Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: lYNdMghr5ST2q2ozjb4GC2uzHCmDpaXGYrrhifyWHNA=
Subject key identifier: 1A:6F:44:DD:65:E9:A4:A4:C5:AD:25:F5:50:81:50:50:E0:13:4B:32
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019F189E4FFB60AF3E5B15A3E823CCEFD8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 191B
Signing time: Tue 30 Jun 2026 13:00:56 +0000
Manifest this update: Tue 30 Jun 2026 13:00:56 +0000
Manifest next update: Wed 01 Jul 2026 13:00:56 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: SWGEM9f8zPmk9GEhQgvGVEPD/2SPigaBbUha9J2TuSk=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:4f:fb:60:af:3e:5b:15:a3:e8:23:cc:ef:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jun 30 13:00:56 2026 GMT
Not After : Jul 1 13:00:56 2026 GMT
Subject: CN=1a6f44dd65e9a4a4c5ad25f550815050e0134b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:2c:d7:71:6d:e1:df:29:9a:d0:1b:11:42:
8a:1a:e1:ac:8c:60:fa:4d:10:87:78:e9:1e:95:2b:
bb:c3:d7:6e:fe:13:b0:d4:a4:f5:5c:9c:bc:2f:6b:
37:9a:04:47:2d:88:f7:a4:6b:81:e4:cc:67:bc:ed:
58:df:1a:f5:9d:81:14:32:23:cd:b9:6b:e5:38:18:
0b:25:0f:c7:bc:28:5d:2a:ad:2c:c5:2c:ed:39:db:
62:7e:13:41:04:88:c3:c8:fb:08:5d:b2:fc:e5:53:
96:ff:80:ea:3e:bd:d1:05:91:0c:39:c1:0f:8e:b3:
18:f0:71:5b:60:c3:e3:90:1f:19:a4:f3:6a:fc:47:
e5:30:d2:de:8d:6c:c7:f6:b6:fe:60:ff:51:dc:19:
84:78:dd:42:d4:b5:d5:46:82:7c:d5:09:63:94:b6:
a2:70:de:bd:cf:4a:55:bf:4b:a4:16:0b:6d:30:87:
c7:bf:32:eb:12:4c:47:5d:58:41:0f:a0:a6:0a:d4:
24:fa:6b:8e:a1:cb:f6:28:5e:1f:44:c8:56:09:75:
ac:18:8c:37:6a:1a:03:da:82:e8:d7:cf:b2:c1:e6:
ef:81:51:65:04:c2:29:f6:7b:db:54:32:aa:03:cc:
19:e3:22:13:4f:dd:66:cf:6d:5e:db:ea:5e:1e:0f:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:44:DD:65:E9:A4:A4:C5:AD:25:F5:50:81:50:50:E0:13:4B:32
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:93:ec:cd:0f:ac:3d:e9:c3:da:ad:1d:f7:14:ef:52:f7:
30:a7:a9:f8:19:17:7f:4b:8f:08:f9:df:e1:46:97:94:87:77:
0c:4a:0e:6e:5c:3b:fc:f0:99:78:fc:d5:59:e5:04:4d:d6:ca:
4e:93:e6:dd:56:8e:fc:8b:cc:b1:70:dd:16:02:1c:75:76:34:
8b:51:6c:9e:8c:6b:21:b9:6b:98:78:2d:b4:6b:e2:53:f1:7b:
fe:80:67:22:d0:92:e7:6a:4a:c6:1e:cc:2d:e9:90:bb:e3:f8:
e9:2b:9f:c6:16:77:36:fd:b8:aa:eb:01:a6:4f:1d:9d:39:39:
47:57:60:01:16:ee:d5:74:a1:5d:20:26:1a:55:b4:64:78:a1:
c0:46:ae:ca:a9:b1:d0:26:e9:28:3a:36:95:f3:aa:22:6d:86:
24:d4:ea:e3:44:ce:21:91:8b:19:31:17:60:45:3b:75:5a:69:
59:29:65:46:be:0d:fe:8b:2a:6b:44:33:15:86:3d:6e:27:bf:
2c:e4:d4:13:5b:2f:cf:60:64:8a:32:2d:cc:3d:62:ec:a9:f4:
9c:ae:8e:1f:05:cf:cf:26:77:90:14:1d:0b:6f:5b:0e:d9:9a:
49:93:1a:cb:d1:2f:73:48:35:e1:e8:d3:d1:30:8a:26:91:ca:
05:45:26:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynk/7YK8+WxWj6CPM79irMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjYwNjMwMTMwMDU2WhcNMjYwNzAxMTMwMDU2WjAzMTEwLwYDVQQD
EygxYTZmNDRkZDY1ZTlhNGE0YzVhZDI1ZjU1MDgxNTA1MGUwMTM0YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMws13Ft4d8pmtAbEUKKGuGsjGD6
TRCHeOkelSu7w9du/hOw1KT1XJy8L2s3mgRHLYj3pGuB5MxnvO1Y3xr1nYEUMiPN
uWvlOBgLJQ/HvChdKq0sxSztOdtifhNBBIjDyPsIXbL85VOW/4DqPr3RBZEMOcEP
jrMY8HFbYMPjkB8ZpPNq/EflMNLejWzH9rb+YP9R3BmEeN1C1LXVRoJ81QljlLai
cN69z0pVv0ukFgttMIfHvzLrEkxHXVhBD6CmCtQk+muOocv2KF4fRMhWCXWsGIw3
ahoD2oLo18+ywebvgVFlBMIp9nvbVDKqA8wZ4yITT91mz21e2+peHg+sqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpvRN1l6aSkxa0l9VCBUFDgE0syMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsCT7M0P
rD3pw9qtHfcU71L3MKep+BkXf0uPCPnf4UaXlId3DEoOblw7/PCZePzVWeUETdbK
TpPm3VaO/IvMsXDdFgIcdXY0i1FsnoxrIblrmHgttGviU/F7/oBnItCS52pKxh7M
LemQu+P46SufxhZ3Nv24qusBpk8dnTk5R1dgARbu1XShXSAmGlW0ZHihwEauyqmx
0CbpKDo2lfOqIm2GJNTq40TOIZGLGTEXYEU7dVppWSllRr4N/osqa0QzFYY9bie/
LOTUE1svz2BkijItzD1i7Kn0nK6OHwXPzyZ3kBQdC29bDtmaSZMay9Evc0g14ejT
0TCKJpHKBUUmJw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:09 2026 by rpki-client