Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: +qGgnyyvgcVSXk0HHKEeL44DdKe+OXzDvmUoupGD3IY=
Subject key identifier: B0:34:E3:32:F7:50:01:24:29:98:D3:9B:50:62:2F:74:8E:D9:51:C7
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019F17C22E060302A1A4B4F0E90A1BB94591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 09:00:29 +0000
Manifest this update: Tue 30 Jun 2026 09:00:29 +0000
Manifest next update: Wed 01 Jul 2026 09:00:29 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: 8b6xZiJuwPcpbmg6ffW199tmTmOby9kFRurXu0Q+BCE=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:2e:06:03:02:a1:a4:b4:f0:e9:0a:1b:b9:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jun 30 09:00:29 2026 GMT
Not After : Jul 1 09:00:29 2026 GMT
Subject: CN=b034e332f75001242998d39b50622f748ed951c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:b5:d9:28:12:2d:f3:41:ba:f6:fc:29:3b:
f9:ae:b9:b1:aa:ac:60:46:5f:9f:1f:b7:92:a9:68:
92:b0:59:b6:63:cd:7f:37:f0:76:ae:1f:50:8b:69:
72:fb:5d:7e:0d:4a:c7:0d:29:98:c1:d7:14:2e:14:
2e:e9:7d:0c:11:58:e5:8d:1a:a2:ec:bf:9f:90:ec:
a5:0a:73:d8:3a:f1:d8:ac:9e:67:b7:37:8a:7d:f9:
b9:0a:fb:17:ca:01:60:17:ae:cd:f0:a2:5d:b2:c5:
67:43:aa:5c:8c:b4:69:66:9b:b5:11:8a:55:c7:da:
81:67:d2:31:73:2d:06:9b:bd:35:45:4f:ac:98:d1:
d1:5e:dd:f1:52:19:0f:99:9b:88:a9:b7:23:d1:78:
8f:c6:9e:e8:af:b8:b7:e3:97:12:23:8b:78:78:75:
5b:70:10:1a:e5:2b:2d:b1:f3:00:a8:5a:6b:84:bc:
c7:0d:c2:17:12:9f:83:12:d9:5d:64:3f:c3:a1:66:
4d:fc:c6:4f:a6:d3:55:92:e9:ae:37:15:f8:69:5e:
35:cb:00:7d:3d:43:be:1b:71:18:39:05:de:86:7b:
e8:7a:aa:27:f5:37:74:56:73:b0:10:9c:f1:85:09:
b7:63:b7:0a:1a:c0:e8:f2:dd:91:8e:92:aa:be:4e:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:E3:32:F7:50:01:24:29:98:D3:9B:50:62:2F:74:8E:D9:51:C7
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:df:32:81:6e:0f:b3:83:75:62:84:c6:b3:26:22:99:10:
a2:db:5b:90:24:0c:f9:99:15:db:ac:56:7a:15:d7:a2:42:b3:
c5:66:7c:95:96:ba:e6:91:fa:7d:0f:38:d8:d8:aa:5c:dd:a7:
26:29:9d:2e:73:0a:7e:fc:31:f6:dd:fd:97:01:88:e4:01:66:
be:ba:a8:46:90:96:aa:e9:56:a0:6f:14:8f:38:c0:6d:43:18:
5c:2e:a0:d4:0c:63:be:a4:82:0a:d3:59:0d:cb:7b:db:25:47:
be:60:c8:2b:b3:06:61:12:91:b4:d5:b9:14:82:d8:0a:5d:22:
59:6f:ab:b3:e3:45:26:f7:d7:d6:7c:08:96:4d:c6:a8:40:1e:
1b:d2:a1:d6:95:17:bc:01:20:30:04:cd:e0:75:1c:f5:32:35:
bb:f1:94:1b:b3:87:2e:c0:6b:9b:1f:fd:47:91:60:c2:32:23:
65:3c:d2:b4:fe:86:17:d3:83:16:4e:92:c3:5c:01:95:bc:ad:
35:d6:d1:75:61:04:73:e2:e2:6f:58:cd:da:77:16:9e:47:85:
53:3f:99:b9:ba:2a:87:15:d1:7e:5e:39:61:ad:c1:2e:4e:28:
72:a4:19:fa:bf:d8:01:02:96:30:74:66:57:48:ac:86:7b:0f:
dc:84:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:37 2026 by rpki-client