Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: DcJBXTkmrh9YCi6gNaQ/IKXcgryzPlQKwqsMKy59Klo=
Subject key identifier: 68:49:DA:A1:0A:73:7B:40:73:F2:03:E7:77:1E:0C:82:16:91:6D:E1
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019E1CEC06ADB9A999025365E27DA8D9C58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0623
Signing time: Tue 12 May 2026 16:01:30 +0000
Manifest this update: Tue 12 May 2026 16:01:30 +0000
Manifest next update: Wed 13 May 2026 16:01:30 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: 4FV/ABtSBaL7MzN2DrfzCcJPjErKCwfS3YXeg0Mq8AE=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:06:ad:b9:a9:99:02:53:65:e2:7d:a8:d9:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: May 12 16:01:30 2026 GMT
Not After : May 13 16:01:30 2026 GMT
Subject: CN=6849daa10a737b4073f203e7771e0c8216916de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:20:8f:fd:ee:6b:71:da:2f:08:17:23:bd:
b5:33:3b:2d:af:51:75:3e:72:b9:4b:17:3a:59:ae:
f3:d7:4b:84:7a:69:2d:c9:a4:bb:39:18:62:d5:de:
37:ae:50:86:05:6d:85:fb:51:d5:28:c1:33:56:5d:
75:1f:7f:53:dc:a4:aa:57:d8:c0:69:1c:f9:f2:d2:
f8:8f:e0:1e:53:bf:2a:1d:c4:38:a7:46:02:8d:1c:
7d:71:4d:ed:6b:e4:43:50:e1:e4:f9:46:a8:ff:9f:
d7:29:af:17:f3:a8:12:79:29:6a:25:5c:40:7f:d2:
73:28:3a:15:80:3b:73:9f:8d:5a:88:fd:2c:f7:a9:
ac:21:05:7a:b0:5a:e8:9b:e2:ad:29:69:e3:0a:a5:
3c:e9:b3:42:e5:c1:31:0c:64:0b:ee:5d:0a:ab:6d:
92:10:ed:0a:a8:9e:49:e9:43:42:0a:80:f1:5b:37:
f2:25:66:87:53:7d:e5:bd:91:c4:9f:fb:07:7a:78:
b4:28:3f:93:18:99:31:eb:5e:be:ea:14:d0:68:d1:
e4:9c:d9:65:ab:3c:4f:88:68:20:c2:41:5e:cb:9b:
e0:c0:21:6b:ef:df:6d:0a:b4:90:e9:f7:16:1b:6e:
13:2a:85:8f:7d:fe:ec:ab:ca:4e:1b:23:c4:32:98:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:DA:A1:0A:73:7B:40:73:F2:03:E7:77:1E:0C:82:16:91:6D:E1
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:95:00:da:1e:ea:19:62:12:47:6b:f1:3c:76:ba:ec:05:
f2:8f:0e:0b:4e:48:5f:97:1e:62:e0:f2:39:c7:63:ba:e4:23:
69:30:bc:ea:ef:86:d6:82:23:67:9b:f2:af:3e:35:a8:33:7f:
10:08:db:e3:af:15:c8:94:87:79:d9:cd:df:78:8e:68:1d:2a:
59:9e:ee:56:56:2e:55:f4:4e:43:56:30:be:a0:c2:6b:3d:de:
45:49:50:f8:5f:60:d2:92:e5:e3:0b:bc:a4:94:3c:60:61:51:
33:4b:a5:93:f6:6b:49:e7:7d:a7:87:1a:76:13:b8:24:37:c8:
b2:8f:0a:bf:e5:39:5e:d9:99:99:36:79:24:f5:81:af:e7:99:
8a:40:10:61:91:93:19:2a:72:28:aa:d3:91:7b:55:02:2a:88:
e9:00:38:8c:19:56:d3:d8:e0:13:01:ae:81:60:be:36:9d:e7:
09:f4:d6:17:62:01:18:d1:71:c7:39:3c:55:d7:d1:59:90:82:
60:7c:58:34:df:a5:76:9d:aa:dd:71:5f:fc:b3:9a:f3:9f:13:
53:f0:44:7b:8e:f1:22:42:7c:85:8a:c5:81:71:29:35:ad:2e:
4e:3f:08:90:07:c4:75:af:d6:92:86:9f:5d:db:69:31:cf:22:
49:97:68:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7AatuamZAlNl4n2o2cWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw
N2EwZTIwHhcNMjYwNTEyMTYwMTMwWhcNMjYwNTEzMTYwMTMwWjAzMTEwLwYDVQQD
Eyg2ODQ5ZGFhMTBhNzM3YjQwNzNmMjAzZTc3NzFlMGM4MjE2OTE2ZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSIgj/3ua3HaLwgXI721Mzstr1F1
PnK5Sxc6Wa7z10uEemktyaS7ORhi1d43rlCGBW2F+1HVKMEzVl11H39T3KSqV9jA
aRz58tL4j+AeU78qHcQ4p0YCjRx9cU3ta+RDUOHk+Uao/5/XKa8X86gSeSlqJVxA
f9JzKDoVgDtzn41aiP0s96msIQV6sFrom+KtKWnjCqU86bNC5cExDGQL7l0Kq22S
EO0KqJ5J6UNCCoDxWzfyJWaHU33lvZHEn/sHeni0KD+TGJkx616+6hTQaNHknNll
qzxPiGggwkFey5vgwCFr799tCrSQ6fcWG24TKoWPff7sq8pOGyPEMpiRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhJ2qEKc3tAc/ID53ceDIIWkW3hMB8GA1UdIwQY
MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt
MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy
LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+qVANoe
6hliEkdr8Tx2uuwF8o8OC05IX5ceYuDyOcdjuuQjaTC86u+G1oIjZ5vyrz41qDN/
EAjb468VyJSHednN33iOaB0qWZ7uVlYuVfROQ1YwvqDCaz3eRUlQ+F9g0pLl4wu8
pJQ8YGFRM0ulk/ZrSed9p4cadhO4JDfIso8Kv+U5XtmZmTZ5JPWBr+eZikAQYZGT
GSpyKKrTkXtVAiqI6QA4jBlW09jgEwGugWC+Np3nCfTWF2IBGNFxxzk8VdfRWZCC
YHxYNN+ldp2q3XFf/LOa858TU/BEe47xIkJ8hYrFgXEpNa0uTj8IkAfEda/Wkoaf
XdtpMc8iSZdoig==
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:17 2026 by rpki-client