Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: 2oMIVvYRdp7JQ39X4fLDCtJoh7xSiNCFIVBSqHGUuv4=
Subject key identifier: AF:EB:E0:74:FD:16:E2:A6:31:F2:82:66:EF:64:83:98:AF:8A:DA:39
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 019E1E6C434247996FDBA8C8132E4D3948AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: 0450
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: 2otouLsvCSnVsq1qGuJN3VwfjEKRXbDzg9kFllq49W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:43:42:47:99:6f:db:a8:c8:13:2e:4d:39:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=afebe074fd16e2a631f28266ef648398af8ada39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:fd:e0:c8:c2:02:f4:1e:a4:63:04:d0:14:
35:b6:a1:9c:82:b8:fb:2b:9f:3d:a5:2a:de:02:e1:
a8:32:a6:bc:75:42:37:44:cf:f2:25:9e:05:40:37:
8c:50:a3:f5:46:fa:e3:76:d4:51:54:64:c0:2c:a7:
69:5c:2f:a3:bb:e5:f0:18:69:18:4c:9b:4c:b5:fa:
96:99:54:b5:9b:1e:4f:7b:01:a5:41:45:e4:98:3b:
73:a0:a8:ed:e2:44:c9:16:60:16:a4:2b:c5:d9:84:
b5:53:a8:0b:ae:97:c9:6c:a3:36:7b:c4:f5:05:3b:
31:75:c6:c2:82:51:7a:1d:2b:25:dc:60:18:c7:07:
15:ab:e8:be:b6:40:62:b9:96:4c:b2:0b:ea:2b:74:
bf:25:16:93:a4:7b:e5:0f:89:56:2c:e3:04:16:9f:
d6:06:6f:e7:a9:8c:69:d8:89:49:81:6d:64:41:81:
70:e0:84:cd:e1:0e:a7:25:9e:d7:01:09:fc:82:7c:
e8:36:6f:d4:6c:2b:2e:a5:e8:bc:7c:b2:69:57:4c:
03:06:91:f3:56:b2:43:67:c2:a8:04:97:06:f2:3f:
5f:98:49:f5:3d:40:bc:6b:b8:bc:db:68:dc:c1:58:
d8:53:ad:b0:f7:e3:5e:36:ca:fa:0b:68:1f:a8:f7:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:E0:74:FD:16:E2:A6:31:F2:82:66:EF:64:83:98:AF:8A:DA:39
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:57:76:b7:cb:24:8d:24:d7:8b:d7:37:69:7e:12:44:e6:
91:6a:29:43:22:9b:49:8f:94:98:04:5e:73:e5:59:48:69:80:
44:de:af:d9:73:e1:26:b4:83:c7:e6:d2:79:2a:e8:5f:c0:13:
1e:69:d3:56:f9:07:e5:d1:52:fd:66:0b:02:6f:92:fe:3f:60:
92:d7:92:f7:1c:0d:81:fb:c7:5d:e7:34:d0:31:4e:04:a1:23:
8c:b8:db:09:fd:e9:fc:28:0c:d7:1a:88:bc:9e:8c:49:16:33:
d8:92:3b:7f:8b:bd:5d:5e:51:fd:37:2f:d4:85:0b:0d:1a:ee:
65:a4:18:d6:ef:17:f2:b6:68:dd:73:5a:05:a4:da:09:67:c6:
9c:f3:cd:71:34:1e:72:d6:6d:e7:6a:ea:7c:af:e6:c9:f8:5a:
2f:d4:12:07:94:de:58:8e:c3:d8:cf:ee:71:0c:a8:90:a1:0f:
e3:92:3f:b7:49:55:2f:2e:92:29:09:a9:15:59:55:55:4a:a7:
d1:39:e0:59:f1:71:2c:1f:cf:9c:e6:6f:8e:8f:eb:b2:90:2c:
5c:c3:3b:bf:c3:8b:d2:ac:1f:4d:b0:31:0b:07:ff:e7:ff:b7:
db:eb:a5:6f:d1:91:6f:50:5c:63:3a:9a:b2:39:85:81:f2:9e:
f7:e5:0f:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebENCR5lv26jIEy5NOUiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NDc1ZTM0N2FhZjJiNTlkNGVlODUzYThhNTRiNGU0YmQz
NzQ3ZWIwHhcNMjYwNTEyMjMwMTEyWhcNMjYwNTEzMjMwMTEyWjAzMTEwLwYDVQQD
EyhhZmViZTA3NGZkMTZlMmE2MzFmMjgyNjZlZjY0ODM5OGFmOGFkYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/94MjCAvQepGME0BQ1tqGcgrj7
K589pSreAuGoMqa8dUI3RM/yJZ4FQDeMUKP1RvrjdtRRVGTALKdpXC+ju+XwGGkY
TJtMtfqWmVS1mx5PewGlQUXkmDtzoKjt4kTJFmAWpCvF2YS1U6gLrpfJbKM2e8T1
BTsxdcbCglF6HSsl3GAYxwcVq+i+tkBiuZZMsgvqK3S/JRaTpHvlD4lWLOMEFp/W
Bm/nqYxp2IlJgW1kQYFw4ITN4Q6nJZ7XAQn8gnzoNm/UbCsupei8fLJpV0wDBpHz
VrJDZ8KoBJcG8j9fmEn1PUC8a7i822jcwVjYU62w9+NeNsr6C2gfqPcG7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/r4HT9FuKmMfKCZu9kg5ivito5MB8GA1UdIwQY
MBaAFOZHXjR6rytZ1O6FOopUtOS9N0frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQt
YzhjMjBmMjVkZTg4LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQtYzhjMjBmMjVkZTg4
LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHupXdrfL
JI0k14vXN2l+EkTmkWopQyKbSY+UmARec+VZSGmARN6v2XPhJrSDx+bSeSroX8AT
HmnTVvkH5dFS/WYLAm+S/j9gkteS9xwNgfvHXec00DFOBKEjjLjbCf3p/CgM1xqI
vJ6MSRYz2JI7f4u9XV5R/Tcv1IULDRruZaQY1u8X8rZo3XNaBaTaCWfGnPPNcTQe
ctZt52rqfK/myfhaL9QSB5TeWI7D2M/ucQyokKEP45I/t0lVLy6SKQmpFVlVVUqn
0TngWfFxLB/PnOZvjo/rspAsXMM7v8OL0qwfTbAxCwf/5/+32+ulb9GRb1BcYzqa
sjmFgfKe9+UPyA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:21 2026 by rpki-client