Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier: QNKDUCdeFBPAgi8aXalvGHX9X95xDbbLSb6YrUDA+lI=
Subject key identifier: E8:45:7B:65:CC:CC:09:E1:F3:F8:0F:AA:AC:0C:62:36:4E:FD:CB:DD
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019E1D23489989445B8F890DD86F3EC0C3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number: 0FC5
Signing time: Tue 12 May 2026 17:01:52 +0000
Manifest this update: Tue 12 May 2026 17:01:52 +0000
Manifest next update: Wed 13 May 2026 17:01:52 +0000
Files and hashes: 1: 1s9edady0IlLFTjAVGX74BTlTOU.roa (hash: UbGcCZaiXwxi+mV6BY8TzVOmDvRo6W4bzSToeQyBxU8=)
2: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: TyshNP0Bkj/hUlOWzOCr2efW9U+0YvKKH24VeLCQK3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:48:99:89:44:5b:8f:89:0d:d8:6f:3e:c0:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: May 12 17:01:52 2026 GMT
Not After : May 13 17:01:52 2026 GMT
Subject: CN=e8457b65cccc09e1f3f80faaac0c62364efdcbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:25:ad:0b:c5:47:58:05:12:23:ae:87:ed:
fb:2f:ee:7e:1c:27:f4:a6:89:d9:79:c3:3f:dc:d2:
8b:14:96:ca:e4:c0:7b:3b:3a:7c:35:00:43:f7:31:
59:e8:b8:dc:b1:c0:d5:d5:21:d9:d4:ca:b3:c1:20:
f7:13:eb:f5:ad:81:57:36:7d:3f:69:d4:e6:3d:e6:
e4:8c:e8:11:10:f2:2d:5b:b0:0f:84:d2:16:22:af:
5b:d8:e5:6c:a7:43:dd:50:5c:3d:b9:51:1c:d4:ae:
74:da:71:b1:9b:93:dd:84:0c:07:db:95:24:67:96:
54:13:83:4d:81:bb:74:c6:b2:4e:e5:75:0a:c8:e6:
ea:0f:5a:e6:64:f1:72:10:d7:90:17:d8:e0:3c:36:
72:db:75:9c:5b:fa:71:0e:ec:94:c0:af:90:34:2a:
0a:fa:26:75:44:2b:49:cc:b3:ed:85:bd:1a:4f:18:
8e:ba:b7:7e:30:4e:f6:a7:7c:e8:e7:9c:9d:ac:54:
86:a3:f9:84:87:5f:41:31:6e:81:66:34:aa:e8:4d:
ce:ba:f5:69:a7:05:b0:a7:a9:33:93:a6:c4:a4:60:
84:72:74:92:f4:db:b4:99:8b:2a:47:ee:a6:3c:67:
ff:2c:69:75:90:3e:55:42:63:01:90:91:42:a0:80:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:7B:65:CC:CC:09:E1:F3:F8:0F:AA:AC:0C:62:36:4E:FD:CB:DD
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:21:c8:01:e9:88:69:3e:38:38:8e:38:99:83:34:f1:2d:3b:
42:ce:08:8d:e0:e1:1a:1c:c9:54:e7:c7:f8:0f:60:fb:69:35:
72:ed:93:94:38:e6:0b:39:94:08:85:96:92:0e:be:63:b2:e2:
10:dd:d2:5e:27:cb:57:eb:bf:74:e0:c7:e0:47:3e:42:3e:21:
9e:b7:be:95:bf:44:ae:b4:c3:a5:9a:33:41:14:78:82:cf:9d:
f7:9a:28:cd:e7:ce:b8:aa:34:50:57:6d:29:9a:76:0d:d0:0d:
c9:7f:2a:48:82:5c:ca:39:fc:84:86:9a:1f:39:37:b3:9f:06:
59:c0:c6:2b:bc:fc:2f:5f:31:4a:dc:11:98:70:c4:3a:ae:7d:
fa:e2:6a:af:a7:d5:95:f9:00:95:18:9b:2b:0e:c8:89:57:24:
e6:1b:1c:85:6b:e0:fd:79:e9:d9:30:1a:2c:3b:95:ff:28:fb:
6b:ac:8f:31:27:58:f0:bd:b2:28:01:bf:03:7c:5e:5c:79:ec:
ed:9e:b2:b8:c5:a3:ad:d5:92:1a:40:1d:b0:61:78:9a:13:48:
43:da:5d:36:33:c0:e0:f8:3b:23:87:90:b1:78:08:b4:ef:a3:
e6:e8:27:da:42:ec:b3:5b:dd:00:76:04:b9:f3:c3:11:e6:6b:
6b:10:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:41 2026 by rpki-client