Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: gp7K9PTUpnttPLnBSuEC6gCjxgB3UV8SztxfWY6yJJA=
Subject key identifier: 0C:5C:5C:99:4F:39:3E:D3:5B:79:05:0B:18:45:F5:87:90:F4:50:EC
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019E1DC7746E9347BD7D6923E5F1B27D65DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 18E9
Signing time: Tue 12 May 2026 20:01:11 +0000
Manifest this update: Tue 12 May 2026 20:01:11 +0000
Manifest next update: Wed 13 May 2026 20:01:11 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: jlq8s0FJ2ZboPoTVf2inNryrNq1Sz6umJbwz0eg6GUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:74:6e:93:47:bd:7d:69:23:e5:f1:b2:7d:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: May 12 20:01:11 2026 GMT
Not After : May 13 20:01:11 2026 GMT
Subject: CN=0c5c5c994f393ed35b79050b1845f58790f450ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:e8:03:23:2e:c5:0d:a3:63:fd:fe:29:37:
25:bc:d2:e1:93:41:ee:51:75:d8:cf:1b:72:f7:8d:
d5:bb:bf:77:d2:84:6b:0f:d5:5b:c8:8f:25:32:e4:
0c:a9:11:b2:96:64:cc:b7:b5:c7:0c:63:10:e5:08:
58:7e:6f:c0:41:f0:db:a9:82:cd:0f:79:a5:0e:c8:
c6:bc:cb:c0:fb:b8:f6:6b:f7:fd:64:bd:ad:26:46:
b8:20:5c:2a:d7:e8:5d:a9:02:e3:c5:bc:33:7f:09:
a0:bc:fd:f0:35:ab:43:70:74:a0:2d:db:b0:20:31:
8d:38:e7:b8:a3:7b:47:df:55:b2:b8:21:61:e2:79:
1d:7d:19:3c:d1:ce:23:51:2e:41:aa:b5:89:e4:bc:
c4:f8:b0:5a:2a:6c:95:fa:fb:ba:c7:fe:b5:1d:be:
60:3b:3c:96:79:18:e0:ca:ba:2d:f1:20:ff:1a:cb:
0a:8a:c3:e5:e2:df:35:aa:a4:6d:e3:d0:0e:e3:e2:
31:f7:8e:23:75:1c:77:12:ea:66:20:e2:09:57:27:
84:f3:96:06:79:e7:ac:0a:74:61:52:2e:d9:b9:2d:
5f:09:e3:a4:4b:7f:d1:30:56:a5:47:e2:c6:a5:d1:
87:a5:38:15:be:74:03:f2:95:34:ad:bb:56:2f:89:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:5C:99:4F:39:3E:D3:5B:79:05:0B:18:45:F5:87:90:F4:50:EC
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f7:c3:12:f1:c6:4f:d1:43:cb:d6:b8:53:ac:c5:b5:54:c1:
55:0e:04:fc:dd:bd:3a:a1:ec:eb:0d:4f:9d:a6:08:81:86:a4:
5d:69:28:af:2f:e2:ca:c8:39:af:5b:a8:c3:a7:1e:73:e9:64:
3f:f1:51:f3:de:e6:69:6f:a4:94:7b:bc:83:ae:b9:84:22:17:
85:52:8a:db:a7:2c:85:b2:6a:e4:bf:b0:61:2c:be:14:18:54:
e4:dd:a1:fb:39:3b:e3:9d:ba:b1:a8:d2:83:ba:f2:9c:7d:42:
93:eb:c7:99:6f:15:d0:2d:8a:82:65:14:be:28:09:70:0d:f5:
46:d0:76:34:2d:9a:7a:95:15:05:6d:c8:80:53:0b:62:88:d0:
53:16:38:54:1c:86:6d:dc:29:f3:0f:4b:24:0e:64:ed:c9:51:
b9:ac:80:f8:55:24:36:16:08:5c:de:f1:ee:27:fc:6c:e7:ba:
9b:99:7e:ee:da:a4:13:4e:87:19:57:71:18:3f:e8:19:07:4f:
1c:29:2f:b5:bd:ad:24:db:c8:22:77:b4:2a:f2:57:00:97:61:
b4:37:28:cf:23:e7:1a:76:b8:45:97:34:2d:cf:00:07:84:7e:
db:f6:f9:a7:52:27:41:a1:c6:01:d1:4a:02:42:c4:d7:e4:72:
96:ac:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:41 2026 by rpki-client