Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: DNuj0c13FQnxoeqvJHIi88AnhvP22NYQUwmtl3ibLpI=
Subject key identifier: 5C:B7:B0:6E:58:60:01:69:FC:B5:8F:25:71:01:98:95:EF:57:A0:47
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019EBBEBCDCCD2E05FC004D0ABB282B2951B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0F57
Signing time: Fri 12 Jun 2026 13:00:53 +0000
Manifest this update: Fri 12 Jun 2026 13:00:53 +0000
Manifest next update: Sat 13 Jun 2026 13:00:53 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: G116LEvsxjbLtp+H1BEZn8QYgRLufAKUNLEVhYgdKgY=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:eb:cd:cc:d2:e0:5f:c0:04:d0:ab:b2:82:b2:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Jun 12 13:00:53 2026 GMT
Not After : Jun 13 13:00:53 2026 GMT
Subject: CN=5cb7b06e58600169fcb58f2571019895ef57a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:07:c9:fa:bd:c8:67:98:96:0f:08:26:38:
95:33:5d:94:36:21:cc:83:f3:1e:86:05:b9:bc:82:
64:17:7c:48:b7:4e:57:04:33:56:05:e2:11:4f:84:
e2:19:5f:15:fb:ac:11:06:8b:2e:9f:6a:33:54:49:
d4:c0:0c:75:57:16:ba:bc:4f:84:0b:dc:1e:f3:c2:
eb:cd:90:8e:75:24:f8:2a:35:69:67:87:a5:2f:42:
12:e9:d3:20:ae:5f:4b:a1:a2:f8:a6:a3:48:a2:6d:
1a:98:aa:5f:21:c3:7f:43:cc:93:6b:f7:15:8d:64:
0f:93:27:02:ab:68:27:8f:38:2a:a6:12:54:ee:a8:
b6:c8:7d:f1:65:6c:4c:6e:7f:6e:6d:75:37:f1:0f:
73:4b:7e:37:b7:ae:d1:bb:9d:49:c9:e9:9e:15:f8:
a3:ce:b8:0e:68:1e:de:29:f0:6c:92:c9:c0:5a:82:
ff:f2:74:1c:4c:4a:53:1a:b0:04:48:34:d6:1d:d2:
0c:5a:59:10:15:99:a0:b5:3c:38:3e:c1:e9:bd:6d:
f2:84:bc:82:5d:43:6a:07:8a:95:b4:f2:6e:f8:84:
c9:4b:25:2e:83:56:bb:40:07:47:ac:a4:a0:54:d8:
92:60:0f:12:50:fe:13:20:c2:4e:df:58:50:fa:6e:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:B0:6E:58:60:01:69:FC:B5:8F:25:71:01:98:95:EF:57:A0:47
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:83:01:e8:91:27:e5:cd:c0:64:12:fc:5f:82:df:2c:ea:
c7:2c:7e:75:8a:54:63:60:17:e7:91:b2:52:5e:c9:88:3e:2a:
a6:e0:d5:5b:fc:3b:cd:5c:ab:3a:5b:0f:d2:ba:8c:3b:50:bd:
22:9a:0e:fa:7a:15:6a:b5:34:0d:c3:bf:86:2c:f3:1b:99:33:
f0:ae:40:01:2e:42:9a:d7:ab:a2:46:c5:1b:29:45:49:8a:9b:
2e:ec:60:15:e4:9d:96:4c:c1:e5:4a:42:c5:4c:4d:08:c9:e1:
e3:60:76:84:b8:3c:f1:44:dc:12:06:6b:df:67:9e:eb:79:a9:
da:27:06:15:80:dd:45:88:1e:f8:a5:dc:a4:a3:31:a6:5b:22:
65:a3:31:cd:89:95:9e:ba:c5:9f:e4:ad:64:45:e3:6b:2e:43:
0b:cd:c2:ec:c0:92:53:e1:1d:58:71:8d:1b:98:d3:50:b0:ad:
17:da:da:20:80:18:81:56:95:bb:0a:3b:4f:dd:05:ca:06:b6:
3b:a1:4f:c1:f8:34:6f:4e:ed:19:50:2d:12:a4:34:f1:0e:2c:
5c:06:1a:1a:a6:67:65:21:06:81:0c:f3:00:33:a6:0d:81:a5:
3d:3c:b1:02:c4:50:fb:92:3a:87:32:86:0e:0f:b5:20:2b:1a:
5f:2c:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:25:50 2026 by rpki-client