Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: okpagEfGgH4BlzDMmR638ew7aETUj0kJJxBIO+tpAuI=
Subject key identifier: 8B:C0:55:A3:B8:63:34:D1:97:6A:6D:DB:81:25:3E:2F:CD:BE:51:D8
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019E1C0FA05F4DD232E3E126091D2C7F6052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 12:00:46 +0000
Manifest this update: Tue 12 May 2026 12:00:46 +0000
Manifest next update: Wed 13 May 2026 12:00:46 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: a01V/7go9kWqS1i2IHasgufWO5Ny6eag2w/NjC/f1iI=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:a0:5f:4d:d2:32:e3:e1:26:09:1d:2c:7f:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: May 12 12:00:46 2026 GMT
Not After : May 13 12:00:46 2026 GMT
Subject: CN=8bc055a3b86334d1976a6ddb81253e2fcdbe51d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:6b:f5:9d:7b:1b:f5:8f:ca:0c:a2:ca:2b:
78:25:c0:cf:41:2e:52:1d:92:df:b1:6a:c2:ea:9a:
b6:0d:45:79:fe:be:c8:9e:c7:3e:1d:69:b0:98:9e:
9f:9e:d7:12:24:44:73:6f:6a:1b:a3:ba:37:3a:62:
29:a1:d3:48:f7:83:da:05:b8:ad:a7:ac:11:f4:c5:
bd:8c:ae:20:26:c3:d7:31:ac:7e:70:bb:66:09:b8:
56:96:35:f1:0f:04:ae:e1:02:cb:0c:0a:8b:5f:73:
fd:84:9c:ca:3a:23:61:8a:20:a2:87:e7:ea:9a:72:
6e:79:3f:23:a6:2a:c3:6c:68:23:22:23:c6:80:62:
f3:c5:46:75:ae:5a:f9:f3:f7:f0:b5:df:96:24:b9:
d6:4b:f4:90:cf:22:68:2e:c5:ec:81:20:d9:d3:a1:
04:80:21:2e:e8:eb:a2:df:a9:d0:16:26:e4:bb:09:
4b:2b:ac:9f:37:e8:52:24:22:b4:dd:22:88:f1:c8:
9c:52:f5:47:92:0d:1c:8e:17:11:9c:63:68:d1:8b:
f4:84:e5:66:26:bb:8a:94:42:ae:20:b1:2d:ca:63:
ec:61:aa:4e:e3:0e:6c:18:ab:fd:37:92:54:af:74:
6d:05:a7:c8:91:0f:ff:f4:7b:d5:53:10:be:10:dd:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:55:A3:B8:63:34:D1:97:6A:6D:DB:81:25:3E:2F:CD:BE:51:D8
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:84:f5:8a:c1:27:e1:ce:f2:3d:29:b0:3a:12:25:9f:ec:
40:29:0c:76:3f:04:7a:68:27:5b:4e:bc:30:a0:fe:6a:b9:c6:
fe:e7:7b:c2:a1:f5:c6:fc:c6:ec:20:58:9a:76:cf:87:08:57:
8d:6d:a0:0a:0f:d6:cd:1e:78:95:cb:ae:71:ba:37:82:4c:21:
59:ca:cd:f7:b3:7d:ca:14:27:45:91:6d:39:f0:90:77:ce:b4:
30:32:ad:62:dd:ef:a3:6c:09:15:4f:d7:33:36:3a:5d:93:95:
e7:3e:ba:d5:63:45:e1:ab:27:ef:22:56:27:57:b3:0c:d5:30:
ba:06:a5:d8:87:a5:da:18:bb:67:60:95:96:d1:8d:83:05:b9:
9d:3e:e5:75:9c:29:e2:30:72:af:23:d8:d9:32:6e:d9:c6:4d:
35:dd:a0:43:05:da:35:90:5f:8a:44:c4:a1:82:b1:46:97:ae:
99:c9:9b:cc:eb:76:8b:ef:4b:bd:c0:d5:20:78:aa:93:fe:ec:
5e:db:09:00:0c:1b:ce:98:03:3d:e3:83:96:8b:97:06:a5:58:
28:c1:c2:e9:9c:2c:51:f0:af:36:8c:c7:52:02:3b:fb:d8:f1:
91:9e:24:e4:df:a8:e5:62:0b:ad:f9:d0:3f:ea:34:37:5d:f5:
13:b6:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:32 2026 by rpki-client