Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: gsx+/DZxDzRJAj8YRyR9m7ulIMgVN2KmqcA5DwvEOu8=
Subject key identifier: E8:10:64:18:20:D0:8B:65:C6:38:4B:8D:02:11:17:4C:84:00:8A:03
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019E1D903CF3A33195812AED64672747215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 0919
Signing time: Tue 12 May 2026 19:00:52 +0000
Manifest this update: Tue 12 May 2026 19:00:52 +0000
Manifest next update: Wed 13 May 2026 19:00:52 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: 9OJImTwSZp/l67+GKwWj3pc5KQMWzxJ9+xnLN/4Y3Gg=)
2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3c:f3:a3:31:95:81:2a:ed:64:67:27:47:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: May 12 19:00:52 2026 GMT
Not After : May 13 19:00:52 2026 GMT
Subject: CN=e810641820d08b65c6384b8d0211174c84008a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:4c:69:cc:92:17:be:91:fe:2e:03:f0:3e:
af:d4:09:44:b4:4d:70:f6:a1:96:b4:b0:84:13:26:
96:6a:e5:e1:eb:d8:fc:2d:ab:f2:e9:8c:2c:a5:ce:
6d:bc:60:e3:2d:8c:72:22:06:0c:1f:77:48:a0:68:
22:c0:54:bd:49:51:ad:5b:5b:18:d8:d8:f7:68:df:
76:a3:20:e1:13:b8:b0:4d:87:79:b5:e0:cc:f1:d8:
1e:6a:5f:05:f3:1a:78:50:97:84:5a:e3:db:64:06:
55:b1:a4:aa:e2:de:ba:90:90:fe:82:3d:2c:58:f0:
02:3a:b5:c3:f2:e7:9d:47:e9:d8:68:17:2b:7f:8e:
98:a9:c7:a6:3d:b5:66:85:46:25:78:f5:71:ee:eb:
69:93:dd:53:9d:18:87:15:da:4b:fb:05:4b:f9:6a:
9f:f3:0c:72:17:16:3a:ad:fe:dc:6f:32:68:94:5c:
65:9f:dd:32:c6:8e:c1:fc:bc:6d:10:71:93:47:05:
03:68:34:5a:fe:9b:b8:07:3f:c6:cb:ac:dd:b8:33:
37:67:37:f5:59:92:f2:2e:46:13:13:3a:bb:d3:cf:
f4:9f:0e:5d:76:1b:a0:c5:13:ff:b7:2f:14:a0:66:
ba:f2:ed:1d:1c:9c:ea:42:77:40:43:90:c1:c9:69:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:64:18:20:D0:8B:65:C6:38:4B:8D:02:11:17:4C:84:00:8A:03
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:ef:60:b0:50:24:19:37:06:b5:44:d9:6f:98:68:fb:61:
03:2d:5e:99:fc:f2:79:7a:82:76:d5:13:c7:96:05:dc:3a:53:
53:63:5c:bf:b3:6e:82:91:e4:d5:8a:de:62:7c:bc:96:d5:c2:
c1:7e:9b:d0:5e:cb:28:cd:5d:41:48:56:b4:63:f8:80:ad:ef:
01:93:a7:6f:fe:f5:fc:1e:c0:99:a9:ae:80:f7:67:4d:7f:6e:
88:82:75:93:38:7b:ef:c4:a8:0d:ba:17:1f:fc:3a:fb:02:27:
b8:7a:2d:1a:ee:5a:37:31:19:92:25:b6:be:a8:13:ca:fc:65:
3a:96:41:02:28:94:06:0b:83:c4:60:7b:c1:8d:d9:a1:4e:62:
67:e0:4c:cf:fd:18:49:79:8b:2f:8b:66:ca:f2:34:b9:38:a6:
7e:d0:b7:fd:94:20:14:86:fb:f4:ca:6b:b7:ac:10:01:e2:fb:
ae:44:46:98:bb:9d:e6:a2:d4:12:d7:63:1b:d5:a3:2b:21:78:
c6:da:7b:95:8c:4e:ae:1a:27:d4:62:6e:a3:51:05:26:ea:0f:
51:08:bc:4f:15:b0:9f:bb:50:36:3c:fc:e0:15:99:98:27:1d:
92:e1:91:ab:91:1e:04:a5:ba:e5:92:0b:70:36:e0:8d:98:66:
91:1b:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:25 2026 by rpki-client