Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
File: 5IL9B-INQG6kFS5JKwAOVU6_zIA.mft (raw, json)
Hash identifier: EMJnpVtvh0iypLM8zHQQhiw8OaULQfwngUHhV5Dkw0U=
Subject key identifier: 25:0F:1A:D5:5E:E4:9F:56:31:4A:C6:C8:89:5D:63:A0:91:2B:40:05
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 019E1CB479BC6B17179494816ED6FB897431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
Manifest number: 15E3
Signing time: Tue 12 May 2026 15:00:50 +0000
Manifest this update: Tue 12 May 2026 15:00:50 +0000
Manifest next update: Wed 13 May 2026 15:00:50 +0000
Files and hashes: 1: 5IL9B-INQG6kFS5JKwAOVU6_zIA.crl (hash: eti7dzKzQCBJfWQwOShO4qNPPizWt+lCB5xCvZLPc+4=)
2: gL5Giy-rTCvNArfPkKAU-r2CxM0.roa (hash: jO7bXDuHY7qto41yybcOr3CvCDVLDdC+wp0YyPzuDpg=)
3: nKLfpVUcp118xFJnNk1KItDI1Z4.roa (hash: nILTBxf9pDPjeb+IYez6Oufx0RUp69esbdOKvblK8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:79:bc:6b:17:17:94:94:81:6e:d6:fb:89:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: May 12 15:00:50 2026 GMT
Not After : May 13 15:00:50 2026 GMT
Subject: CN=250f1ad55ee49f56314ac6c8895d63a0912b4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:5c:e0:24:ca:83:6b:95:9b:de:91:69:12:
a5:bb:c9:61:9c:22:b4:47:41:e3:aa:c8:e5:36:9b:
69:7d:e2:57:16:50:9e:15:85:e9:35:d8:25:9e:a4:
d4:3f:2c:66:c2:7c:f5:89:ac:1b:28:a8:e9:ce:93:
33:26:59:0d:7a:b4:c9:72:b0:10:5f:b7:c2:62:35:
53:15:81:e5:7b:2f:0f:dc:54:4e:f5:fe:cc:87:fc:
35:d9:c0:62:cd:3a:38:8b:65:6e:21:2f:f4:b8:77:
24:b1:35:d2:7d:4b:bb:0b:9f:a1:95:dc:13:d0:fd:
e1:95:46:fe:6f:e9:31:fb:90:63:a0:a3:42:d8:11:
a2:5e:90:63:17:76:36:06:67:70:6b:c9:af:2e:e5:
bd:93:d8:60:1d:c7:dd:be:00:10:d9:81:d8:08:75:
38:20:6d:5c:7e:a5:85:71:5c:fa:75:5a:19:be:ee:
1a:52:fc:bb:6c:cb:cb:9d:46:14:9d:75:ab:fd:eb:
34:2b:37:72:88:90:cb:b5:69:63:91:77:97:32:8c:
06:b6:b4:44:7b:d4:03:1a:3b:a8:27:60:d0:46:8c:
a4:f6:d6:91:6e:4a:6d:d1:63:34:d9:47:5a:28:27:
f9:ad:fa:1d:e8:2a:d0:8f:4b:5f:91:ff:b6:bb:9c:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:1A:D5:5E:E4:9F:56:31:4A:C6:C8:89:5D:63:A0:91:2B:40:05
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:66:f4:a9:3e:84:3f:ae:ef:2d:30:18:10:d3:2b:48:25:77:
d6:a8:19:43:03:f2:dc:c7:72:82:a6:f7:d3:77:f2:be:bc:a6:
e6:ee:ef:54:5d:62:88:f0:41:f8:b2:0f:26:f1:a3:0f:85:be:
54:83:15:c0:68:2c:55:25:b2:92:de:ac:e0:b5:d7:c9:3b:dd:
ae:35:a7:1c:d2:d2:af:3f:dd:60:0a:35:ed:b6:c1:92:9f:9b:
2d:56:ee:3c:70:38:e0:47:fc:0b:e7:9c:00:98:2a:56:42:66:
29:a2:c8:42:ab:f3:25:be:14:5b:e5:0f:ef:0f:e6:5e:dc:e0:
df:09:0a:06:a0:5b:b0:a0:4b:44:cf:ac:cd:c5:0c:cd:c2:a2:
f4:ac:ba:6d:21:53:94:54:c5:65:be:c2:4a:98:cb:1b:25:51:
a8:42:d6:a8:79:cf:e8:ed:f8:ef:be:3b:b0:b7:9a:e2:9d:7a:
0b:29:24:20:a8:dd:08:eb:e7:b9:d5:fc:30:e7:25:47:0f:b0:
a3:29:7c:f8:f2:31:59:98:4b:eb:34:13:5f:da:14:c8:81:36:
ee:a5:60:f0:7c:dc:8a:06:d7:40:91:26:5a:f9:3e:2f:4f:ee:
15:3f:15:4c:9b:30:23:ae:79:f9:6b:f4:65:69:bc:28:1a:e0:
4f:7a:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:24 2026 by rpki-client