Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: Z+YbrDjP9tj90a/GahraqHbImkXSgaGQ61My6aglCwY=
Subject key identifier: 32:60:71:FF:76:9A:AB:F6:7F:C8:8E:5A:B5:A7:6A:CA:21:3A:3B:A2
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019EC74B7B145C8240C1B845414BE4921E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 195E
Signing time: Sun 14 Jun 2026 18:01:13 +0000
Manifest this update: Sun 14 Jun 2026 18:01:13 +0000
Manifest next update: Mon 15 Jun 2026 18:01:13 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: KLdfr+hgDLW6Lolc7DaszKtHQWt/+bwbIFCytSVqBCo=)
2: 8nPl3AcrOpCxoPHI-yYhk20Z4jo.roa (hash: xYCGhk8KRGNgVElrhL//wuDH3rNsau4dVCz023td3io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:4b:7b:14:5c:82:40:c1:b8:45:41:4b:e4:92:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jun 14 18:01:13 2026 GMT
Not After : Jun 15 18:01:13 2026 GMT
Subject: CN=326071ff769aabf67fc88e5ab5a76aca213a3ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:cf:10:d2:08:7e:02:8d:ae:ba:9b:0b:59:
84:f3:dc:e8:00:80:7c:8e:56:05:da:ee:0b:ed:f8:
c6:83:c9:13:b3:a6:62:80:43:1d:3f:ce:59:7d:5b:
20:cf:94:5f:55:d6:8d:85:b5:ba:ad:02:52:37:6d:
ea:6a:de:77:12:5e:2b:ce:49:58:91:03:e6:d2:30:
6a:e9:fa:ad:b2:0c:a0:8e:2c:cd:e2:a6:56:7f:26:
d7:9d:25:8b:f8:fa:96:c1:dd:c6:d1:5b:6a:51:eb:
8c:05:4c:af:ce:47:cf:c8:9f:31:69:29:f9:f8:87:
27:5a:4f:b6:de:18:46:6e:cb:27:30:db:2a:d7:e2:
62:7f:7f:6e:4c:3b:b6:3d:67:73:05:41:73:79:3a:
7a:1d:c1:7a:05:2d:df:e9:0e:3d:17:d9:be:cc:27:
cb:f9:1d:26:ad:ff:22:64:81:03:d5:4d:fa:e3:e2:
8c:06:96:51:64:56:4e:81:b6:47:3d:89:8b:a6:ba:
94:16:c8:ba:da:ed:8c:b4:de:fd:63:8f:e0:02:21:
26:01:dc:d4:31:1d:cc:e9:21:ab:18:2e:68:1d:9c:
93:da:df:8b:82:cb:be:54:7b:1d:50:ab:34:3e:7f:
0e:8d:3a:93:76:00:02:cc:57:06:c8:26:51:b4:dc:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:71:FF:76:9A:AB:F6:7F:C8:8E:5A:B5:A7:6A:CA:21:3A:3B:A2
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:45:5a:fb:aa:9a:c3:6a:b8:b4:da:2b:46:3c:f6:34:7d:dd:
57:e8:92:05:5a:84:c3:06:bb:fb:e9:2a:b4:bb:ef:fe:5a:02:
ad:01:75:ed:33:50:18:eb:14:13:d3:7b:ee:1c:54:16:05:fb:
87:c1:b0:4a:91:3a:dd:4f:3f:4a:4d:71:a3:e1:40:49:8a:8e:
8a:5d:ef:77:fa:38:11:70:9e:3e:24:86:63:2a:6a:44:48:1d:
5b:bc:ab:22:93:6e:cf:ff:55:67:be:84:0e:95:7a:77:69:ce:
22:85:64:6b:06:61:df:a2:97:02:d5:21:42:19:92:4a:c2:1c:
3f:4c:a2:f0:3c:b6:b6:4c:d0:b5:a7:5d:dd:4a:b7:e9:52:77:
90:0f:0a:c8:c0:fc:97:e3:50:4d:76:2c:ce:c0:46:90:d7:6b:
f2:1f:79:af:03:98:a3:25:2c:78:e4:df:b3:7b:5d:13:1b:8f:
3e:ec:2d:f2:ec:e5:16:89:80:1c:5e:1d:8c:f8:0d:f6:dc:af:
9e:9d:21:cc:44:06:78:11:06:ba:b5:e8:90:c3:6b:b0:6a:03:
1a:16:99:66:b2:19:23:3b:2e:ba:7b:be:dd:0d:d3:ed:9d:21:
17:8b:54:14:2f:b7:af:3c:ec:df:33:2f:6a:e7:81:d1:24:41:
90:b4:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 00:01:34 2026 by rpki-client