Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: j0P3unwKwjvly0gZZ7n5q+pr/+V6eGdlvyn6t45ddb4=
Subject key identifier: A0:21:2F:0E:A0:82:D1:6D:02:E6:11:24:ED:9C:C7:2A:14:D5:74:AE
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 019E20922F5F7FF96734C9B0A808AA6CB6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 12DB
Signing time: Wed 13 May 2026 09:01:51 +0000
Manifest this update: Wed 13 May 2026 09:01:51 +0000
Manifest next update: Thu 14 May 2026 09:01:51 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 62kpXtxvrOBPKW8Czzqn3dknivunFcBVsbbwqg5Jq8Y=)
2: yKWW9KUUcuSOBUZmFNhXRUNBXdk.roa (hash: BmUfImdK1cFMPb6WqiazHO8FeAIX1xO92EWzQ8s2qXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2f:5f:7f:f9:67:34:c9:b0:a8:08:aa:6c:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: May 13 09:01:51 2026 GMT
Not After : May 14 09:01:51 2026 GMT
Subject: CN=a0212f0ea082d16d02e61124ed9cc72a14d574ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:bd:0b:77:b6:92:06:96:57:7c:03:1b:ea:
88:07:00:1b:2a:eb:0f:82:b1:e6:7e:97:78:80:9f:
f0:01:3b:52:c7:26:20:ae:bf:75:5f:7b:71:d0:67:
a5:60:6a:41:6a:5f:6d:5d:03:c4:dc:33:fc:b3:0a:
e1:55:77:56:ba:a9:de:f7:e6:87:06:34:51:e9:f9:
9e:9e:4e:2e:3b:bb:2b:73:89:e1:e3:76:8d:b6:d6:
45:80:ea:45:0a:1c:4b:ce:34:62:8c:61:d7:ee:19:
2b:1f:67:f7:4b:14:80:e7:62:4a:cc:92:50:cf:ba:
e4:44:2a:60:16:74:0b:55:17:94:97:ed:ca:ac:34:
a1:8f:a7:00:98:79:d6:7f:d5:3b:ea:9f:36:2b:55:
35:7b:16:38:ae:9e:4d:9c:02:c6:5c:cc:88:3b:79:
ae:ac:7e:4e:ba:94:76:8a:e5:ef:88:e6:a8:6e:68:
dd:0b:96:09:38:99:4a:4a:fd:e4:c9:3d:2d:68:f8:
cc:03:da:dc:45:89:ba:a5:99:c6:02:74:4c:dd:45:
21:3d:e7:1f:b7:9c:b2:d9:90:89:0b:60:60:8e:20:
ed:33:40:98:39:5b:9c:32:d5:35:22:d4:fc:b8:e2:
db:26:95:a3:3d:86:95:fc:2a:37:39:ef:93:72:59:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:2F:0E:A0:82:D1:6D:02:E6:11:24:ED:9C:C7:2A:14:D5:74:AE
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:eb:d6:19:d9:d6:8a:93:4a:aa:16:77:c1:dd:98:16:ba:2f:
99:5b:85:d0:13:1d:e0:ae:9d:9b:f1:c0:17:d9:e0:69:55:41:
39:d5:03:fd:4d:48:f5:7c:8e:4d:90:4f:7f:ca:c6:74:a1:fb:
2a:91:62:52:f5:a4:9d:95:8e:84:27:5c:cd:d5:2b:75:79:00:
70:02:60:64:9c:4a:6c:62:be:e9:8a:cb:42:ca:78:52:f9:17:
f4:a9:24:59:8b:7c:7d:3d:05:c1:46:6d:33:23:74:92:56:fd:
34:23:f3:d2:0c:72:b8:0b:8b:b4:7e:f6:84:72:44:4d:8c:78:
32:b2:00:d7:cc:b3:fb:4f:81:1c:e9:dc:db:80:f1:88:6e:aa:
e8:da:7f:81:a4:69:2f:f6:da:93:93:d4:dc:ca:6a:dc:11:75:
2d:64:b9:33:1a:8d:c3:68:0c:3a:48:f9:86:c3:3c:d4:f2:f9:
89:0f:e0:d1:97:9d:bf:fa:9a:0c:df:f1:3c:38:9f:cd:3e:48:
98:e4:60:39:38:dc:16:4d:ce:22:dc:ee:d9:07:31:94:7c:34:
24:10:4a:88:58:d0:14:0b:99:3d:d0:0f:e8:50:76:0e:d6:09:
24:59:ed:72:94:15:d4:52:dc:c0:1d:c3:cd:81:0b:43:68:5c:
cc:a3:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:05 2026 by rpki-client