Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: OOGZN7yAfwj8SJB/Sja/5Su9afkWvsn9vfZ7+ZLNI6I=
Subject key identifier: 6A:53:8E:8B:14:9F:43:95:73:0F:15:71:5C:2E:BD:95:8D:AD:7E:C8
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019E1D9096559C54807789A33BF0767D27D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 1396
Signing time: Tue 12 May 2026 19:01:15 +0000
Manifest this update: Tue 12 May 2026 19:01:15 +0000
Manifest next update: Wed 13 May 2026 19:01:15 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: Outw0C9AxME03koGYPbeMQ/CV3+V/NWrX+W+DdUXvAk=)
2: hLq5oWkJELQbNcRkoEuFG9HYL_U.roa (hash: yfA7tS4NCGXvzY+87zTkkeYt5A3me3y/07bpWLgYXqg=)
3: oXYPZ4avfp145oFgjMNonlejP24.roa (hash: comOe5RXUAfxCnEHSz+CE1aEiUDNnGCVQ5RAozO2Owo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:96:55:9c:54:80:77:89:a3:3b:f0:76:7d:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: May 12 19:01:15 2026 GMT
Not After : May 13 19:01:15 2026 GMT
Subject: CN=6a538e8b149f4395730f15715c2ebd958dad7ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:9b:3d:e6:da:b7:d0:df:47:fd:a7:ab:91:
b0:d3:4b:40:6f:2f:11:41:df:c0:dc:5a:bf:cf:26:
bb:a6:3e:3a:cd:1f:f8:c4:0a:de:5c:6a:06:3c:1a:
c1:1e:88:b1:9d:1e:5c:9f:63:f5:4f:05:1c:b3:1e:
39:3e:69:e0:92:13:4f:97:29:e7:92:a6:d6:97:d3:
e5:be:54:d6:b0:06:98:e9:7a:ea:bf:de:11:f7:69:
37:21:d8:6d:01:6b:4c:95:e0:0a:17:5e:f5:7d:96:
f3:f7:4f:2e:2b:62:a0:c8:12:b5:75:69:c5:c7:a9:
3e:93:c7:f8:c8:14:04:6c:8c:f7:ba:75:48:84:08:
fa:d2:3d:62:58:ae:31:d0:e3:1c:ef:c8:85:55:61:
6f:21:8a:2d:50:65:16:91:7c:87:03:b7:69:d0:54:
4b:32:82:1a:a9:67:13:56:d2:54:b1:be:b9:59:09:
58:2c:ae:84:e1:02:d4:57:1c:b1:3e:19:e3:c7:86:
5d:39:ad:cd:fe:34:7b:16:99:21:29:b0:c2:c3:5b:
35:32:c8:a2:40:d5:a3:36:92:81:81:3b:5e:0d:cd:
a1:cf:ae:27:d3:5d:20:fe:76:1c:d7:e5:ba:0d:5f:
f5:c2:1c:8c:ce:b2:24:bb:0e:37:b2:d9:57:83:ae:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:8E:8B:14:9F:43:95:73:0F:15:71:5C:2E:BD:95:8D:AD:7E:C8
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6a:bc:bf:bb:cd:e6:80:a8:74:b0:7a:fd:cb:d2:c1:9f:ae:
5a:97:cb:a3:67:8c:2d:b2:b6:9b:7f:14:ec:b2:7a:e3:b0:6e:
fa:01:39:82:5c:26:0b:8f:6a:90:9b:2f:22:5e:00:65:12:a5:
05:48:07:0b:24:22:14:66:fa:8b:4e:6f:aa:58:a8:7b:fc:15:
dd:af:bf:bb:31:e8:87:7d:fc:f9:d0:3f:49:8d:d0:de:af:1b:
b4:c1:5f:bc:b8:27:c0:29:1e:30:49:62:11:c3:65:43:eb:84:
d4:2d:b8:67:6f:7f:f1:aa:7d:2f:e7:3b:7f:a0:60:b6:e4:ff:
5c:90:ed:a9:2e:f0:85:0a:11:c9:d0:0f:54:b6:44:3d:af:58:
5a:a6:fb:44:23:03:8a:45:6e:d3:74:56:01:56:76:84:cd:38:
37:31:e9:93:53:8a:e4:be:69:de:9f:5f:e4:c2:ac:72:cd:81:
1c:57:dc:09:2e:25:1b:30:cf:8c:1f:c4:70:f0:c3:83:b1:83:
a1:62:31:14:52:c5:85:6b:47:94:a9:cf:cc:ce:8b:95:9e:d4:
f5:45:29:88:04:39:6d:d1:13:43:97:e8:23:f1:da:5e:56:67:
16:01:3f:0f:6a:77:3b:4d:f0:63:87:07:36:a8:80:16:6d:f6:
ac:bf:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client