Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: 0ubi1AyzyC7fiNPmTdQPSabTuH6GZoe6jftAbTBFOQ8=
Subject key identifier: E3:62:1B:EE:03:5E:7D:CC:97:47:39:BC:CD:D7:3F:0D:F0:EE:AC:0F
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019E1D907EC56DA4DCF1FB57CF8DF81F8681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: 5X0+4/uVNCYQAr5GxeUmwAev7KOhuPd0rSU8747S+DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7e:c5:6d:a4:dc:f1:fb:57:cf:8d:f8:1f:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=e3621bee035e7dcc974739bccdd73f0df0eeac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:5d:04:5b:cf:04:eb:76:81:ba:42:87:b2:
7c:af:72:0a:48:89:f8:56:49:1c:6d:1b:f4:1b:82:
1d:23:7d:8b:4b:4b:6f:a6:14:13:4a:5c:8b:0c:77:
ce:c7:9b:0b:60:07:94:02:93:2d:b8:92:22:b2:1f:
18:b2:05:3a:0e:b6:82:7f:d7:f1:e2:6b:da:4a:14:
6f:fb:8b:53:0c:0a:e2:8c:51:8d:eb:73:38:d5:f9:
6f:eb:45:21:b7:8c:9c:f1:ed:93:63:56:48:bc:89:
f1:a8:d8:f4:cb:20:69:24:cd:15:c8:93:1a:40:58:
66:7b:12:60:8b:b8:12:5d:d9:52:95:45:6c:4e:93:
43:76:a6:16:7e:ec:ec:50:86:99:0b:83:a0:f0:92:
48:4f:3c:8d:90:76:16:71:b7:fa:f0:7f:76:6c:5b:
c0:07:81:11:21:00:be:bf:4c:e7:63:69:4b:56:2b:
bc:b5:a3:dc:78:d0:31:2a:dd:25:6e:76:26:58:9a:
79:4f:35:00:91:69:e1:63:c0:f3:0f:3a:8e:3f:cb:
dc:7e:30:0d:d5:f8:cb:53:ba:43:b9:a3:12:aa:5b:
74:8b:f9:17:b4:92:f4:0a:97:e3:ac:0b:9a:d1:65:
ae:fb:67:07:bc:ae:41:31:57:3f:29:2a:66:8a:84:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:1B:EE:03:5E:7D:CC:97:47:39:BC:CD:D7:3F:0D:F0:EE:AC:0F
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:08:e8:a9:1a:ef:b8:50:88:4a:1f:37:a1:e7:91:02:dd:
a7:4d:9c:d5:fd:cb:7e:76:e3:1c:0e:90:ed:ff:f3:df:1f:44:
1e:31:0b:1e:57:91:54:50:67:e6:70:2e:c8:33:4b:88:40:fd:
bb:b9:80:e9:c4:58:e4:d4:9a:80:24:d9:17:45:09:30:06:0a:
74:59:3a:d8:5c:39:92:25:94:e2:ce:92:23:41:34:f8:fe:d1:
c3:fa:40:22:ab:b6:54:20:91:8f:23:c5:a6:9d:59:91:0c:1e:
3a:a8:24:39:f6:e4:58:d4:8f:80:96:65:e5:dd:64:2a:6e:24:
48:e6:3b:74:7f:fc:6b:dc:a8:12:3a:4d:87:68:75:30:a7:bb:
4f:97:d9:c9:0f:1c:3d:08:4d:b7:1a:b2:4a:13:d0:b7:dc:b0:
15:9d:1d:83:53:a4:7d:41:38:72:23:01:b3:da:c7:72:c5:4c:
f3:7b:4f:68:dc:81:bd:2d:4a:92:70:07:7b:ef:2d:6e:8d:24:
21:7b:67:97:65:9c:e2:55:20:f7:a2:c4:af:0b:bd:4f:02:ca:
43:7e:71:29:63:d8:2e:97:fb:a1:5f:dc:81:17:3c:1e:68:d6:
2b:68:1c:3a:44:15:8a:11:b8:8f:02:fe:ea:d6:8c:b8:31:73:
c0:67:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:58 2026 by rpki-client