Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: ODnNjM8/Yt1mRZr1VjAAm/wvb9M7W86zNFPwVfCiTEA=
Subject key identifier: 7A:E3:13:A3:FE:B2:AA:2A:F3:D6:E6:16:BB:76:2A:C1:22:C9:E1:F3
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019E1CEB602F064F7D6E9F19A0030115A8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 05E9
Signing time: Tue 12 May 2026 16:00:47 +0000
Manifest this update: Tue 12 May 2026 16:00:47 +0000
Manifest next update: Wed 13 May 2026 16:00:47 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: NGppGmYx7OfukYreoZ3HK/WJFPf282CvQ4X/Rlv0JRM=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:60:2f:06:4f:7d:6e:9f:19:a0:03:01:15:a8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: May 12 16:00:47 2026 GMT
Not After : May 13 16:00:47 2026 GMT
Subject: CN=7ae313a3feb2aa2af3d6e616bb762ac122c9e1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:24:be:2f:17:64:f2:1d:d6:18:7a:6d:de:
d5:49:79:23:47:b9:5d:a3:ec:97:08:78:d9:bd:c6:
d2:7c:76:aa:32:3a:fc:7c:a3:c8:7b:1d:28:5b:52:
b7:ba:ea:5d:f4:ca:f8:6c:01:01:17:ab:ff:02:ec:
be:ac:ce:87:74:ad:64:d2:de:fe:fd:37:ba:bb:62:
9d:ec:ed:9b:54:80:ea:e4:cb:2c:3e:ba:ba:72:f1:
df:1f:b6:eb:a0:77:ec:97:9c:58:51:b8:d6:c3:e1:
89:53:44:84:be:96:58:3c:7e:e6:c3:f3:8e:98:35:
72:23:de:03:e7:3b:3a:5d:74:64:35:94:fe:19:46:
62:22:a6:fc:b1:10:08:58:87:36:64:54:c8:46:97:
4a:1b:6c:04:31:19:00:9c:93:f0:95:06:ed:23:9f:
97:78:e8:d9:d2:f9:75:53:fd:2d:ac:31:5a:1e:a4:
b5:89:e8:ab:10:23:42:de:89:57:11:f7:5f:70:f8:
b9:99:22:45:e6:79:23:7b:22:ec:97:80:c4:c4:fc:
fe:a8:e1:42:c3:82:12:aa:b0:d9:02:fc:1a:bb:e3:
12:04:47:12:6a:9c:3a:a9:b5:59:93:50:45:79:07:
0f:d1:c8:56:c2:08:31:44:1f:79:9b:8d:a0:5d:12:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:13:A3:FE:B2:AA:2A:F3:D6:E6:16:BB:76:2A:C1:22:C9:E1:F3
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e0:a0:d5:fb:0c:60:77:40:6c:74:6e:94:f8:3a:79:c7:61:
27:61:57:3d:e3:c4:c9:55:ff:d1:d1:a2:7e:f5:90:3c:2c:8f:
72:d5:fb:91:71:b7:ba:03:00:4e:c3:70:50:d2:ec:be:cd:8a:
f0:ac:83:e1:63:bc:91:b0:1b:88:11:c2:00:38:c0:15:26:0e:
68:9c:d3:32:fc:a0:97:e7:41:aa:19:db:6e:84:83:75:b9:01:
83:3b:fb:3d:62:b4:54:c1:c4:4e:44:10:77:66:4b:bc:bb:fe:
38:53:7a:52:c5:da:48:8e:89:9e:e3:7f:9b:b1:b9:fa:46:61:
98:ba:b3:8c:d5:cb:b9:64:f5:55:c2:5c:bf:55:70:32:9a:45:
6d:2a:63:65:10:06:64:39:d9:66:ee:04:26:ff:31:59:36:fb:
ce:7d:d4:f1:87:c4:77:2c:47:cf:b1:80:98:7d:e7:20:58:5e:
c8:86:bd:10:a3:0c:6a:e8:e8:9d:70:df:8d:98:4e:89:0a:a8:
ef:c8:3d:75:5c:c3:41:77:ce:71:70:33:c9:80:6a:d7:8e:ff:
3f:2f:7e:f2:a4:2c:d5:e0:67:f9:b4:48:58:63:99:64:d6:5d:
93:e3:73:28:a5:f4:3e:a2:6a:e9:b8:68:cb:57:65:b0:58:d1:
91:2c:51:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:09 2026 by rpki-client