
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier: i84Bv6ofsIJ/gmZN96GV7cNBz5pmAGAN41cqgNNtfV8=
Subject key identifier: 19:33:65:8A:8A:F5:2E:91:44:3B:AC:13:CF:61:9D:20:9B:C1:D8:9B
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019E1BD8B87E8226F299857BF7EB786E0C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number: 1920
Signing time: Tue 12 May 2026 11:00:48 +0000
Manifest this update: Tue 12 May 2026 11:00:48 +0000
Manifest next update: Wed 13 May 2026 11:00:48 +0000
Files and hashes: 1: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
2: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
3: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
4: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
5: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
6: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: ZKxKInvMofB/CfljGZ6clhWbSy292YWOqXx9320sqO8=)
7: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
8: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
9: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
10: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
11: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=)
12: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
13: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
14: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
15: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
16: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
17: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
18: UklLTExOoaPaMPCeHqr4xmNfviM.roa (hash: dML6DgKB9ASggErDkanv+9BCYfbY4v4FKpIVtXi2AX8=)
19: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
20: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
21: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
22: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
23: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
24: gW1uhT9HvHgWpqxNHFn9zb_bckI.roa (hash: yv2SpzaNQSnqQxF5j8oS7CnPtCJZkjwS6Ua4y5pKnjw=)
25: gnDuj3azpU1wiHZUf0f93N7QjnA.roa (hash: E6mUU2oB8TEHtnH3EsNLe+0P+s9OunlKpVDohgw7f1Q=)
26: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
27: nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa (hash: WIZOSDt0Es9Gm8CvqlkZaoIujiZBkOCxPKGB1dEZdbA=)
28: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:b8:7e:82:26:f2:99:85:7b:f7:eb:78:6e:0c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: May 12 11:00:48 2026 GMT
Not After : May 13 11:00:48 2026 GMT
Subject: CN=1933658a8af52e91443bac13cf619d209bc1d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:b6:ce:71:a3:56:92:70:a8:b9:25:ae:2f:
c1:49:30:67:67:f2:2b:80:4f:a4:1e:e7:c1:ea:a9:
68:ed:43:24:9e:61:02:25:31:3b:fd:aa:fa:47:86:
f0:0b:c1:f3:5f:bf:4a:72:23:3c:ac:69:f9:12:cd:
71:b5:84:2b:f3:53:79:06:93:b5:60:b8:b3:99:ee:
91:53:4b:79:25:0a:0f:54:98:33:4d:c0:81:e9:80:
54:b9:77:ba:ac:c6:54:f4:e1:f3:16:9d:47:fd:4e:
94:20:66:99:ec:ca:cd:e7:80:9b:b8:79:9f:02:fa:
47:a1:a9:33:a1:a2:66:ec:51:e1:a6:15:ba:63:0c:
ef:72:66:af:3f:ca:91:e1:7d:ae:b5:f5:f2:d4:d8:
c7:c9:07:48:c7:0e:15:74:6c:0b:32:5f:c6:c8:f6:
0b:07:06:b7:e9:02:2d:c3:ec:d6:76:d0:fe:7d:a8:
89:e8:86:03:98:55:7b:f7:89:7c:94:8a:83:ba:53:
72:17:33:82:af:55:75:c2:fd:56:bc:28:50:77:5f:
72:86:72:04:13:da:e3:ad:3c:50:a9:65:06:0f:85:
b0:5a:34:71:1b:f2:92:f7:28:ff:65:3a:6d:1c:62:
5e:dc:df:89:16:b9:34:16:be:d0:5a:82:3d:26:04:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:65:8A:8A:F5:2E:91:44:3B:AC:13:CF:61:9D:20:9B:C1:D8:9B
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:57:a5:87:98:67:39:81:93:98:01:d1:f7:43:43:41:99:
29:ed:22:4a:67:a8:38:98:ad:1b:ec:d0:fe:82:50:72:a3:78:
eb:4b:fe:60:86:f9:eb:04:e5:1e:6a:65:5e:b6:a0:69:f6:dd:
b2:7d:1e:5d:11:fc:e5:ed:76:07:de:fe:9d:62:67:69:59:e2:
23:cf:8b:d0:65:6e:28:c7:5b:c9:c1:9a:62:00:34:5f:41:75:
dc:93:f9:13:20:58:02:a2:fc:45:a7:74:29:b3:df:f0:8f:cc:
fe:03:82:eb:18:6b:ea:55:6a:b6:1d:95:46:44:96:78:ce:78:
e2:72:98:3d:29:45:e7:d6:15:8c:2a:6f:21:b7:8b:93:e1:8b:
ac:9b:f3:dd:1a:e3:ca:fe:1d:e6:2a:af:ba:e8:09:0e:dd:fa:
33:3c:50:dd:90:7e:d4:e8:1c:3a:06:85:d1:97:93:e8:66:2f:
84:fd:fb:1d:ea:c2:93:79:98:b5:25:3d:98:61:12:94:6a:7a:
2f:51:1d:0e:50:7d:3b:a0:76:51:91:9c:cc:86:e1:ea:49:76:
59:7b:a0:0a:56:de:a9:3d:78:68:af:e5:7e:c4:f0:66:40:cf:
95:8f:b5:a8:ce:2b:4c:48:28:40:95:25:4c:d9:fa:7c:9c:64:
31:e5:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:01 2026 by rpki-client