Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier: JZhgSuNptHxmuppBcQ1SSY4U/kuWL/9FlFpixWY00oY=
Subject key identifier: AE:10:FE:93:F6:AE:38:0D:CF:48:90:53:FD:76:A0:A7:83:13:E2:D2
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial: 019F1867A7683ABEB2E5B5AF65D1D3470421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number: 17CE
Signing time: Tue 30 Jun 2026 12:01:13 +0000
Manifest this update: Tue 30 Jun 2026 12:01:13 +0000
Manifest next update: Wed 01 Jul 2026 12:01:13 +0000
Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: UBTqTPx7YC0JbkxRscs21UN+lH8qf/dsZGt6bcPpJ+Y=)
2: 660vFFGpn8clSWO6FY_HjESqHac.roa (hash: PavhF4oz19TrgmDV4DTkSyfBE4qBlY8WfjSQlelqWBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:a7:68:3a:be:b2:e5:b5:af:65:d1:d3:47:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Validity
Not Before: Jun 30 12:01:13 2026 GMT
Not After : Jul 1 12:01:13 2026 GMT
Subject: CN=ae10fe93f6ae380dcf489053fd76a0a78313e2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:65:8a:f0:cc:38:e9:60:55:44:12:c4:d5:
f5:22:31:08:41:fe:60:cc:6e:2e:1b:b9:8b:3d:04:
37:7a:5b:0c:f3:01:a5:63:10:e7:e8:c4:0d:11:bf:
be:52:c6:a2:76:6b:8b:9c:5b:fb:91:25:87:2d:0f:
19:bb:8c:31:a7:7a:e8:86:a3:04:22:a9:50:69:13:
02:5a:56:bd:41:f3:0c:3d:42:1c:ac:7a:e0:42:03:
1a:59:e6:79:8d:1b:c6:b1:da:24:a7:27:0b:96:bb:
8c:6c:b6:d5:67:08:fa:9b:50:df:84:6c:20:0f:cd:
c5:72:c1:eb:5e:dc:8b:6d:9b:1c:81:8d:65:4d:a3:
4e:e0:2a:fc:8f:c8:cb:12:34:6c:b7:00:f2:52:4d:
9c:59:d2:5e:51:4b:bb:69:91:08:18:2b:08:b1:3a:
81:1d:a3:e2:55:86:55:b4:78:e1:9e:29:94:a5:f9:
78:8e:68:99:87:62:25:a7:de:01:4a:36:b4:f4:08:
d3:e5:4a:aa:d2:0a:5c:06:be:42:59:5b:44:05:d4:
0f:0b:a6:4f:9b:ec:1a:c7:9b:cf:67:f2:02:b1:ff:
f1:43:30:4b:32:cf:25:3f:b4:c9:8a:c6:26:9c:72:
03:ea:65:5b:15:84:f9:8c:60:7f:fb:21:15:79:9d:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:FE:93:F6:AE:38:0D:CF:48:90:53:FD:76:A0:A7:83:13:E2:D2
X509v3 Authority Key Identifier:
keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:22:58:8d:4f:19:cd:3d:5a:57:1e:c9:06:d6:8f:4e:00:
d5:4f:5e:3c:0a:01:46:a5:0b:ce:78:b7:e4:dd:56:47:b1:c0:
ca:d0:94:7d:45:f2:f1:20:86:53:34:a0:00:90:49:43:1b:4d:
77:74:ce:a4:a1:75:34:8a:fc:26:4e:a2:ec:bf:cd:bf:72:5d:
10:e5:90:30:bc:a5:ed:dc:32:71:fa:29:23:d2:0d:86:86:09:
cd:56:5f:5c:d4:31:68:48:a1:44:75:e1:c7:40:99:c7:02:a2:
eb:1a:3e:0c:01:3f:00:1e:b2:50:b9:ca:76:ab:27:c2:b8:25:
d8:73:37:32:54:cb:b5:0a:af:68:fa:fb:af:d8:14:9b:c7:08:
ff:bf:cc:98:c6:6c:59:1a:51:bb:9b:26:a5:b6:f2:ca:b6:d9:
2e:92:05:ff:32:4b:f0:7a:58:37:fa:d3:fd:7c:2e:b5:85:fe:
5a:d6:e6:9c:1b:d3:5c:b9:db:21:21:55:42:9b:a3:2e:e9:74:
c3:0b:4f:15:0c:c7:75:e5:25:2b:4f:11:20:7f:b1:00:01:d1:
68:44:4b:6d:43:f9:46:e7:3f:69:53:21:8b:67:a7:dd:7d:34:
e0:ca:7c:0b:29:a9:c0:61:75:c2:e4:88:28:73:99:4d:2f:30:
53:b5:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client