Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
File: G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft (raw, json)
Hash identifier: aA0StkAIzImtmX6BbzVl1/qtwezYcmEXkAOEdTc7kYM=
Subject key identifier: 5F:33:F3:D2:74:06:C8:E7:79:7B:EB:A3:D5:AA:CE:6D:57:02:C2:B6
Authority key identifier: 1B:90:D6:92:29:F8:00:2A:8D:E8:51:DC:CD:5C:7A:5B:65:32:D0:29
Certificate issuer: /CN=1b90d69229f8002a8de851dccd5c7a5b6532d029
Certificate serial: 019F1152EE09E675D607B9EF2A997FEB49BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5DWkin4ACqN6FHczVx6W2Uy0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
Manifest number: 13
Signing time: Mon 29 Jun 2026 03:01:15 +0000
Manifest this update: Mon 29 Jun 2026 03:01:15 +0000
Manifest next update: Tue 30 Jun 2026 03:01:15 +0000
Files and hashes: 1: G5DWkin4ACqN6FHczVx6W2Uy0Ck.crl (hash: a6TsGhMiovK8xqQnCP78luLALKbnIyTCBwnATPPsUXE=)
2: N1o57DnfT2oFAnM7z_VfRSHXswU.asa (hash: 4kXEJtbUJt2sOz8apHoxp+bcWx9DkT4Nyui438kfL1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5DWkin4ACqN6FHczVx6W2Uy0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:ee:09:e6:75:d6:07:b9:ef:2a:99:7f:eb:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b90d69229f8002a8de851dccd5c7a5b6532d029
Validity
Not Before: Jun 29 03:01:15 2026 GMT
Not After : Jun 30 03:01:15 2026 GMT
Subject: CN=5f33f3d27406c8e7797beba3d5aace6d5702c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:4d:6b:00:4e:67:e8:59:b4:08:e7:ce:88:
78:11:70:71:cd:ce:19:c0:ac:2f:22:8e:08:54:96:
ff:60:a0:9e:54:9b:27:f6:8e:ba:50:d3:ee:a9:4a:
ae:77:27:c5:30:f0:7e:d7:ae:8f:ba:55:ee:64:1f:
8a:8d:7a:90:8b:f7:e6:15:6e:21:1d:6d:4e:8e:e5:
5b:53:f1:c5:74:5f:a0:b4:c4:84:39:19:94:7c:6b:
47:65:ea:21:05:f3:60:20:ce:45:73:9b:8c:c3:22:
cc:5a:76:2d:6e:61:ee:9a:8c:44:78:28:2b:ed:64:
ef:34:69:96:ee:6b:bd:39:27:08:7f:2b:f8:b0:2d:
a4:85:cc:50:b3:9f:33:bd:58:07:82:31:80:df:87:
a8:ef:2b:71:9d:c8:e0:79:55:30:26:4e:49:b0:ca:
22:32:b7:70:00:90:b0:a2:dd:2f:03:c4:a3:19:3c:
98:40:3a:ca:35:0a:87:7e:fc:6e:bd:6b:0b:d0:25:
1c:ff:78:52:04:28:d4:aa:f7:c3:e3:43:f8:30:b8:
1e:f2:5f:64:24:5c:d3:5b:b3:8f:5c:cb:6c:44:98:
26:5b:10:db:a3:b2:a6:16:dd:53:3f:5e:70:88:f3:
21:65:16:8f:bd:1e:44:6b:1d:b8:72:4f:1b:b0:44:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:33:F3:D2:74:06:C8:E7:79:7B:EB:A3:D5:AA:CE:6D:57:02:C2:B6
X509v3 Authority Key Identifier:
keyid:1B:90:D6:92:29:F8:00:2A:8D:E8:51:DC:CD:5C:7A:5B:65:32:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5DWkin4ACqN6FHczVx6W2Uy0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/G5DWkin4ACqN6FHczVx6W2Uy0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c1:13:a5:9a:66:76:c4:54:21:78:31:38:ed:ae:45:97:3e:
fb:44:3c:17:d4:67:31:fb:83:03:34:3a:bf:56:0d:72:f2:b4:
43:a9:cb:ff:fb:ac:9e:da:8a:da:39:d5:50:78:59:88:d0:cb:
78:bd:02:a9:2b:8c:f6:92:0b:08:bc:f6:b3:c3:98:7f:b2:6e:
6a:af:43:4b:1e:1d:e6:9a:5e:61:08:88:1c:26:2f:80:ce:f6:
e8:d7:d0:9d:57:dc:c7:3e:91:98:68:fc:fb:d1:78:ff:a5:25:
bf:65:ac:e2:6a:ee:83:c3:c1:cc:ed:03:5a:b8:33:b5:ce:74:
14:c7:d2:da:d3:9a:e9:a5:ed:d5:fb:b7:60:74:74:64:fe:d2:
52:c8:81:83:8e:c5:6c:65:c1:5e:b0:c2:b6:24:46:4b:11:74:
1c:24:7b:82:fb:7b:22:db:e6:9f:86:2e:cd:87:b9:2d:92:10:
39:52:8f:b8:11:1b:81:73:e8:c4:39:9d:58:a9:cf:21:1d:e9:
72:83:72:b6:3f:ee:b2:f0:1a:27:72:21:17:9b:e3:1e:a7:ce:
3a:1e:65:ee:8a:c9:d9:fe:f6:df:81:31:c1:66:67:79:b8:77:
f5:55:07:ac:5d:6d:8d:56:13:a9:3d:6d:23:d9:d6:f4:99:2e:
81:2a:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:27 2026 by rpki-client