Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: bExRblbTwJZAMkGZ59aj5a8asDo3mrn3vP9tOCJBaKA=
Subject key identifier: 9A:12:98:B4:DE:A7:66:AF:D3:06:22:AF:94:94:48:9C:89:FB:55:7A
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019F189E1307A4139D71C59EF8C4ECE798AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0EAA
Signing time: Tue 30 Jun 2026 13:00:40 +0000
Manifest this update: Tue 30 Jun 2026 13:00:40 +0000
Manifest next update: Wed 01 Jul 2026 13:00:40 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: HF0hpJf59yCVvGzt9h0etRQSfPrHj1qptIt8enrahMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:13:07:a4:13:9d:71:c5:9e:f8:c4:ec:e7:98:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jun 30 13:00:40 2026 GMT
Not After : Jul 1 13:00:40 2026 GMT
Subject: CN=9a1298b4dea766afd30622af9494489c89fb557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:ef:64:15:87:e8:60:75:86:e6:c9:c7:01:
d6:02:c9:ad:4e:00:e9:39:c0:6b:51:50:28:f0:81:
83:b7:5b:30:8e:b1:85:89:c4:dc:4a:f5:71:7e:98:
10:79:9c:ef:3e:eb:81:f8:a6:d6:64:94:dd:33:fb:
5a:8e:64:99:13:81:2e:f3:67:f3:59:d8:a1:10:4f:
ad:bf:07:c3:5e:d9:a6:9f:a3:c6:27:9d:9a:34:82:
7f:51:1f:3a:04:56:ad:15:e2:77:b0:04:e6:f9:5b:
e1:6a:c9:4c:99:71:2f:20:c8:20:87:d9:e0:11:df:
df:8f:c3:c6:a2:c2:cf:f7:c2:1b:c2:a3:72:c8:60:
c0:62:cf:aa:44:b4:9b:9e:0c:c4:45:23:d4:36:46:
c2:3e:d9:24:7f:ea:20:79:5a:c9:29:50:9f:0d:14:
f7:83:4e:3a:5f:e6:2e:0a:85:28:d0:27:7d:d1:ab:
1e:bc:8f:27:bf:75:63:01:2e:7e:6e:14:a8:b6:12:
c2:41:84:2d:f0:b5:27:12:97:d0:7c:f7:9e:84:61:
01:b4:2e:49:49:c2:c5:0a:c0:93:d2:86:b3:17:e7:
3e:e7:37:94:55:a8:54:12:aa:c9:9d:28:28:a9:cb:
d7:72:76:e1:29:30:0f:31:4f:3d:3f:fb:e5:88:d1:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:98:B4:DE:A7:66:AF:D3:06:22:AF:94:94:48:9C:89:FB:55:7A
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:3f:f4:91:e6:01:95:dc:e0:d8:54:8f:e5:60:1a:17:9d:
46:17:8b:ca:9e:fc:60:ba:17:04:c5:5f:9d:64:89:9c:20:91:
a7:66:42:95:dd:c1:b0:a9:95:3a:eb:73:31:4b:8a:12:d0:11:
aa:cb:59:2c:8e:60:16:6c:ab:b7:f1:db:5b:69:db:b1:77:b5:
68:4c:a7:39:17:f8:15:4e:dd:be:f9:db:c3:bb:5b:da:28:f5:
47:7b:49:53:29:61:98:93:ee:7d:65:d2:2e:28:dc:62:b4:c9:
ad:d5:a1:57:9a:66:3d:6a:0c:cd:56:2d:1b:80:01:25:2e:3c:
4b:cf:c2:a9:3d:4e:1e:b2:69:6a:cd:ae:c6:14:55:82:a1:c3:
5d:3a:47:f6:30:6d:85:82:62:f2:09:f6:38:51:38:e4:5f:1f:
4c:24:ba:a3:7b:fa:c0:ca:a2:7d:b6:eb:a4:82:8c:bb:c6:dd:
49:94:54:6b:32:45:15:dd:1a:b9:e6:70:9b:ee:b8:f6:18:c0:
3a:3a:57:92:26:12:91:d4:93:25:49:7b:2e:62:fa:47:f8:ea:
26:8e:0f:da:d1:a1:9b:f6:fc:4d:cd:14:fe:3f:60:b9:e0:c9:
02:d9:18:fd:80:66:12:e6:dd:22:40:82:bb:8e:3c:1c:e0:87:
4c:b3:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:47 2026 by rpki-client