Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
File: 5jAbF0RrPssIF-QA6YL3Km2AHTE.mft (raw, json)
Hash identifier: Hnh4Ypx65WEDSxYpDOUhYRuK19Q285aKaI8etbjjgfM=
Subject key identifier: EE:D0:E6:49:DE:CE:74:F5:22:39:1D:EC:11:9A:84:B8:04:10:5C:7A
Authority key identifier: E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
Certificate issuer: /CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Certificate serial: 019EB657B0B084E8006D07808DF2AC3F3A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
Manifest number: 05
Signing time: Thu 11 Jun 2026 11:01:00 +0000
Manifest this update: Thu 11 Jun 2026 11:01:00 +0000
Manifest next update: Fri 12 Jun 2026 11:01:00 +0000
Files and hashes: 1: 5jAbF0RrPssIF-QA6YL3Km2AHTE.crl (hash: 6jRSb3otPvIZ5mwUokXoV2AN/07msBu1fpUIZtmqafA=)
2: y8-zYgb68sCKmok28fSORVZTV7k.roa (hash: kb393sHwSxydXSQ1l80qzXOkKVqcGzDmY/nU6zerbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:b0:b0:84:e8:00:6d:07:80:8d:f2:ac:3f:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6301b17446b3ecb0817e400e982f72a6d801d31
Validity
Not Before: Jun 11 11:01:00 2026 GMT
Not After : Jun 12 11:01:00 2026 GMT
Subject: CN=eed0e649dece74f522391dec119a84b804105c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:2e:b5:81:0b:95:88:df:a8:0b:4c:01:35:
96:21:26:1e:e1:4b:f3:12:01:56:74:cb:7e:fa:ce:
0d:80:2f:aa:93:96:d6:10:95:aa:73:be:3a:9d:c7:
d0:2b:d9:45:4f:67:28:69:e9:98:1e:0a:ff:24:d7:
b6:c1:cc:8a:b6:5c:5e:3b:62:26:9e:a1:30:84:73:
cd:89:14:18:4d:f4:2f:d7:75:4b:8e:66:a0:c7:87:
45:e2:5f:d1:e3:6e:68:8e:8e:6a:17:25:f5:51:29:
e9:67:c0:dd:7b:39:2c:40:e2:8e:47:c9:fd:8e:55:
87:4f:b4:bb:66:5f:c8:42:2e:b1:46:2d:ae:36:e5:
a4:20:30:5f:6b:4c:b4:28:cd:85:32:94:00:bb:88:
56:ee:1e:53:8d:f7:bf:b3:6e:30:7e:3e:67:18:49:
8a:43:87:17:a1:18:14:d6:70:a3:a7:9f:77:24:61:
64:54:8e:ea:14:5a:87:60:fa:02:bb:e8:bb:cb:28:
c9:11:1f:1e:25:8c:f4:c8:8e:33:05:65:08:5e:7e:
fb:a9:08:1f:7a:95:8d:19:76:52:1c:5e:7b:50:b3:
2b:51:0a:98:68:bd:a7:26:fd:c2:80:e1:4a:24:63:
70:a9:1c:b6:64:90:82:ea:d0:d9:89:16:65:05:29:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:E6:49:DE:CE:74:F5:22:39:1D:EC:11:9A:84:B8:04:10:5C:7A
X509v3 Authority Key Identifier:
keyid:E6:30:1B:17:44:6B:3E:CB:08:17:E4:00:E9:82:F7:2A:6D:80:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAbF0RrPssIF-QA6YL3Km2AHTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3d3b93-03d7-48af-9e96-d7203c56dfef/1/5jAbF0RrPssIF-QA6YL3Km2AHTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5f:b9:1d:44:ea:2f:9e:db:14:b2:40:f2:ed:76:60:98:09:
f5:20:5e:49:f6:1e:a5:29:b9:7d:b1:2b:7f:f1:6a:3b:35:82:
b6:ca:a1:5c:2b:ad:ba:db:0e:f2:0e:69:05:f3:ee:fc:8b:60:
96:0e:3a:4a:9e:be:19:fe:bf:b9:b3:1d:2d:7f:e7:b1:d3:61:
1c:3b:6f:21:7b:52:58:71:6b:04:f3:02:8d:d6:5e:36:51:a3:
0d:96:9d:88:ef:73:89:ee:ef:69:63:56:c6:fa:e4:68:db:34:
27:0c:25:f6:55:83:f7:de:3c:cc:9f:26:02:24:9b:0f:d9:ce:
1c:af:5f:c1:c3:dc:27:e2:f9:46:76:0f:09:f3:2c:02:9e:0a:
17:1a:f5:94:1c:86:00:66:01:86:25:d7:83:72:53:2c:02:b8:
8c:06:a5:ae:ed:bd:17:ce:b5:b3:7a:1f:8a:d3:dc:9c:26:f2:
f5:40:3c:d3:d8:94:47:2c:e7:d9:04:73:96:d9:e9:27:db:1a:
26:a2:e6:00:f4:27:78:9a:4b:60:cd:81:c3:af:ab:ad:34:70:
7c:74:46:8e:57:e7:37:2b:e7:3e:08:e6:80:04:44:2e:9a:9f:
d5:20:38:57:0d:ec:a4:f9:47:70:d8:55:93:09:ea:af:ca:9f:
84:88:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:26:03 2026 by rpki-client