Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier: tsATwUxULC/vfsaihKgrvBdNCczvUngh8SskfhAJy38=
Subject key identifier: 29:5D:C5:D5:CC:70:14:5F:3D:CD:6E:B1:31:D4:31:DA:DA:47:65:7F
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial: 019E20C8514CBA6FB65AB18239DAF51B93CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number: 057E
Signing time: Wed 13 May 2026 10:00:59 +0000
Manifest this update: Wed 13 May 2026 10:00:59 +0000
Manifest next update: Thu 14 May 2026 10:00:59 +0000
Files and hashes: 1: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: /paot9tAfrxlT0F5+XSmqN3c2tkol0uWXtPnmgrUYXc=)
2: ajY7opH2JkgKSsn0u1tCSe2qO48.roa (hash: digTHTa7KkUVMUs55bQN2ammxPkYLAkzneKY1dmofHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:51:4c:ba:6f:b6:5a:b1:82:39:da:f5:1b:93:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
Validity
Not Before: May 13 10:00:59 2026 GMT
Not After : May 14 10:00:59 2026 GMT
Subject: CN=295dc5d5cc70145f3dcd6eb131d431dada47657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:69:b8:b7:83:64:0c:04:01:b1:00:07:e1:
dc:f6:98:c0:24:6b:b8:78:0d:0d:2e:14:8e:ca:f4:
cb:ab:ef:fc:db:f2:5a:0b:c0:7d:08:98:43:87:e5:
be:ce:bd:e6:e5:20:fc:5c:f4:f6:71:f6:a5:11:21:
84:5c:e4:23:25:8c:ac:4a:33:9a:9b:48:25:9c:8a:
88:2d:56:f4:16:34:d7:24:9a:a5:2d:40:e7:a6:f3:
a5:7e:44:ff:15:71:33:3f:9e:ed:0b:7c:3a:2f:e9:
88:a3:e8:32:97:af:a6:b8:46:bc:44:10:2a:2b:ee:
49:3b:b0:11:ac:68:61:da:16:3e:d3:1c:56:e8:f3:
9f:90:48:c8:8a:14:12:53:60:e3:33:1f:d6:5b:19:
b5:db:63:3c:49:09:26:b9:e0:80:d7:bc:38:8a:06:
40:27:b0:4f:29:88:0d:66:6d:b1:46:8f:d9:82:01:
20:4a:23:0d:d3:f3:49:a5:60:9b:27:51:6d:8f:8a:
33:75:98:02:11:90:c5:0a:15:d8:31:bd:9e:7a:bc:
26:4b:f5:7b:00:e7:69:6d:4d:d6:54:a7:92:b1:bf:
9a:06:c3:d0:09:ea:01:1b:7a:12:06:91:8d:74:d3:
fc:8b:05:6f:db:67:41:91:65:27:7c:20:a2:84:df:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:C5:D5:CC:70:14:5F:3D:CD:6E:B1:31:D4:31:DA:DA:47:65:7F
X509v3 Authority Key Identifier:
keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3d:87:08:e3:3d:34:6e:43:7c:d5:59:91:14:26:64:78:3d:
d6:0e:81:63:82:4c:8d:6c:cc:9a:a6:9d:2f:28:17:85:e6:df:
6c:84:44:bf:21:cd:64:20:85:03:f2:bf:39:bb:f4:77:9e:a2:
68:2b:14:6b:6e:c9:72:36:e3:4b:3e:85:93:ad:1e:96:52:fc:
c6:96:e3:83:a1:a6:f9:cc:ca:76:81:6b:00:43:ab:0a:f7:3d:
59:95:77:f9:a9:fe:e1:86:16:b6:9a:3b:77:25:b5:f5:d8:01:
2a:11:42:86:b6:03:a8:ab:82:5c:01:1d:85:21:92:37:a8:9d:
79:7a:57:5c:b9:cd:59:37:48:00:a0:60:25:7a:f2:e8:8b:26:
6e:3e:84:e9:38:3e:53:8c:33:8b:0d:bb:7e:e9:cb:6b:bc:06:
16:ee:91:29:72:45:a7:93:c8:20:a1:c1:9a:e5:d8:7b:ef:95:
84:8f:2a:ce:b1:ca:82:bb:8c:eb:a8:bc:a7:e8:45:87:2e:85:
4c:4a:f7:b2:37:d9:d4:bc:65:6b:bb:7b:3c:5f:f8:28:8c:fe:
38:fe:a6:f5:a2:2f:37:44:71:49:76:43:24:3f:7f:d4:d4:c2:
6a:6b:73:b7:e6:5a:8e:d4:0f:9f:4a:bb:0c:44:af:df:f7:88:
0d:6a:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:42 2026 by rpki-client