Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: LFKfBnspsL0uwWjR8pVvTs9AbJ+3a81g5Skd9qJUlgY=
Subject key identifier: 67:05:E4:67:B9:F6:7F:A0:91:E8:B6:1C:99:9B:FA:23:A7:62:BA:DC
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019E1DFE91D0151D38A4568B26ED5CAB7172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1732
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: bPbri7S+gLdOPXfJiNM7hqycoPK2DUMD67qA3/4FjRI=)
2: IWYrbXuJb7rdaqwraiq_apy6AMA.roa (hash: abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:91:d0:15:1d:38:a4:56:8b:26:ed:5c:ab:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=6705e467b9f67fa091e8b61c999bfa23a762badc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:e1:a5:ab:f1:02:5a:f9:7d:e5:11:01:55:
64:f5:a6:84:23:54:b2:4d:18:8b:81:1f:10:cb:1b:
93:2f:18:43:93:93:ac:ab:13:a7:56:87:e8:ba:4a:
62:1e:62:ae:2f:73:fa:a6:85:df:11:de:ec:ac:9b:
b4:d6:c0:d2:0e:ea:04:e8:b3:3f:49:60:78:ef:8b:
27:e6:b6:4c:20:53:81:5d:ec:c5:2b:bb:ed:e1:77:
c8:95:70:f5:1a:cd:cd:3f:2a:f0:72:be:62:3e:01:
85:59:92:fc:94:fe:47:1f:37:9d:6e:9f:76:20:49:
c1:9f:32:ea:3b:ae:e8:7c:fc:2f:43:5d:e2:25:5d:
5b:50:6f:ea:64:72:aa:4d:02:28:68:14:62:2a:16:
88:8a:d4:45:2a:17:2d:38:b3:66:6f:ee:46:ce:15:
01:a6:e2:94:ac:1a:60:4c:8e:28:f2:cd:21:ac:10:
cf:a1:38:88:67:bf:6b:e1:6a:f5:f9:10:d8:b5:93:
a9:32:ef:2a:0d:16:75:be:1b:9b:f4:b2:10:65:d1:
27:9a:eb:4c:51:41:64:71:be:28:5e:07:bd:e1:7b:
55:ab:84:4f:e2:30:6a:5f:76:63:f5:76:dd:d5:a3:
79:3b:28:1b:47:cf:3d:cc:39:9a:fc:03:19:ac:a1:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:E4:67:B9:F6:7F:A0:91:E8:B6:1C:99:9B:FA:23:A7:62:BA:DC
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:c5:35:42:a9:d0:a8:da:91:50:27:d6:b3:14:b2:9b:16:
a8:fb:88:f2:a4:49:6e:13:c8:ba:21:07:d9:dd:3f:b9:5f:c9:
bc:ad:df:12:78:7c:ba:6f:15:a1:a9:cb:02:90:52:c6:cf:21:
f4:09:6a:ae:a7:11:86:32:74:5d:4a:88:de:5a:e6:5b:19:b5:
fb:17:63:a8:55:4d:b0:d3:1c:bb:48:6f:58:10:8a:00:74:c9:
c3:20:8f:e7:d7:52:67:9a:ad:aa:db:fe:fc:08:d3:fe:21:d9:
bc:95:b6:69:d1:8e:ab:a1:82:22:d8:9c:9f:f4:4f:07:f4:98:
d8:95:9f:ab:55:9c:e4:92:75:4b:ac:04:30:d0:72:82:e8:14:
0b:70:3d:db:0b:e3:dc:62:60:a1:b5:4e:09:e4:37:e6:e9:e3:
f9:3b:42:c7:17:cb:85:fa:e7:ac:3a:40:1c:91:20:27:ac:42:
81:34:22:bc:6c:e6:a3:01:dd:92:53:b7:a5:e8:97:d4:e7:ec:
f0:ef:35:1a:d5:7f:a8:cc:b7:3d:00:53:de:2a:45:e8:e7:84:
46:21:73:15:0c:43:a2:95:8c:40:24:34:b0:a0:20:e8:55:54:
0f:da:3a:74:62:32:fb:14:5d:bb:d4:77:a0:42:14:5f:3e:99:
46:62:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:09 2026 by rpki-client