Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: vZ4jzB4Sm7JyKRpHwARPHYHfmtCcpXMRE3PNhI+3ado=
Subject key identifier: 95:6C:30:55:D5:7D:24:F4:60:1B:A0:F7:D4:0E:1D:80:6A:35:63:5E
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019F111C1856AA73CBD77D84158F7CFE3B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 063F
Signing time: Mon 29 Jun 2026 02:01:21 +0000
Manifest this update: Mon 29 Jun 2026 02:01:21 +0000
Manifest next update: Tue 30 Jun 2026 02:01:21 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: CrD9XAHddYxKNvYDDXstmVCQ7IFmJigji3H0LaRtqL4=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:18:56:aa:73:cb:d7:7d:84:15:8f:7c:fe:3b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jun 29 02:01:21 2026 GMT
Not After : Jun 30 02:01:21 2026 GMT
Subject: CN=956c3055d57d24f4601ba0f7d40e1d806a35635e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:0d:d2:2e:bf:c4:97:6c:6b:a1:1c:24:30:
bf:a9:f6:62:27:3b:1e:e1:f5:27:02:7b:7a:ab:73:
7f:ed:73:56:47:65:db:57:08:db:99:a8:63:3a:f2:
83:c9:ad:2f:76:d3:5b:09:00:72:05:07:fd:2e:65:
73:22:08:f1:fe:4f:a1:8b:d8:04:90:36:bf:e0:62:
7e:62:bf:08:c8:fd:17:f1:ca:e7:3b:3a:47:fb:34:
c9:15:20:b0:8f:57:7b:a1:a6:7f:b2:11:dd:f5:6c:
31:13:90:a4:6a:e7:76:4c:55:45:ca:e6:69:1f:74:
5b:90:e5:a2:12:2c:4f:48:9e:5b:43:22:9b:ba:56:
bf:e5:4e:31:d3:c1:a0:1d:da:18:02:b5:67:05:2a:
b6:fb:56:02:99:fa:ba:e3:a3:b7:94:3e:71:ab:21:
18:7a:f0:39:8e:b0:37:03:6b:25:1c:f6:4b:c1:4e:
c8:35:0e:a4:63:93:67:d6:2f:c1:5c:03:3d:9e:69:
0e:c9:72:ba:80:9f:d7:0f:6b:5f:a2:da:0d:ec:06:
7d:9f:af:8e:aa:72:21:20:42:42:01:0a:dd:51:aa:
4e:9e:f1:2f:36:3d:49:fc:d4:20:87:17:4c:1f:fd:
8e:af:8c:60:4d:90:52:15:68:8c:c7:61:94:66:99:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:30:55:D5:7D:24:F4:60:1B:A0:F7:D4:0E:1D:80:6A:35:63:5E
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:45:2b:75:b2:10:13:96:21:63:7d:d4:51:56:a5:ef:a8:
8f:3c:8d:79:1f:95:b5:96:0c:74:da:12:05:d1:02:16:fb:10:
bc:f5:01:f6:5e:ca:45:97:8f:91:2e:09:0d:e6:25:e2:f7:35:
79:73:5a:6d:fe:9b:21:34:e5:7a:61:c8:eb:15:09:c3:de:21:
f7:5f:2a:2c:fd:44:9e:9b:fc:51:e1:db:5c:e1:3c:f5:46:6d:
8a:f6:2e:33:56:c9:45:c3:1b:01:a4:94:6e:16:c0:04:98:ae:
3e:8d:93:91:4c:48:55:20:c4:ae:20:19:69:8a:71:57:86:dc:
af:6a:8c:df:89:aa:70:1b:3d:8b:e7:e5:80:51:e1:3d:80:9a:
ad:50:1e:e7:cd:11:79:0d:76:7f:1b:37:44:69:d0:6c:3d:78:
a9:75:2c:4d:a0:41:a5:56:3b:3c:08:b6:62:72:b6:c2:59:1b:
39:de:fe:69:ae:6e:09:ce:49:1c:11:1f:93:7a:89:e4:65:29:
48:86:b2:fd:e8:08:c7:e5:c1:8e:91:eb:f4:0a:7c:0a:b1:fa:
6b:b2:41:2d:5f:b7:2c:3d:df:bf:28:28:3b:72:18:25:62:54:
3c:9d:4c:a1:0e:f0:6f:8e:bd:be:8b:7f:ef:2d:55:cd:80:ec:
58:38:31:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHBhWqnPL132EFY98/jtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh
NmM0ZDcwHhcNMjYwNjI5MDIwMTIxWhcNMjYwNjMwMDIwMTIxWjAzMTEwLwYDVQQD
Eyg5NTZjMzA1NWQ1N2QyNGY0NjAxYmEwZjdkNDBlMWQ4MDZhMzU2MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsEN0i6/xJdsa6EcJDC/qfZiJzse
4fUnAnt6q3N/7XNWR2XbVwjbmahjOvKDya0vdtNbCQByBQf9LmVzIgjx/k+hi9gE
kDa/4GJ+Yr8IyP0X8crnOzpH+zTJFSCwj1d7oaZ/shHd9WwxE5Ckaud2TFVFyuZp
H3RbkOWiEixPSJ5bQyKbula/5U4x08GgHdoYArVnBSq2+1YCmfq646O3lD5xqyEY
evA5jrA3A2slHPZLwU7INQ6kY5Nn1i/BXAM9nmkOyXK6gJ/XD2tfotoN7AZ9n6+O
qnIhIEJCAQrdUapOnvEvNj1J/NQghxdMH/2Or4xgTZBSFWiMx2GUZplteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVsMFXVfST0YBug99QOHYBqNWNeMB8GA1UdIwQY
MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt
MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy
LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2xFK3Wy
EBOWIWN91FFWpe+ojzyNeR+VtZYMdNoSBdECFvsQvPUB9l7KRZePkS4JDeYl4vc1
eXNabf6bITTlemHI6xUJw94h918qLP1Enpv8UeHbXOE89UZtivYuM1bJRcMbAaSU
bhbABJiuPo2TkUxIVSDEriAZaYpxV4bcr2qM34mqcBs9i+flgFHhPYCarVAe580R
eQ12fxs3RGnQbD14qXUsTaBBpVY7PAi2YnK2wlkbOd7+aa5uCc5JHBEfk3qJ5GUp
SIay/egIx+XBjpHr9Ap8CrH6a7JBLV+3LD3fvygoO3IYJWJUPJ1MoQ7wb469vot/
7y1VzYDsWDgxVw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:12 2026 by rpki-client