Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: iD71NmKtXFWCa51/XA4/+St4Zt78QUq5jYFmCSuEY+4=
Subject key identifier: DB:E1:B9:98:51:06:6B:08:4A:4A:AB:C2:5A:70:B6:5A:38:C4:4A:CC
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019F17C25D7ED8A824FE6DD004DA8E8B27B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1719
Signing time: Tue 30 Jun 2026 09:00:41 +0000
Manifest this update: Tue 30 Jun 2026 09:00:41 +0000
Manifest next update: Wed 01 Jul 2026 09:00:41 +0000
Files and hashes: 1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: kmLbxFAC5+WjJQjhd/yNMJaDAulbJsD4BD5kc/QObO0=)
2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:5d:7e:d8:a8:24:fe:6d:d0:04:da:8e:8b:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jun 30 09:00:41 2026 GMT
Not After : Jul 1 09:00:41 2026 GMT
Subject: CN=dbe1b99851066b084a4aabc25a70b65a38c44acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:aa:1f:26:06:0c:7e:63:2e:36:03:f1:12:
2b:8a:f3:48:7d:c8:1f:c6:a8:b2:05:65:88:ab:59:
c2:06:41:c6:7f:7f:ca:db:ea:e7:02:8f:6f:2c:42:
2a:fd:0b:08:d5:b2:48:a9:66:dd:8c:fb:1b:5b:7e:
bd:2b:51:d5:8d:0f:2a:a4:68:76:12:53:8b:1f:a3:
37:fd:30:77:ef:15:f5:52:73:d8:23:84:58:77:66:
65:69:db:ed:89:0c:17:7c:2f:ed:9a:fe:84:60:5b:
67:fa:d0:43:a2:61:a5:4f:9d:97:34:d2:0e:31:09:
f3:c6:7e:d0:fa:bd:4d:19:5e:58:74:4e:9f:37:6e:
0a:c3:15:05:c8:54:33:12:29:fa:78:4d:72:71:5b:
ed:96:0d:5b:91:8d:ea:71:a2:b4:3e:db:99:6e:67:
21:f2:09:7a:d3:60:80:1b:25:c8:00:cb:d4:cb:32:
b6:cd:18:14:1f:7c:f1:89:e2:45:41:11:f9:22:85:
20:52:ba:89:74:fb:df:46:b1:40:22:29:f4:77:bb:
5d:22:e2:5d:63:62:b8:2b:19:63:de:cf:f7:0e:9e:
35:b7:ca:c3:c2:30:28:36:d3:66:e7:a0:dc:06:0e:
fe:91:51:a7:0b:8c:26:fd:d4:a8:dc:b7:d0:49:af:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:B9:98:51:06:6B:08:4A:4A:AB:C2:5A:70:B6:5A:38:C4:4A:CC
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d2:23:88:8f:11:73:7a:41:81:00:94:80:5e:6b:9d:7b:06:
10:9f:9b:c6:83:e5:5d:5e:63:02:c8:45:04:61:35:f1:16:b4:
0f:89:7f:34:da:7b:0a:be:89:d9:3d:7e:74:b4:e0:31:4f:f6:
0e:6d:62:89:2b:7d:35:ed:50:e5:06:d9:c9:5f:17:75:9e:57:
22:ad:51:94:15:0f:cc:46:4f:cb:e8:7f:b2:73:b4:02:b8:8b:
11:c5:43:4c:e8:c0:24:19:2e:01:53:c8:ec:b3:4b:6b:8d:3e:
66:c6:57:40:7e:fc:a3:c4:fa:3a:1e:15:a5:37:23:b3:1d:79:
1b:f3:fd:1c:a0:bd:84:4f:99:c2:8f:e9:e1:5f:42:a3:87:bb:
d2:81:67:ae:98:45:e3:1f:34:ca:2d:9b:3a:74:c6:96:3d:aa:
2d:8b:2f:97:56:cb:8e:8f:1f:c7:4d:90:4e:0e:e1:42:ba:bf:
7f:ec:4b:69:7c:a4:bf:1d:d0:ae:b2:92:57:20:87:d2:1b:47:
a4:3b:21:1a:00:95:81:b7:7d:4c:b0:6d:bf:5a:3f:e1:46:f6:
90:75:06:c0:6d:af:f3:1a:93:f5:a6:55:5b:30:84:66:01:9d:
56:04:c1:95:00:39:fb:ca:ff:ad:2b:ca:f0:95:e6:95:ff:ea:
a1:d7:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:58 2026 by rpki-client