Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: ZHj2QUgahLYhhiodyqe2FnXtxbfFku5u1eFt4PlS3M8=
Subject key identifier: 9E:83:73:CD:8D:2F:77:CD:7C:C7:B6:50:E7:4B:F9:98:4A:19:B1:1E
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019EEDB4D3C0F4CEC5229C08F6792BF266F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 05DB
Signing time: Mon 22 Jun 2026 05:01:51 +0000
Manifest this update: Mon 22 Jun 2026 05:01:51 +0000
Manifest next update: Tue 23 Jun 2026 05:01:51 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: r/DUh3RJEkv5OEWblhsX3mOCHJdtQR9KCvZxh44A+WE=)
2: O12iTFYfdA2zCw72150Nud1E6y0.roa (hash: z5mYMpvdZLPaUzxNIg/54hb62dd6baAvlEXsN8ohQB8=)
3: _fFHLP85mXG233c_oo6_tp_deIs.roa (hash: n25U7OP6QQrrsEGd6Mi0uXlEH7hkC7fcd6BN0xsYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:b4:d3:c0:f4:ce:c5:22:9c:08:f6:79:2b:f2:66:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Jun 22 05:01:51 2026 GMT
Not After : Jun 23 05:01:51 2026 GMT
Subject: CN=9e8373cd8d2f77cd7cc7b650e74bf9984a19b11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:8a:8a:55:f1:59:b7:34:42:6a:9d:7e:db:
68:4c:23:52:b3:70:77:f0:fb:45:01:7c:91:1f:9a:
01:2c:4e:23:4d:ac:5c:6b:16:0f:ee:39:b1:a0:16:
c0:c8:3b:57:09:b9:9a:c4:c8:29:6f:28:50:1c:d1:
95:90:bb:a2:aa:9d:74:55:a1:1e:31:4d:33:ec:5c:
e4:cb:4c:18:a7:1f:2f:e4:9a:a5:d3:71:a9:e5:f8:
7e:d9:56:5d:d0:6f:4a:91:75:12:f6:60:77:e1:60:
eb:54:ac:d6:28:eb:18:38:61:bd:bb:6c:c5:1b:e4:
e1:e4:73:95:15:12:32:79:6c:97:71:74:fa:e6:e4:
e5:f8:59:0e:18:80:9e:48:71:b7:90:9e:e6:96:8e:
71:90:cb:75:85:98:b8:dd:c4:61:25:94:68:46:db:
9a:af:23:ca:73:53:67:9d:94:11:e5:2e:6d:87:27:
fe:f1:bc:43:e6:9c:d2:a5:8b:2e:5f:41:62:78:3b:
33:db:e2:35:9a:27:ec:05:9d:96:f4:47:92:50:56:
8d:9f:78:76:f6:d6:2e:42:7b:ce:03:13:4e:f4:e3:
6e:dc:80:cd:4d:81:a2:7b:1c:d8:c6:ca:8c:98:25:
90:eb:55:5c:97:eb:84:19:14:78:9a:f0:21:dd:c3:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:73:CD:8D:2F:77:CD:7C:C7:B6:50:E7:4B:F9:98:4A:19:B1:1E
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3c:b4:4d:d8:b2:a3:55:59:95:33:89:ea:e7:42:92:06:10:
6f:ec:34:4e:f1:b8:56:0d:a3:ad:80:61:95:7a:bb:16:fd:7c:
f8:fe:9e:ac:f8:2e:14:fe:80:4f:5d:26:a1:ab:e0:cd:bc:6f:
dd:35:b7:7a:79:ea:3e:40:8d:d4:6a:d7:e4:03:5b:b3:6a:f5:
dc:44:fa:e3:b1:97:18:96:1a:1d:fb:bd:83:78:5f:f0:58:27:
95:44:04:45:00:63:fd:e1:0c:cf:89:a8:33:3e:7a:b1:5f:df:
8c:a3:f1:af:4d:85:6a:7a:11:6d:b8:ec:61:49:a6:51:75:63:
80:a4:21:f3:68:46:37:74:36:7a:b2:d9:89:df:57:68:36:44:
ff:49:f4:5a:7e:87:2e:48:4f:68:06:a0:f6:c7:2f:34:58:97:
bb:a6:64:d3:fd:28:28:2f:74:8f:0e:7d:33:6f:4e:e6:fe:31:
75:10:40:b5:cc:8e:12:9b:59:a5:78:3c:43:17:1e:b5:31:d5:
d9:24:c5:36:45:31:56:ae:ab:38:a3:60:5c:93:ab:a5:f4:8f:
9e:70:4f:f2:4f:20:f4:31:dd:f6:87:e8:72:e8:bc:11:5b:e0:
8b:07:32:8f:01:89:2e:88:3b:a9:4f:b1:f4:4b:65:f1:93:80:
1b:a7:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 15:24:17 2026 by rpki-client