Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File: 5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier: a8hhA5+dfFTtgRup1lLeQU+nHTECQ1TjZ99k5ijv6z4=
Subject key identifier: 62:62:85:EE:BF:B0:27:68:3C:B2:0B:60:0E:5E:DD:5D:94:72:A7:4D
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 019E1CB44C6AA1859A8B9AC7D651DCE6589E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number: 0EF4
Signing time: Tue 12 May 2026 15:00:38 +0000
Manifest this update: Tue 12 May 2026 15:00:38 +0000
Manifest next update: Wed 13 May 2026 15:00:38 +0000
Files and hashes: 1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: 5aCeAf6tQ6/HcHmXEbMcRcW7WdtQAKnMobDWYlKfBkg=)
2: mFHqDso79bnSGrudnucQz5R41Oo.roa (hash: xaP9Kn1Lx08lI3zRt9f0iOZYpubw0vPg4T0MZuTFXEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:4c:6a:a1:85:9a:8b:9a:c7:d6:51:dc:e6:58:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: May 12 15:00:38 2026 GMT
Not After : May 13 15:00:38 2026 GMT
Subject: CN=626285eebfb027683cb20b600e5edd5d9472a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:e7:64:82:16:c8:b7:3d:92:7e:30:c1:2e:
60:85:40:06:59:f3:82:bb:f5:64:56:34:3d:0e:26:
ae:b7:97:7e:29:c1:ae:c2:39:e7:c0:30:0b:dd:6b:
30:aa:bb:69:ff:58:85:0c:5b:91:4a:bc:1a:44:4c:
16:4e:9a:3c:b4:ee:55:db:a6:34:b0:b2:e7:63:c0:
cc:96:8d:c0:18:7b:38:bc:cb:4a:ba:cf:24:7f:a7:
b4:ba:dd:72:5e:2d:00:9c:72:6a:27:27:b5:da:87:
87:8b:19:48:09:74:1e:fa:b2:4c:2d:54:e8:f7:46:
0c:31:a6:5b:f6:61:55:e4:52:a5:35:04:8d:2f:0c:
5c:76:8b:90:e3:c6:a9:45:15:92:e3:ad:02:ce:2f:
a6:b6:7f:9c:50:8c:8c:4d:6f:30:2b:9b:d9:02:54:
50:c8:f4:ed:e5:9f:c0:d0:e2:6d:ff:55:0c:85:7e:
a6:f7:8c:a7:06:9d:18:0a:86:d9:12:c0:3c:41:6d:
9a:79:ed:23:5e:7d:36:fa:8d:63:b1:70:79:42:8b:
59:38:17:43:93:0f:e3:ed:5f:d9:17:3c:30:b7:93:
a2:e0:45:3e:ad:9e:4e:00:57:73:64:1d:c9:7e:b9:
e3:26:fb:58:2e:71:d3:92:ff:d8:4a:5d:99:04:6f:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:85:EE:BF:B0:27:68:3C:B2:0B:60:0E:5E:DD:5D:94:72:A7:4D
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c4:0c:fa:b7:5e:b9:f8:a9:36:62:b6:ed:41:50:b4:db:fe:
25:91:80:60:8e:20:01:89:af:fa:66:4d:a0:42:1f:c8:57:f9:
5d:23:62:42:47:bc:95:1d:2d:af:fe:ea:10:d5:e4:5f:1a:ba:
d3:60:38:ea:4b:de:cd:81:0a:37:f3:95:e4:9f:c0:f8:4b:5d:
4c:8b:b1:8e:f1:69:8d:22:d4:b3:c1:38:3c:9b:6d:76:f2:d2:
08:a3:5e:f7:fe:15:c6:46:ca:b3:3f:e5:ec:0e:1e:33:ec:82:
8d:3e:50:c4:1b:ff:4f:aa:76:32:28:bc:26:2e:fb:9b:55:a0:
5f:6a:51:62:99:0a:e5:31:cb:3f:27:e6:09:93:76:51:5c:77:
17:28:53:3a:0f:d9:e4:96:29:03:07:bb:a9:da:aa:08:69:f0:
c5:df:7a:e8:6e:78:21:07:d2:e2:96:60:9b:99:de:98:49:d6:
3a:9c:f0:14:f7:4d:a8:7b:94:21:ea:2a:81:d6:3c:aa:0c:f4:
4a:af:18:8d:13:bc:df:ef:d6:cd:f4:81:21:a8:35:5e:70:ee:
9f:7e:d0:98:ff:5a:43:83:a6:4a:1a:a1:f2:27:ad:04:22:ec:
50:4c:82:b1:c8:d6:80:07:a4:44:e7:d2:39:13:7a:de:63:4f:
4a:37:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:38 2026 by rpki-client