Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: mWIGzL8ZE2c2OHiKugAWE7t10D4oTXZ9JSeAUuto9XM=
Subject key identifier: 70:8A:9B:07:B8:A7:50:C7:A9:CF:6F:40:25:8A:D3:47:CD:A2:B9:4E
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 019E1C46BAA2EC63BE34685BED5CD1F3A8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 1893
Signing time: Tue 12 May 2026 13:00:57 +0000
Manifest this update: Tue 12 May 2026 13:00:57 +0000
Manifest next update: Wed 13 May 2026 13:00:57 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: 6vyoeXmisBrK6KjY1hwHv825A0MRt732xfmwRBrmGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:ba:a2:ec:63:be:34:68:5b:ed:5c:d1:f3:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: May 12 13:00:57 2026 GMT
Not After : May 13 13:00:57 2026 GMT
Subject: CN=708a9b07b8a750c7a9cf6f40258ad347cda2b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:30:b2:41:84:8b:46:78:09:5a:e7:0b:f1:77:
d3:7a:1f:a8:e9:f9:67:bf:bf:0a:e4:68:66:7b:a3:
e7:c2:59:ee:6c:88:e6:87:31:fb:a2:26:b9:f2:34:
ef:e8:4f:b4:03:e3:dc:eb:94:57:6e:db:08:79:aa:
dc:77:24:4b:3a:01:0c:69:f4:4e:04:d3:aa:1d:66:
ec:4c:ae:23:be:af:fa:f1:d2:7e:56:c2:86:3d:56:
27:23:05:2c:ea:fc:dc:0d:9e:af:5d:1b:35:77:3e:
d6:bb:68:d2:25:30:4e:5c:91:93:8f:95:7b:fd:70:
9d:6e:fb:29:3a:0c:c7:d4:5d:40:ce:b6:98:6a:2e:
75:df:5e:d6:46:6c:11:48:cd:01:a0:db:5f:ab:38:
a2:fe:8e:9a:ef:ed:cb:74:91:60:d0:0e:40:3a:83:
54:be:d6:c7:f4:8e:79:6c:b2:2b:df:13:38:87:0b:
c8:9e:82:ea:e1:5c:c7:67:b6:53:56:47:0b:58:a2:
a4:f6:88:a7:2d:c7:ad:1c:72:cf:36:53:59:69:2f:
e8:1e:ff:57:31:55:e3:82:bd:25:55:ae:e7:cc:8c:
d3:af:d9:ec:2f:08:35:f9:9d:91:8f:0a:37:d9:d2:
ad:79:c9:3b:59:54:d5:85:50:43:52:d8:8b:09:1f:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:9B:07:B8:A7:50:C7:A9:CF:6F:40:25:8A:D3:47:CD:A2:B9:4E
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:d2:b0:4f:3c:67:c4:1d:f9:e2:00:23:9d:f3:b7:2f:05:
e0:71:8b:c4:86:16:26:62:b1:5f:6b:8f:d0:49:db:68:14:79:
d0:31:6e:6c:ac:d0:2c:8b:57:c9:56:25:ee:56:f5:1e:25:87:
96:49:03:37:ec:f3:2f:f8:80:30:7b:bd:a3:bd:3a:dd:80:48:
ad:4d:39:80:11:72:52:b7:cd:4f:4b:c8:62:a0:84:ba:bf:93:
da:2e:54:62:62:29:d1:47:1f:ca:f4:42:52:32:87:48:b4:e3:
db:56:ee:ac:ef:a9:cb:92:38:af:6d:2b:2b:c6:f9:58:66:48:
b4:59:00:29:70:85:6b:ea:dc:60:34:6a:8b:c5:23:be:0d:01:
f2:5b:b9:d2:de:9a:ef:98:28:ee:80:8a:57:3a:7e:be:64:4c:
76:20:50:05:2b:48:e9:82:f5:f7:47:e5:8f:72:e9:e7:31:7d:
75:9f:33:91:fc:25:86:b4:42:40:53:25:99:53:ae:ae:76:b0:
9a:82:f1:ff:0c:d0:cd:8a:a5:87:92:0f:29:39:06:ce:55:33:
bc:e4:5e:be:d3:4f:7c:67:5c:08:c9:53:81:57:f0:e4:c2:ec:
ac:91:b7:3a:43:cf:1d:dd:34:25:c6:bd:13:cd:49:19:e6:17:
59:13:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:19 2026 by rpki-client