Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File: 5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier: psd/Bbpbd8o5JEVH+Aw6VMNkhjywGzuNNbjHvyOarig=
Subject key identifier: E7:BF:28:04:59:12:8D:CD:E9:06:18:01:62:3F:BB:0A:83:BA:EA:EC
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 019E1D592C8B7CDCECEDC9EE3021A6FC6F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number: 1694
Signing time: Tue 12 May 2026 18:00:43 +0000
Manifest this update: Tue 12 May 2026 18:00:43 +0000
Manifest next update: Wed 13 May 2026 18:00:43 +0000
Files and hashes: 1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: L8i3Pnxo+NwtkvRCBFyWu9tR7HmjSlTIp+tM+6i1k+A=)
2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2c:8b:7c:dc:ec:ed:c9:ee:30:21:a6:fc:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: May 12 18:00:43 2026 GMT
Not After : May 13 18:00:43 2026 GMT
Subject: CN=e7bf280459128dcde9061801623fbb0a83baeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:18:a7:d5:16:71:69:eb:b7:95:1f:7b:1d:
97:3a:2a:c2:52:5a:9c:1a:d7:c0:2d:2a:a0:5c:fe:
b3:f3:f2:76:3d:9c:e1:02:f1:8c:ea:4f:9f:c2:6e:
a6:86:9f:d2:b6:f0:b4:25:c6:14:49:9b:61:df:57:
ca:03:ae:92:b0:a7:46:9a:e3:77:01:5b:66:12:a5:
be:a9:db:dc:32:39:c2:c6:09:d1:c2:6a:71:57:4f:
05:29:0c:50:ae:b6:de:84:dc:f7:68:52:44:2d:ef:
72:47:d5:48:fb:84:77:0f:f5:c5:88:8d:dc:8e:6d:
dc:81:b4:e8:93:1c:a3:fa:f4:ca:1c:3b:59:2b:c3:
f1:f0:98:dd:22:66:93:76:69:19:43:c9:bb:7c:24:
d6:7c:dc:d8:8e:60:28:3b:b5:5a:2b:58:4c:13:e1:
f2:89:4b:31:44:93:5f:98:85:77:39:d4:74:e2:4b:
4f:6f:01:12:04:ef:22:73:32:93:c5:fb:fa:90:ed:
b2:29:1b:c6:f4:db:d7:38:dd:60:67:42:dd:3c:00:
48:ce:4f:ca:1a:5e:3b:d8:47:a0:76:58:44:70:c1:
ab:8f:37:fc:d5:5e:ea:a4:11:1c:67:c7:18:20:31:
c7:eb:cb:62:55:b7:73:82:a8:d6:c2:70:f6:54:c8:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:28:04:59:12:8D:CD:E9:06:18:01:62:3F:BB:0A:83:BA:EA:EC
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:cd:b5:3e:3d:61:9b:c1:ee:ab:7f:7b:67:3d:b7:40:40:
53:ec:ee:50:7d:74:e5:1c:77:e2:15:ca:1f:5e:2c:02:07:d2:
2e:31:07:2c:38:6f:39:71:79:20:d0:3b:d6:fd:92:fb:b8:da:
c6:ee:f3:fc:da:bc:ab:d9:40:00:5f:68:ae:ea:88:9f:01:67:
7e:81:d0:61:b3:81:a7:8f:42:8e:6f:0f:06:24:ec:9c:28:81:
9a:18:bd:2d:b3:cd:ff:5d:2b:1b:6b:a4:c9:23:94:cd:94:7c:
88:a8:2b:f6:69:39:b2:13:03:85:df:f7:47:b5:e1:a1:d8:79:
f2:ff:75:ae:41:6b:51:13:03:a0:55:33:6a:5b:9c:34:04:75:
5d:26:26:8a:96:fd:f0:1f:d8:cd:10:62:58:05:35:68:d7:07:
f7:39:6d:62:6c:8f:93:54:52:23:3b:9d:fb:45:de:f4:05:0a:
58:e3:7f:9f:74:68:5f:22:3d:23:90:aa:5c:e9:2b:e1:00:e4:
9c:76:6c:43:a1:7c:4c:14:81:8b:c9:72:81:26:37:b4:88:2d:
f5:83:22:c0:ae:31:94:e4:12:f9:2b:9f:5c:c7:80:28:ae:1d:
07:43:92:95:72:b2:f9:fd:28:17:25:64:82:23:65:98:21:7c:
b2:06:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:07:41 2026 by rpki-client