Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: Bx1XQahoNXS0+HCXHR0qZ5Mbn8ZOFGb4ETgA+po7ty4=
Subject key identifier: B8:58:9C:04:98:7C:11:AB:53:BC:3E:8B:F5:A7:37:5B:1F:ED:B1:7E
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019F197A42B7E8D9C49A5A1459ACDF622A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 17:01:10 +0000
Manifest this update: Tue 30 Jun 2026 17:01:10 +0000
Manifest next update: Wed 01 Jul 2026 17:01:10 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: J2UDKmTz7+DEMestR5Up/8lLxdj/S00PadgnrXzSKFc=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:42:b7:e8:d9:c4:9a:5a:14:59:ac:df:62:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jun 30 17:01:10 2026 GMT
Not After : Jul 1 17:01:10 2026 GMT
Subject: CN=b8589c04987c11ab53bc3e8bf5a7375b1fedb17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:90:5f:c1:5a:90:f9:7e:1b:15:5c:85:f1:
97:df:f2:6c:cc:8b:95:6d:62:26:6d:fe:3f:4b:da:
8c:b7:55:0a:59:4e:f0:57:ae:36:cf:38:ee:4b:91:
95:f1:ab:e1:54:18:97:27:aa:a5:fd:84:8b:bc:df:
43:fd:8f:01:6b:a4:fa:b9:3b:d7:43:7b:33:34:ab:
1f:8f:7d:01:a0:43:e6:4a:1a:fb:db:e9:10:fa:e5:
58:3a:3e:50:4f:e6:82:28:c1:c3:95:5f:3d:56:51:
59:a8:59:fb:9d:b1:eb:1b:6b:f8:59:d6:22:be:e6:
57:02:2b:73:7c:c4:46:ff:d3:15:e6:31:b7:38:ee:
89:fb:58:ee:47:a3:cd:34:49:53:ab:46:0f:3e:73:
5d:0c:51:db:c4:57:b9:fd:00:88:3d:c2:c8:e6:1a:
40:9d:ae:16:2f:f2:b3:9d:60:03:74:7d:82:a1:62:
57:0c:31:dc:33:02:42:0d:31:be:7e:88:15:65:e5:
3f:f4:85:cf:9c:e7:dc:3b:9d:44:ef:05:62:36:e5:
c4:e8:c0:a9:f9:f2:5f:cd:1c:0d:0b:4c:d8:46:27:
3c:12:c9:4d:1e:95:c8:69:9f:6b:f7:93:3d:ca:91:
e6:c9:97:ba:23:73:73:02:e8:22:46:a4:e3:1b:90:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:9C:04:98:7C:11:AB:53:BC:3E:8B:F5:A7:37:5B:1F:ED:B1:7E
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:20:44:b7:bd:62:44:e2:97:04:75:4f:34:10:d9:eb:f9:
ea:5f:9d:3e:02:30:f2:49:87:f6:bb:12:ff:c7:cf:95:33:3b:
00:d5:5c:9e:e6:06:ef:e5:58:85:68:81:e8:34:13:91:35:81:
e9:78:17:73:54:0c:dd:8c:3d:ee:e0:55:90:61:36:47:4a:ef:
b1:d5:ec:c1:9d:1d:75:4f:3b:bf:c4:60:6d:36:af:ae:28:6a:
24:6f:54:68:55:35:e5:fa:52:77:61:32:4a:bb:0b:e9:c1:77:
5e:43:54:d0:8c:7b:7c:40:d0:0a:23:aa:f7:dd:33:1d:25:56:
6c:67:2f:12:02:c3:bf:18:67:67:52:15:92:c0:c8:d4:df:ff:
24:db:b5:63:01:6a:b0:a9:42:39:ba:50:04:d4:0c:89:db:81:
0a:1b:5c:00:f4:7a:6c:8a:2c:e2:70:e2:c7:e3:29:27:4a:72:
9a:f5:62:c5:53:78:3d:0c:9e:a1:04:c4:8b:5f:4a:83:08:18:
24:38:b6:3d:49:9c:30:46:f3:92:1a:15:81:02:98:c1:26:3f:
7a:ce:2b:ef:70:aa:49:27:88:82:c5:67:6f:74:27:64:ef:b0:
57:95:5b:6e:9d:80:06:c6:80:36:da:3f:0a:91:9b:83:66:40:
e1:eb:40:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZekK36NnEmloUWazfYiqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj
ZWE3NzgwHhcNMjYwNjMwMTcwMTEwWhcNMjYwNzAxMTcwMTEwWjAzMTEwLwYDVQQD
EyhiODU4OWMwNDk4N2MxMWFiNTNiYzNlOGJmNWE3Mzc1YjFmZWRiMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUyQX8FakPl+GxVchfGX3/JszIuV
bWImbf4/S9qMt1UKWU7wV642zzjuS5GV8avhVBiXJ6ql/YSLvN9D/Y8Ba6T6uTvX
Q3szNKsfj30BoEPmShr72+kQ+uVYOj5QT+aCKMHDlV89VlFZqFn7nbHrG2v4WdYi
vuZXAitzfMRG/9MV5jG3OO6J+1juR6PNNElTq0YPPnNdDFHbxFe5/QCIPcLI5hpA
na4WL/KznWADdH2CoWJXDDHcMwJCDTG+fogVZeU/9IXPnOfcO51E7wViNuXE6MCp
+fJfzRwNC0zYRic8EslNHpXIaZ9r95M9ypHmyZe6I3NzAugiRqTjG5AwIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhYnASYfBGrU7w+i/WnN1sf7bF+MB8GA1UdIwQY
MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt
ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi
LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsAgRLe9
YkTilwR1TzQQ2ev56l+dPgIw8kmH9rsS/8fPlTM7ANVcnuYG7+VYhWiB6DQTkTWB
6XgXc1QM3Yw97uBVkGE2R0rvsdXswZ0ddU87v8RgbTavrihqJG9UaFU15fpSd2Ey
SrsL6cF3XkNU0Ix7fEDQCiOq990zHSVWbGcvEgLDvxhnZ1IVksDI1N//JNu1YwFq
sKlCObpQBNQMiduBChtcAPR6bIos4nDix+MpJ0pymvVixVN4PQyeoQTEi19KgwgY
JDi2PUmcMEbzkhoVgQKYwSY/es4r73CqSSeIgsVnb3QnZO+wV5Vbbp2ABsaANto/
CpGbg2ZA4etAGg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client