Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
File: 5UTrMoWRGEs_r55xqTHLMl3LEag.mft (raw, json)
Hash identifier: LFs/TaBTrVxWZfsgk93S5RrCkl72lBn2miDIh5GCo0E=
Subject key identifier: 88:02:1C:1E:39:BB:52:5C:35:22:EE:3B:1B:AF:C7:14:85:79:12:6C
Authority key identifier: E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
Certificate issuer: /CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Certificate serial: 019E1CEBAB65BE5ABB428E93A1C57E81DC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
Manifest number: 0521
Signing time: Tue 12 May 2026 16:01:07 +0000
Manifest this update: Tue 12 May 2026 16:01:07 +0000
Manifest next update: Wed 13 May 2026 16:01:07 +0000
Files and hashes: 1: 5UTrMoWRGEs_r55xqTHLMl3LEag.crl (hash: jcq+fblIdVVJfeFK8gdv4pBzasHyFIy48/RIn8+6xGQ=)
2: rhEDto9LAcb21HwkdYYZj263_-Y.roa (hash: vpJNUlsikgDQkbTcXSuN12zAPLHXSB+mONKm4pukuXs=)
3: yD0u6CnOVpuk9WvVpytgxRU4D0s.roa (hash: hrSKknGCTUHrpDRk30g1RyFkiWwqNDnyIxOmbM3GicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ab:65:be:5a:bb:42:8e:93:a1:c5:7e:81:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544eb328591184b3faf9e71a931cb325dcb11a8
Validity
Not Before: May 12 16:01:07 2026 GMT
Not After : May 13 16:01:07 2026 GMT
Subject: CN=88021c1e39bb525c3522ee3b1bafc7148579126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:d5:a9:15:9c:18:3c:cb:a8:58:dc:e9:43:
0a:0d:23:50:f4:d5:75:45:2b:13:e5:8b:56:cc:a3:
53:58:cc:6d:11:a5:6b:1f:18:6b:fd:4a:0b:83:02:
e9:e3:28:66:08:ac:dc:c0:27:5d:aa:c9:5f:3a:e5:
e0:00:8c:88:d9:0d:15:d4:8b:ee:51:7a:2a:13:90:
48:75:32:e2:89:99:66:ee:04:21:41:c5:3b:a3:97:
68:2d:01:64:5a:f0:d5:43:bd:42:e7:94:61:4c:d7:
90:a2:ff:95:ec:ce:fa:ba:6f:2a:8b:d4:5a:80:55:
19:a6:f4:fb:40:db:1c:8f:77:17:38:73:e2:9c:54:
83:3e:5f:4c:9e:46:3f:a6:c9:2f:b3:76:be:96:51:
f6:82:7a:f4:60:00:3d:99:13:ec:14:69:74:f7:4b:
dc:ea:b5:a2:cb:59:10:4b:e5:49:7c:6a:60:b6:7e:
c2:68:88:f7:18:a5:39:ea:c0:34:5f:f0:f7:98:e6:
8b:d8:0c:9f:13:9f:5e:41:35:08:92:ff:47:c3:27:
52:01:66:cb:6e:55:f7:72:53:d4:1c:f8:fe:8d:16:
43:db:cf:91:83:68:2a:45:d7:53:d6:ad:84:50:02:
ac:4c:3c:d6:f1:70:a4:13:b8:79:6a:fd:c9:94:a0:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:1C:1E:39:BB:52:5C:35:22:EE:3B:1B:AF:C7:14:85:79:12:6C
X509v3 Authority Key Identifier:
