Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: 2haXlUSwKrVSLS7KCV+A3UEtqfoubu0rUxEIFDbY6vo=
Subject key identifier: 22:0F:34:A8:D6:5C:D0:D0:AC:81:21:F9:37:84:51:06:D9:59:91:DB
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019E1E6C075A899601E8A8275CB2820FD20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0F04
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: CEiUvcrxgR6zq//HzufYv3IYqJze9Lw42nuDxaqTd2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:07:5a:89:96:01:e8:a8:27:5c:b2:82:0f:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=220f34a8d65cd0d0ac8121f937845106d95991db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:0b:17:94:cb:64:c2:03:0b:a6:59:55:74:
46:8d:7f:e3:5c:b0:2f:ef:8d:b9:7a:42:1c:df:11:
25:fe:12:93:f4:f8:37:d4:48:6c:ee:34:68:9a:fa:
82:53:c6:54:12:fd:6c:46:39:1e:8c:9d:36:b6:b0:
85:2e:f6:c0:53:a9:bd:09:14:5b:64:90:c4:30:f9:
9d:aa:62:c4:df:8b:7b:b6:7b:19:45:58:93:bf:22:
fe:d5:fa:25:22:44:d4:a0:01:6b:9a:99:57:f5:19:
4e:af:c1:d2:23:22:f3:fd:7a:c7:07:8a:8b:15:bf:
7e:c8:d0:bb:5f:fe:1b:34:e3:43:a5:9b:a0:ec:13:
7c:e3:cc:ff:80:9f:4b:33:6f:14:fb:f9:b2:dd:9c:
48:e8:55:25:c9:ca:aa:cb:e1:64:75:15:93:54:0c:
9b:ef:6b:31:2e:06:f7:af:ee:fb:1d:3a:21:a7:35:
63:a8:9c:7d:c7:76:97:94:3a:cb:68:bb:fb:e6:b5:
51:50:02:1d:c5:50:ac:fe:a0:ca:45:a7:fe:bb:d3:
a3:f6:60:87:0d:bd:c0:ac:a7:bd:60:18:9c:80:88:
86:19:6c:49:f6:28:6f:fa:ea:79:29:aa:82:20:ef:
c1:0e:21:14:b4:f9:5b:1f:79:75:5d:91:5c:29:9a:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0F:34:A8:D6:5C:D0:D0:AC:81:21:F9:37:84:51:06:D9:59:91:DB
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:62:1a:de:8a:f7:a1:f3:b6:7c:74:60:50:88:a0:90:6b:03:
0d:45:56:8a:23:fc:4a:f2:77:48:c4:b7:6c:7c:53:39:9f:84:
e6:80:57:ac:30:49:63:c1:4e:b1:0b:2d:47:39:92:ab:4e:16:
1e:e8:a2:7e:68:ba:83:bb:45:61:e2:93:43:65:ed:84:d1:39:
70:b4:93:45:41:7f:cb:95:81:42:cc:79:6b:35:d3:eb:66:63:
37:4a:2e:ed:14:05:c8:c5:f3:aa:0c:a2:16:ab:5a:d7:26:b3:
80:12:75:b9:c5:3c:a4:21:3c:5c:c1:ec:26:7a:6f:c8:84:4f:
d5:a9:ad:5c:45:11:58:ce:82:7e:46:5c:90:84:94:ea:3d:9b:
b1:1b:27:c1:15:78:f8:9f:23:a1:f1:9e:1d:83:d7:1c:05:65:
74:78:e1:c1:d8:32:60:53:5e:e9:5a:59:6a:eb:ed:2b:db:51:
eb:d2:ee:ae:0a:8d:2c:e3:98:54:b3:b6:ad:e0:17:91:46:ab:
64:0c:0d:1a:41:3a:ff:c2:2f:9b:24:ac:ba:a0:cd:b2:29:53:
f2:73:a2:97:da:e5:6a:6b:98:33:b4:c2:ec:36:ba:45:54:60:
60:c2:c7:c4:4b:0e:15:f5:6d:35:a8:48:d1:2e:97:10:9c:41:
3b:4a:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:52 2026 by rpki-client