Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: Fap2uiJj6hyK3hegFoMvssSoKu3CUDmbivrVdlCqh5k=
Subject key identifier: 5E:9A:45:25:D2:8A:1B:08:64:77:4A:39:3C:EE:F7:48:79:7B:39:24
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019E1E6C890048728ADE3469345D517E59FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0CF6
Signing time: Tue 12 May 2026 23:01:29 +0000
Manifest this update: Tue 12 May 2026 23:01:29 +0000
Manifest next update: Wed 13 May 2026 23:01:29 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 0gzvKry0lVuTfDjWplW+NvlIlElMWRdn3S5/wTdNAw0=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:89:00:48:72:8a:de:34:69:34:5d:51:7e:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: May 12 23:01:29 2026 GMT
Not After : May 13 23:01:29 2026 GMT
Subject: CN=5e9a4525d28a1b0864774a393ceef748797b3924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:e6:20:c4:da:86:02:41:2f:3d:3c:08:a7:
49:74:c2:86:6a:a8:75:9f:e6:ed:db:ec:70:18:02:
3d:28:36:50:31:c5:8e:51:4a:e2:3f:74:fc:36:1d:
40:f3:eb:4c:fd:49:a7:5b:1c:1c:08:f9:30:73:8e:
69:6f:39:98:ee:99:ac:ef:64:31:5e:82:ee:d3:e3:
89:21:d4:f2:34:5c:df:fa:8e:87:0e:c7:94:fe:eb:
8f:9a:28:06:0e:1d:5e:8d:05:f5:06:f6:b4:36:00:
04:f8:8e:24:d6:06:c6:95:d2:7d:23:8b:36:ff:f1:
6b:f5:c6:2e:6c:76:63:a5:6c:21:94:03:53:2a:bb:
58:78:71:77:bd:9a:24:f6:24:26:04:84:0f:df:0a:
e5:82:22:13:2a:bb:3d:80:58:36:6f:d9:79:39:89:
be:10:58:c8:a3:7f:2d:f6:40:2b:d7:91:8d:f4:5c:
d9:53:ec:81:d8:72:d5:63:13:58:47:ad:96:e2:69:
3a:48:e4:00:06:ea:ec:ee:41:b3:d1:db:7e:81:37:
27:99:29:56:14:29:a9:d2:4c:04:60:f1:7c:65:31:
d5:bc:b0:18:36:5d:fb:fe:ef:00:64:6a:0d:3b:a5:
67:69:16:7f:f9:65:cd:ff:33:71:6c:cc:fb:50:a5:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:45:25:D2:8A:1B:08:64:77:4A:39:3C:EE:F7:48:79:7B:39:24
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:dd:54:6a:fb:5b:fd:38:26:41:38:11:2a:63:a9:72:2f:
b3:08:ea:3d:02:71:d1:6e:8d:69:b9:e9:d1:54:85:ed:4c:d5:
cb:8b:7b:76:a0:c4:d8:7f:b9:57:75:8e:e8:1a:8c:d9:df:30:
f7:66:23:40:dc:38:ee:72:bf:19:93:b0:7b:31:01:50:85:b3:
43:88:b8:eb:31:bd:4b:8a:1e:d8:a4:2c:cd:75:6c:84:0b:9c:
73:86:fc:d7:b3:cd:45:91:7d:de:ea:26:c7:51:83:b5:cc:3d:
6c:04:0f:c2:f4:4d:fa:6d:37:05:a2:02:76:e2:4a:2a:da:1c:
ef:6d:7d:09:22:55:8c:13:ba:4d:49:b0:87:55:c7:92:50:87:
b5:89:00:3d:78:ad:bc:5d:b2:b2:6b:71:ac:1b:c9:ca:b9:5b:
7f:69:eb:db:75:6f:f2:83:ac:d3:c4:6b:a0:af:53:2b:9f:a1:
f3:03:8d:45:c3:67:80:bf:09:a4:c7:da:d4:d7:e0:dd:a0:03:
11:c7:58:28:4d:b9:14:99:fb:db:c2:6a:eb:b4:31:ee:36:4c:
53:a9:67:11:2e:5e:5e:fe:66:e5:aa:72:23:1f:d4:3d:36:83:
c1:9a:35:fe:83:9e:dc:4a:01:8e:eb:33:9b:fa:63:a8:57:d1:
1c:7d:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:33 2026 by rpki-client