Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: XljF/NmMxm5/6B1ZLjKnlJO/q77w+1yoAmKZ84sK6fs=
Subject key identifier: 44:6B:D3:FF:16:77:26:80:42:30:C5:C5:30:AB:E9:AF:EA:5D:67:93
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 019E1CEBFD963607B479F2B0CFF1C1C166FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 16:01:28 +0000
Manifest this update: Tue 12 May 2026 16:01:28 +0000
Manifest next update: Wed 13 May 2026 16:01:28 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: ixesl4YjO7N7g1skTBADtlWJB/GMwIu3yB7bBzpeRd0=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:fd:96:36:07:b4:79:f2:b0:cf:f1:c1:c1:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: May 12 16:01:28 2026 GMT
Not After : May 13 16:01:28 2026 GMT
Subject: CN=446bd3ff167726804230c5c530abe9afea5d6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:25:79:4c:24:4c:69:58:62:40:eb:e5:a0:
0d:7f:0a:d6:c3:05:44:33:a1:4d:92:11:9b:75:21:
f2:e1:9e:7e:44:91:e8:b9:c7:98:7a:04:89:97:e2:
13:4d:d9:03:b1:9b:5f:f6:f1:b9:19:e9:e6:68:c1:
70:ec:aa:6c:b6:c0:f7:fd:43:63:8c:ca:7f:32:67:
ad:dc:aa:65:3d:a3:dd:4b:28:e0:ad:2f:49:47:53:
c9:40:c5:10:e5:0c:1d:e6:4a:d9:c3:0a:61:e0:65:
ab:16:f8:31:33:df:ce:32:68:99:77:3d:bf:51:6c:
33:9d:23:ff:7c:2a:84:8c:92:7c:86:4c:ed:19:ff:
93:06:03:5a:86:d9:60:2c:a0:88:6b:a9:c1:3c:80:
5e:07:86:22:3a:3f:24:d9:1e:53:82:bd:e5:3a:10:
c4:95:ed:22:20:53:d1:52:31:b7:2c:7c:ac:27:73:
c7:7d:fb:d9:ff:8d:8a:9a:4e:a1:7c:9e:59:c7:3b:
09:29:41:71:71:2e:5f:39:73:0e:04:88:cb:c6:36:
0a:c0:0b:2f:bd:2e:dc:75:0f:ea:ea:21:e2:c9:98:
d8:2d:20:96:99:7d:41:9c:2c:61:90:38:52:07:4d:
6b:39:80:d1:2a:fa:f0:eb:17:a1:75:87:bd:3e:04:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:D3:FF:16:77:26:80:42:30:C5:C5:30:AB:E9:AF:EA:5D:67:93
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:a8:ef:53:b7:1b:dc:7c:90:0a:ac:57:9e:6d:67:a2:5a:
bc:91:89:dc:f5:72:ff:74:fb:2d:4b:76:23:4f:8b:33:2a:bd:
05:de:67:45:a0:d7:f1:cd:b8:b7:0f:83:2e:ac:f2:e1:bb:d3:
b3:f1:e5:15:bb:4f:0d:6b:12:70:bf:fb:3d:4b:f8:5b:ea:c8:
90:4b:2b:79:83:b1:ba:70:e9:fd:49:90:8e:41:12:9b:34:eb:
c8:12:b9:14:7b:2e:62:e0:de:f0:9b:5f:46:64:7d:3a:84:d2:
50:9d:59:ee:86:3a:35:c7:69:29:47:08:53:0d:66:26:0b:f3:
33:fd:91:69:d3:e1:fd:a8:d7:fc:7f:66:9c:f1:a9:4c:c5:6e:
49:aa:8e:7c:21:80:5a:30:52:11:ce:13:8c:c1:b2:8f:45:bf:
72:23:74:fb:74:f0:c8:b7:93:31:15:a7:82:37:d8:de:88:4f:
8b:7d:9e:f5:be:18:f6:be:5b:37:87:ca:03:2d:5a:ba:2b:51:
78:1f:34:61:d0:b7:eb:0d:16:3a:a2:02:ae:c3:bd:1b:aa:41:
c6:0b:7d:cd:d6:22:c2:70:e9:94:ee:aa:1d:74:72:82:f3:b5:
08:71:8a:fd:21:c7:af:99:6a:a8:ae:2d:b7:04:1a:3e:77:1f:
b2:97:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:23 2026 by rpki-client