Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: 9NjvvXbWR86Irxvtmxax+Ab18pYcOxHLPgQJHVIaBv4=
Subject key identifier: 58:FA:B5:E8:FD:7E:8C:CB:93:68:5E:F9:D4:FF:6D:6D:A7:40:97:C0
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 019FCB5D0479021C0BE87B53B634AC6A69BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: 5E
Signing time: Tue 04 Aug 2026 06:01:38 +0000
Manifest this update: Tue 04 Aug 2026 06:01:38 +0000
Manifest next update: Wed 05 Aug 2026 06:01:38 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: Jd8+bX0AFfs9dmk1TepdooGA6kviXrmwyAlf3jpsArY=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5d:04:79:02:1c:0b:e8:7b:53:b6:34:ac:6a:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Aug 4 06:01:38 2026 GMT
Not After : Aug 5 06:01:38 2026 GMT
Subject: CN=58fab5e8fd7e8ccb93685ef9d4ff6d6da74097c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:2b:d7:40:ac:1a:96:9f:cb:6b:5c:de:4c:
1f:30:5c:ab:40:c0:73:05:25:9b:6e:a5:51:6c:58:
ba:72:90:a7:ab:18:eb:66:c2:6e:ea:61:de:15:b9:
97:39:fa:6b:85:a7:4c:76:fd:a2:a4:6c:3e:1b:92:
fa:75:ce:a5:c6:4b:fc:47:e5:15:51:a3:d0:70:8e:
60:62:60:f2:ed:4c:cc:eb:9f:fd:c4:fe:8d:a5:ec:
81:97:8d:28:62:eb:9a:d5:62:d7:14:8f:7c:0f:5d:
35:9d:9d:92:be:73:ba:64:8d:7b:b8:8d:9e:65:ff:
20:b5:49:e9:02:ad:33:4d:44:df:2d:66:b5:fb:25:
7f:a0:d4:36:f8:dc:6c:67:21:8e:eb:db:58:d4:1c:
0d:44:16:22:46:74:7f:a8:f5:d5:13:64:7b:b5:1d:
79:78:0d:12:ba:6e:3b:08:fb:ec:5c:ee:e4:e2:46:
52:de:42:2f:d4:04:ff:59:c4:63:8f:eb:09:94:0e:
77:d8:32:1e:77:23:2c:ff:8e:01:c7:5b:7e:3c:25:
04:4a:a5:26:40:e5:bf:03:d5:92:0c:a2:51:58:45:
7c:f5:aa:5b:08:4b:53:e0:21:f3:fb:f8:fc:ca:0a:
f2:fe:3a:2c:27:70:3b:55:f4:bb:3d:35:7c:2d:db:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:B5:E8:FD:7E:8C:CB:93:68:5E:F9:D4:FF:6D:6D:A7:40:97:C0
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:f6:ec:06:a5:a6:31:dc:96:16:a6:85:17:ed:04:aa:62:
64:d7:07:99:93:52:0c:08:58:2a:6f:2d:74:04:d9:4b:7f:8d:
e8:2d:85:82:95:7b:85:fd:40:ec:77:5b:93:8e:7a:4f:1a:60:
26:aa:aa:08:43:30:8d:2b:91:9d:6c:b2:07:fc:dd:66:61:4b:
b5:75:ca:17:04:99:e9:04:6e:14:42:c5:cf:01:e6:58:ad:f5:
80:c1:1d:db:c0:51:10:0b:e2:20:e9:e4:30:5d:1c:19:37:f3:
08:be:21:4a:2b:e0:fb:0d:cb:23:d5:89:43:6b:26:3f:6c:bd:
a9:fb:c9:eb:7e:ad:dc:8d:8b:cb:56:48:66:71:62:85:37:c7:
58:e7:43:72:fa:bf:28:01:a2:e7:25:fe:c9:1b:c1:c2:67:bb:
2b:86:3a:72:6e:41:12:f5:02:13:8b:ad:1a:25:17:62:66:ec:
59:a5:68:58:a0:44:59:4d:f1:f6:68:0a:fa:5f:e1:bc:8c:15:
2f:40:f7:c4:1c:1e:ec:84:f8:10:a4:7e:83:8f:c8:13:f9:9a:
21:58:62:6d:3f:4f:8a:47:c1:ec:fb:dc:4e:5f:14:b1:1a:72:
b9:36:5c:ff:fe:0b:61:db:40:bd:b7:6d:30:43:6a:1d:2e:3f:
72:7e:fe:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:33:17 2026 by rpki-client