Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: K5s160btcee+NfQBhkTBa8bMuuZ5TsJ94yxp11Ep8pA=
Subject key identifier: 38:63:20:E8:7E:2F:7F:38:13:A0:18:F2:5D:36:91:42:9F:0B:E7:20
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019EE77AE3DB2398600C57EC55A9F994FE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 09FA
Signing time: Sun 21 Jun 2026 00:00:50 +0000
Manifest this update: Sun 21 Jun 2026 00:00:50 +0000
Manifest next update: Mon 22 Jun 2026 00:00:50 +0000
Files and hashes: 1: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: pmqOfBhr6PUdKco1VCSKPMsA8am4x82poG5eGgo0MGs=)
2: eTB20vbuw0ColRTbhpUzLeqy0n0.roa (hash: KC01L3zZWRaOvr8WRrIfqvZndCj/RMYJlTwl8jE/MI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:7a:e3:db:23:98:60:0c:57:ec:55:a9:f9:94:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Jun 21 00:00:50 2026 GMT
Not After : Jun 22 00:00:50 2026 GMT
Subject: CN=386320e87e2f7f3813a018f25d3691429f0be720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:24:eb:51:23:39:60:a7:d8:5f:65:59:9d:
30:f5:74:71:56:c6:cc:7b:cf:af:53:e5:d4:52:d6:
f7:ae:9d:f9:1a:31:d6:8a:4b:ec:10:51:d5:d9:fe:
8d:d9:d7:d9:b2:72:c0:4d:30:c6:b8:19:5f:93:54:
12:f8:6f:43:3e:3c:09:18:3a:3f:e0:4c:9d:ba:b9:
f2:9f:c5:9d:2c:b1:81:27:cf:cb:17:3b:06:df:47:
51:ff:79:7f:dd:7e:89:e3:a3:42:97:29:97:00:78:
a0:52:83:49:ca:99:fb:d6:f6:68:d3:39:20:09:07:
94:07:67:be:a0:6e:16:08:b3:f4:bd:cc:df:5a:e7:
59:d2:f6:d4:50:20:3c:ce:b5:48:a6:28:73:18:eb:
e4:cb:5d:4c:f5:08:22:ee:f4:4e:3a:f4:00:bc:ff:
ac:54:de:e1:e9:ce:91:0a:20:cf:26:32:e2:62:03:
25:a0:d5:74:39:91:7c:75:48:1e:af:d1:a4:eb:ad:
ce:a2:77:f5:42:a4:3b:0d:22:3b:a9:5b:8f:f7:cc:
be:e0:c8:82:9b:f1:65:90:fa:2f:a7:41:56:cd:21:
cf:b3:af:1c:f6:38:6d:8e:fd:45:fa:d1:d4:fc:2c:
9f:38:56:27:cc:96:c0:08:08:48:43:46:f3:e0:6f:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:20:E8:7E:2F:7F:38:13:A0:18:F2:5D:36:91:42:9F:0B:E7:20
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4d:58:aa:26:77:e8:06:f5:5b:06:e1:9f:99:e4:4e:4a:e5:
14:89:a1:86:ed:4d:6a:28:a6:e0:83:a0:3b:09:80:17:88:f6:
08:65:60:e2:65:54:8c:ab:51:10:3d:84:32:14:2f:5f:3e:61:
3e:a8:c5:63:54:32:b7:ee:46:03:d1:fe:8a:12:e6:3b:77:12:
49:d2:ca:57:79:07:b0:32:e5:81:13:e9:ee:27:1e:f1:73:72:
c6:81:83:ff:d3:f1:ab:00:4a:0b:28:91:a6:eb:1f:5a:e7:b7:
e0:00:15:3e:07:96:20:7d:2b:b3:2a:9d:de:60:c2:9c:82:3c:
d7:4c:c1:42:44:e5:02:f8:17:de:17:bb:87:79:93:86:82:12:
3d:80:a3:04:50:c4:e7:6f:c9:e9:0c:f6:02:fc:43:4a:35:a3:
90:b2:9f:ae:87:ba:c6:70:62:d3:74:5d:97:66:dd:88:4c:f0:
3b:cd:c8:f3:0d:45:b7:fa:bd:ca:a7:95:b8:1a:22:1c:e5:2d:
dd:f1:cf:cc:44:4d:c0:84:b9:1f:de:6a:94:2c:b9:83:04:0a:
b0:8f:0e:17:45:2c:52:42:6c:87:30:02:e7:9c:76:48:05:c7:
3e:f9:3c:81:64:93:e9:00:15:dd:a8:f3:23:75:00:89:a9:60:
9c:68:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:56:55 2026 by rpki-client