
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 4rUIomQw8/BxRwHf1y5MikErMLxRJts3ZGUFe3fcnsA=
Subject key identifier: 35:7C:CD:C7:6A:27:4B:11:B2:FE:6B:BA:74:47:33:DC:AD:09:75:5C
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019E1E350637749293DAB714BC656A5AE873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 22:00:51 +0000
Manifest this update: Tue 12 May 2026 22:00:51 +0000
Manifest next update: Wed 13 May 2026 22:00:51 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: ++06wROkYNDeTgfcKASbHyzIxpsX32u7eXuKy3chl9M=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:06:37:74:92:93:da:b7:14:bc:65:6a:5a:e8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: May 12 22:00:51 2026 GMT
Not After : May 13 22:00:51 2026 GMT
Subject: CN=357ccdc76a274b11b2fe6bba744733dcad09755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:f7:79:29:aa:0f:f3:f6:3e:94:c5:5e:ee:
8f:db:4b:c2:41:43:b3:13:7e:3d:64:0a:d8:93:f2:
f8:e4:e5:a7:a5:21:aa:73:f3:84:5b:6c:77:08:8c:
32:89:f1:51:ed:1f:33:2a:7c:cb:86:95:8a:3e:0c:
cb:ab:c3:f2:f0:86:0c:09:29:6f:d1:c0:fb:7e:d2:
1f:21:d5:0a:fc:7e:59:e5:0f:37:69:a9:8b:bb:ae:
b5:42:07:83:b1:80:ef:e3:0e:a9:33:b4:ed:4d:b3:
ba:b9:23:96:05:9d:51:3a:cc:0e:ad:bf:80:34:25:
33:a6:6b:20:06:95:f9:5a:be:b3:af:60:79:16:e7:
ab:a2:88:5c:5b:66:bd:49:03:79:90:e4:88:2d:f0:
43:91:18:c2:f0:e3:94:18:a6:28:6a:f4:7a:ae:00:
22:ea:3f:26:3c:2e:5a:32:15:8e:78:82:63:c9:17:
3a:11:b0:8d:09:08:2e:f6:99:2c:86:c2:6e:ef:1c:
89:70:db:ec:f1:62:6b:c8:af:6f:8f:d6:93:a5:ff:
f2:3b:5e:b0:d7:86:82:b0:4e:1d:b5:d6:03:bf:b5:
8a:ce:b7:cd:59:2e:87:ef:ee:a7:5d:2b:9a:f0:3c:
e3:33:42:e7:b6:57:4b:b4:9c:4e:a0:2a:63:88:d1:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:CD:C7:6A:27:4B:11:B2:FE:6B:BA:74:47:33:DC:AD:09:75:5C
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:99:e4:8c:3c:6c:15:c8:32:fe:2f:54:2e:16:ed:65:1d:7a:
b0:02:3a:19:ed:82:79:da:0d:bb:be:37:51:5d:26:3f:f1:fa:
6f:16:89:2e:d4:b2:ce:e9:23:8a:2f:52:a6:4c:09:01:75:83:
ca:d8:ac:49:46:26:9d:55:c6:5f:90:de:29:0d:79:2b:c9:86:
f7:21:d0:c9:e6:be:27:08:19:c8:3a:91:23:48:62:a9:dc:40:
02:c5:2a:36:db:1f:4d:ec:17:b9:44:5d:cf:34:0d:7b:7e:13:
b8:49:6e:38:ec:37:d8:6d:2c:9d:85:eb:76:68:a1:7b:db:84:
3a:36:fd:5e:b1:47:66:0e:9c:94:9d:4e:e6:38:cb:f4:af:c2:
89:45:d0:e6:00:26:48:e4:1b:a2:db:1e:de:a2:8f:ab:94:d7:
2a:c0:90:a2:27:3b:9c:1d:b6:59:41:5f:78:74:24:ec:c0:11:
c2:6d:a1:4b:5d:50:46:83:b6:11:77:eb:e9:86:61:33:db:79:
93:7c:59:d9:eb:50:c3:1a:6d:75:75:0a:21:88:63:0c:cf:62:
c3:89:a9:ce:d2:c3:8e:35:c0:72:d5:ff:87:68:88:ca:94:98:
68:5a:ea:34:9e:00:9b:fd:99:40:97:d7:bd:fd:ff:70:06:4b:
20:4e:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:00 2026 by rpki-client