Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: fyotaQO6yfmb4fftfD5dKGNWd/LcsFF4D+IYYBG7zAc=
Subject key identifier: FB:69:FF:7F:8F:2E:70:58:32:17:6C:8E:99:C7:C7:F6:0F:CA:EC:BC
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019E1D22BDA32BAEE98F321B0DD1636DB5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0A3D
Signing time: Tue 12 May 2026 17:01:16 +0000
Manifest this update: Tue 12 May 2026 17:01:16 +0000
Manifest next update: Wed 13 May 2026 17:01:16 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: WqiQlRiSg+kP62eSXiac8cEnOmJ1WdGATJRvQHpeie8=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:bd:a3:2b:ae:e9:8f:32:1b:0d:d1:63:6d:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: May 12 17:01:16 2026 GMT
Not After : May 13 17:01:16 2026 GMT
Subject: CN=fb69ff7f8f2e705832176c8e99c7c7f60fcaecbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:f2:bc:0f:66:5d:d2:11:02:62:64:c9:20:
1e:9f:dc:f8:1e:60:9b:9d:8d:0e:3d:a2:7b:5e:6c:
6b:50:6e:57:dc:eb:ba:bc:ce:67:e9:ef:b1:47:a5:
75:c0:91:95:2d:07:f1:9f:b4:80:ee:e7:ca:64:7c:
bb:10:32:bd:dd:45:78:17:29:95:73:2d:b9:ae:9e:
c7:6a:f0:90:4f:1f:87:05:b3:65:5b:d7:3f:77:83:
44:49:85:6f:c3:f3:55:02:9c:31:33:9c:97:13:51:
42:03:b0:24:09:ae:2c:cb:ce:52:60:f3:34:ef:e7:
0e:a1:d5:5e:b3:47:9a:71:80:f3:9a:aa:b6:f5:09:
d3:cc:ca:61:05:a0:63:a9:17:1f:81:09:90:52:f6:
4f:6a:0a:78:45:50:46:8d:72:58:7f:db:a4:7c:2c:
77:56:23:2d:d8:e5:ad:61:c6:7c:c1:b1:ac:3a:23:
34:62:ec:55:a0:80:83:3b:29:aa:5a:b0:e2:2b:96:
3e:bb:51:d6:d1:19:9d:d9:0f:0b:ce:9b:f8:26:0f:
c2:70:df:64:07:a1:e0:58:38:8e:33:3d:b0:48:dd:
7f:cd:58:8a:26:fe:b5:38:3e:db:85:5e:a9:c7:32:
4e:06:d2:ef:9b:d6:76:25:69:0d:5e:47:b8:77:03:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:FF:7F:8F:2E:70:58:32:17:6C:8E:99:C7:C7:F6:0F:CA:EC:BC
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:60:71:0e:d6:d0:56:8a:c2:49:8b:ed:08:21:dc:8e:4e:0b:
0f:9c:cb:de:2f:7a:9d:75:24:3f:10:f4:b7:29:da:fa:d5:11:
43:1d:c6:93:d9:85:44:dd:c1:e2:ad:cd:72:c0:74:5f:11:30:
de:6b:b5:bb:6e:0f:92:0f:1a:f0:aa:0a:9f:58:d3:37:07:67:
81:17:84:22:79:f1:8a:35:a3:3f:79:c1:5d:a8:37:36:75:88:
a1:a4:87:03:dd:84:03:73:19:4e:d4:3e:e0:6a:40:54:ef:1e:
71:15:0a:95:e0:0b:3c:0d:59:76:80:6b:a6:db:00:6b:54:b4:
bb:22:64:21:bc:56:f0:81:74:4e:a5:21:b6:87:dc:d0:c0:52:
13:b8:84:89:dd:0a:15:a4:c9:73:a0:96:94:e6:d1:9e:25:b7:
ed:3b:6c:27:b1:5f:7b:53:ff:69:e2:c6:f2:0d:4d:48:f5:9f:
fb:b4:d7:d0:42:b1:c8:68:10:3b:ba:4d:62:6e:47:b7:36:b8:
9a:c1:43:0e:16:5b:fb:5c:bf:9d:1c:13:8c:5a:23:9c:62:c3:
b2:0c:bc:e9:ad:8c:49:9d:35:01:60:c1:aa:1b:5d:47:12:19:
3b:b4:97:26:2e:f2:2c:2d:eb:af:e7:85:3f:27:a5:6e:2f:6b:
52:8d:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:26 2026 by rpki-client