
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: +SoFkdua5deiznGP2LZHmfpk9hpWffwa/wCn9dO89Jg=
Subject key identifier: 92:2F:CA:A7:DC:5A:1A:3D:BB:23:85:8D:45:FA:6E:10:93:F0:38:D2
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 019E1D90E427C5E08154799CC7E6CB2BDBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:35 +0000
Manifest this update: Tue 12 May 2026 19:01:35 +0000
Manifest next update: Wed 13 May 2026 19:01:35 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: k1Ox0Wup51CDF8v73qjtLb4tRa50Yc3+yvzVKuYaiGM=)
2: gNOVMDvtvsuQYQ-kPKrR7O_nyMk.roa (hash: wGDnNcGTA78hmdHu6y6oulR3cEsAnWv+5REEurYIAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e4:27:c5:e0:81:54:79:9c:c7:e6:cb:2b:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: May 12 19:01:35 2026 GMT
Not After : May 13 19:01:35 2026 GMT
Subject: CN=922fcaa7dc5a1a3dbb23858d45fa6e1093f038d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:c9:68:2e:cd:05:7c:0b:1c:13:12:52:ad:
7f:fe:f1:23:24:87:89:63:32:11:5c:3f:b5:b9:4b:
79:d5:0b:06:e2:ee:80:9a:25:ff:e2:0a:cd:48:a9:
24:67:a2:1e:2d:a2:69:86:c4:81:c7:8f:5d:9f:c8:
77:86:53:a9:12:e4:b8:a4:ec:eb:24:93:34:81:6f:
a7:b0:bd:e7:a6:36:73:bd:c4:10:88:72:05:7d:69:
67:b0:51:58:33:dd:ed:a9:82:37:31:94:7f:fb:dc:
51:b6:93:a9:45:f2:6f:54:34:74:8a:16:56:19:04:
ed:73:af:e4:f3:0a:6c:74:56:0e:58:15:b9:89:12:
2d:5c:76:82:09:42:bd:7d:d8:92:76:04:bc:8f:0c:
00:7c:7c:3f:3a:4f:89:a4:e4:ac:d0:b8:d9:34:fb:
40:70:99:1e:5d:06:2a:fa:ec:82:85:00:e4:96:53:
d5:42:03:bd:84:9a:e1:7b:9c:b5:51:ae:c4:ff:3d:
3a:05:3f:4b:db:eb:1c:94:ef:06:4d:31:49:8a:94:
41:e2:e1:cf:a6:77:28:3a:0b:8c:55:66:af:eb:bd:
81:fc:a9:b5:7f:bb:e6:81:d4:e4:c0:f1:4f:2a:06:
4d:3b:95:95:16:a3:0a:f9:3b:57:c0:80:f1:45:32:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2F:CA:A7:DC:5A:1A:3D:BB:23:85:8D:45:FA:6E:10:93:F0:38:D2
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f8:86:b9:37:8d:65:7b:09:37:7e:fd:0e:16:ba:e5:05:cf:
05:5e:f3:65:af:1b:6c:d8:e9:98:60:4c:b0:56:c9:2a:5e:25:
b0:cb:3f:65:75:03:84:20:f7:d0:55:9e:27:51:05:4f:70:fe:
dd:ef:d3:fb:6c:16:33:9d:10:24:39:b4:c5:6b:fe:b5:65:0c:
75:de:f3:1d:57:c9:bd:2d:71:5b:64:39:5f:5f:b6:d0:a1:3a:
4d:03:af:49:5b:77:7f:bf:d0:73:a7:d9:8b:12:9d:e4:75:f7:
d3:1f:88:5f:d9:a6:ee:5d:9f:47:25:c2:0d:73:55:e5:ef:9a:
9b:5d:fa:61:e3:d0:33:1e:6d:c4:ee:59:a5:bb:cb:fc:9e:5e:
1d:01:79:f4:2f:66:a6:dd:b8:07:9e:ea:86:4a:a9:88:b8:bb:
c2:16:ce:9f:ba:eb:ba:b7:8b:e4:38:3e:06:79:c7:57:50:92:
21:7e:04:14:23:b7:c4:c6:d8:31:f2:13:af:0d:a1:86:f9:a8:
dd:4d:49:fc:40:2a:ce:73:32:83:7b:53:c6:5d:10:65:f8:8e:
0b:ea:00:81:87:2d:91:e3:aa:f7:cb:79:7d:3d:08:d1:2b:b0:
91:b3:50:c4:97:6a:ac:aa:5c:0e:13:9a:b4:e0:41:e8:41:e1:
ef:18:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:41 2026 by rpki-client