:29:39:a5:2a:4d:bb:93:0c:91:a1:ed:23:57:f6:
d2:f6:df:4d:69:e6:0a:d8:d5:ee:a2:dc:39:77:85:
41:95:b3:9b:6f:b8:c1:3b:32:6b:c8:b1:03:af:84:
af:75:99:6d:44:f9:48:19:bd:63:1f:1e:ca:08:95:
13:cf:be:88:f8:d5:2d:1c:1b:e1:67:75:2b:1e:ed:
9f:1f:87:6b:10:f2:2b:0c:71:43:6d:e2:5e:cd:38:
a3:a9:e3:e4:dc:84:92:e5:68:e9:9a:7d:53:6d:af:
20:6a:f8:ca:3b:5c:31:f1:fb:71:f9:b4:d9:ea:54:
8d:e4:a8:c6:b6:2f:72:a0:4e:54:c7:da:3c:77:48:
4e:72:cc:42:4b:a4:d3:50:d6:e2:19:81:c5:b6:90:
53:81:4f:ba:a4:39:eb:c4:31:ea:7f:ce:4f:f8:2b:
87:b5:41:02:2a:f2:ac:f7:f7:98:af:06:0c:91:aa:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:34:4F:E2:53:63:4D:98:2D:FC:1E:CE:63:6E:C6:D8:CE:3D:27
X509v3 Authority Key Identifier:
keyid:E5:09:0F:62:84:CD:9B:ED:5E:36:5C:09:7F:7D:ED:71:06:55:8F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QkPYoTNm-1eNlwJf33tcQZVj1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/20585a-c8dc-434f-8189-0432f4c4d4f0/1/5QkPYoTNm-1eNlwJf33tcQZVj1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3d:56:d6:39:2b:68:b1:ec:2d:15:58:01:ce:4b:b7:b7:53:
f3:a3:0a:91:11:da:56:14:a7:c0:1a:e2:66:fc:6b:4d:2f:3d:
cf:1a:9d:97:4e:f0:12:8e:5e:d3:b1:0e:c3:c3:b9:bf:c3:0e:
4a:2c:52:97:ed:61:af:4f:39:27:b3:a1:6c:55:5d:d1:96:88:
e1:ff:bb:31:20:69:c8:a9:0f:c3:a3:88:0f:5e:e3:2b:88:58:
f8:3a:3b:47:5a:08:62:0d:3c:81:b7:a3:42:a7:11:fa:cb:eb:
8d:cf:2f:7c:89:a8:d5:c4:f4:34:10:44:73:37:35:3d:2b:98:
85:19:78:49:f1:cf:4e:b5:57:c2:eb:f8:d0:c8:c6:6c:b1:8e:
22:ef:e3:b3:ea:48:4e:d4:cf:70:9f:98:4f:14:15:e8:fb:1a:
b4:ea:f1:5a:50:ca:ba:c8:d3:c5:8e:db:30:e1:3a:46:a5:05:
87:25:e3:e4:44:dc:6b:ac:3c:c1:ff:86:04:b2:09:ab:f1:c5:
9c:1b:47:13:b6:be:fb:8c:ad:20:e8:b8:a2:95:08:6e:37:fc:
44:b4:e4:da:9a:9f:0d:b9:43:69:bf:fa:f1:cb:08:1c:f1:f1:
76:30:e1:2f:d0:78:90:3d:d9:cb:de:c2:3c:11:77:fa:3d:1c:
5f:21:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:01 2026 by rpki-client