keyid:E5:44:EB:32:85:91:18:4B:3F:AF:9E:71:A9:31:CB:32:5D:CB:11:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTrMoWRGEs_r55xqTHLMl3LEag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41d13-cc7a-49d6-91c4-70aa645ecc29/1/5UTrMoWRGEs_r55xqTHLMl3LEag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:30:e9:13:00:cc:f1:35:21:46:5c:9e:fd:ec:0f:cb:fc:d0:
92:e2:3c:65:c4:58:4a:3e:fd:73:73:52:a4:e4:62:c3:7e:92:
6a:e7:6b:ef:da:49:41:d5:84:40:09:e3:7b:67:5e:46:57:1d:
f9:1a:90:b7:67:1b:1b:be:5b:8e:e0:ce:22:64:f5:c0:1c:57:
e4:8f:d5:be:91:1e:50:94:5c:6e:b3:6a:dd:e1:f8:0f:90:a3:
07:a7:6c:e9:ec:b5:d5:50:17:a9:d8:14:c5:fd:c5:00:e0:38:
33:63:4d:b5:88:9a:bd:a1:c6:a3:5e:cc:74:8e:27:f7:12:7f:
09:40:6d:22:9b:b3:cd:1f:b7:28:09:c7:6b:fe:6a:a1:07:58:
8c:76:df:8e:df:05:11:b2:ff:cd:4a:71:a8:cf:c4:a6:14:9d:
bb:2c:eb:eb:b1:02:80:0a:de:1f:f7:63:fa:f8:2c:24:31:1b:
8a:bb:ba:73:13:f3:d0:d1:fa:7a:dc:aa:68:1e:93:76:9d:d1:
a7:56:88:be:6e:33:9d:4f:2b:e0:02:c6:8a:3f:ae:c7:1f:f5:
f6:a4:83:03:d1:a4:4a:5c:15:46:9d:3e:1b:8e:86:23:fd:1b:
1b:13:57:c6:3e:90:48:56:11:99:e3:b1:cc:df:f4:29:43:5e:
e5:e4:41:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66tlvlq7Qo6TocV+gdyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlYjMyODU5MTE4NGIzZmFmOWU3MWE5MzFjYjMyNWRj
YjExYTgwHhcNMjYwNTEyMTYwMTA3WhcNMjYwNTEzMTYwMTA3WjAzMTEwLwYDVQQD
Eyg4ODAyMWMxZTM5YmI1MjVjMzUyMmVlM2IxYmFmYzcxNDg1NzkxMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEnVqRWcGDzLqFjc6UMKDSNQ9NV1
RSsT5YtWzKNTWMxtEaVrHxhr/UoLgwLp4yhmCKzcwCddqslfOuXgAIyI2Q0V1Ivu
UXoqE5BIdTLiiZlm7gQhQcU7o5doLQFkWvDVQ71C55RhTNeQov+V7M76um8qi9Ra
gFUZpvT7QNscj3cXOHPinFSDPl9MnkY/pskvs3a+llH2gnr0YAA9mRPsFGl090vc
6rWiy1kQS+VJfGpgtn7CaIj3GKU56sA0X/D3mOaL2AyfE59eQTUIkv9HwydSAWbL
blX3clPUHPj+jRZD28+Rg2gqRddT1q2EUAKsTDzW8XCkE7h5av3JlKBXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgCHB45u1JcNSLuOxuvxxSFeRJsMB8GA1UdIwQY
MBaAFOVE6zKFkRhLP6+ecakxyzJdyxGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQt
NzBhYTY0NWVjYzI5LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFkMTMtY2M3YS00OWQ2LTkxYzQtNzBhYTY0NWVjYzI5
LzEvNVVUck1vV1JHRXNfcjU1eHFUSExNbDNMRWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzDpEwDM
8TUhRlye/ewPy/zQkuI8ZcRYSj79c3NSpORiw36Saudr79pJQdWEQAnje2deRlcd
+RqQt2cbG75bjuDOImT1wBxX5I/VvpEeUJRcbrNq3eH4D5CjB6ds6ey11VAXqdgU
xf3FAOA4M2NNtYiavaHGo17MdI4n9xJ/CUBtIpuzzR+3KAnHa/5qoQdYjHbfjt8F
EbL/zUpxqM/EphSduyzr67ECgAreH/dj+vgsJDEbiru6cxPz0NH6etyqaB6Tdp3R
p1aIvm4znU8r4ALGij+uxx/19qSDA9GkSlwVRp0+G46GI/0bGxNXxj6QSFYRmeOx
zN/0KUNe5eRBUA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:18:06 2026 by rpki-client