Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: 1R86qdfrCuY+vIaMep4P7nGyjau1++M+UoLvsObJMK4=
Subject key identifier: F2:E0:C0:34:81:F7:90:F1:62:5E:B4:CB:7E:9B:6F:13:A5:F5:E8:4C
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 019F186778E2AC454F27EDD414BD29A19A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 14CA
Signing time: Tue 30 Jun 2026 12:01:02 +0000
Manifest this update: Tue 30 Jun 2026 12:01:02 +0000
Manifest next update: Wed 01 Jul 2026 12:01:02 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: e8iBF9SCmpuIx8dCVs6P2kSSsPrMAoEI0mJLlHx+gug=)
2: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (hash: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU=)
3: BQRT8MPKIPPADJStIFOXOoMHZS0.roa (hash: wXB7gl0TFstv2Pg/iuzGAlhhO65kpfWM+7GC5YZkRE8=)
4: zO6oWxgMXvv1E7No-VDUZLT2hYA.roa (hash: a+qLzMk3gjifCi7ls2zl3kNVE9LPAd8t8Cx6dxnL76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:78:e2:ac:45:4f:27:ed:d4:14:bd:29:a1:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jun 30 12:01:02 2026 GMT
Not After : Jul 1 12:01:02 2026 GMT
Subject: CN=f2e0c03481f790f1625eb4cb7e9b6f13a5f5e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:3f:12:b9:5c:31:4c:92:56:61:f3:17:c2:
5f:e2:9a:a4:48:79:19:f5:58:6e:b3:9b:59:7d:19:
20:62:79:9a:9f:f3:b4:bb:8c:ff:72:d1:b5:92:80:
4a:d0:1c:5f:f2:22:f2:e8:24:f6:4f:0c:40:6e:e2:
da:46:23:c9:68:0d:77:d3:bd:b6:1c:18:91:ea:7d:
0a:d6:ef:d3:71:48:84:86:8d:0a:df:15:99:d6:09:
89:87:74:63:51:fd:59:d7:7b:fb:dc:3f:66:08:a3:
2d:60:b4:e6:2b:43:5f:54:6f:3f:96:81:0f:f2:34:
ba:6a:c8:74:56:1c:9f:cd:0b:80:44:80:eb:d4:94:
fd:fc:36:95:cd:f4:bb:50:a0:3f:08:df:5d:63:13:
af:d3:ab:57:c3:04:00:a2:09:f3:76:a1:e2:f7:e6:
30:39:24:84:30:56:23:9c:fa:9a:f5:9f:91:49:31:
95:86:b0:28:20:7f:52:56:bf:ab:47:17:da:8d:bc:
9e:24:ad:1a:88:69:bc:17:34:43:1e:c9:82:ef:15:
90:ed:19:ec:af:30:32:da:75:6a:f2:33:2c:c5:fc:
dc:27:a2:14:7f:83:89:ad:c8:0d:56:61:54:ca:65:
dc:55:94:d1:e1:bc:97:e3:52:f2:81:83:6a:1d:00:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:C0:34:81:F7:90:F1:62:5E:B4:CB:7E:9B:6F:13:A5:F5:E8:4C
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:13:dd:95:45:07:cc:8d:cd:3e:cd:49:ad:2c:31:ec:0b:f3:
10:a5:52:14:b5:84:1a:dc:7d:47:f2:23:61:c5:ce:84:e1:22:
ad:4d:fd:c0:a6:a9:08:3a:bc:e4:8d:53:2d:69:db:ef:66:c0:
02:3c:87:a2:ad:25:bf:41:c3:2f:1c:72:64:ca:fc:2a:83:45:
6e:cd:23:06:10:e6:ab:87:61:f1:7e:22:ca:7b:22:15:eb:a7:
dd:58:be:f3:e4:ca:64:23:13:4f:cf:9e:b6:98:b0:5c:ee:5b:
cd:42:f2:4d:cc:23:61:9a:c3:93:06:c3:a5:78:9b:58:57:49:
7b:d6:35:b7:52:32:36:10:21:45:37:0a:3a:06:b6:c9:1f:08:
e7:eb:dd:d1:7a:fc:fe:07:64:6f:3a:3b:fa:ec:70:fb:84:15:
4d:c2:36:eb:7a:ff:de:57:54:ba:18:79:a6:7c:ac:17:db:cb:
d1:81:92:40:2b:82:a0:7a:f2:05:04:e6:3b:25:a0:fb:de:2a:
41:9d:ac:10:cc:78:ee:d1:83:b6:9a:36:ed:6e:99:ed:be:7d:
fd:21:f3:13:04:72:42:9a:cb:5e:c4:95:27:d1:ff:4a:15:cf:
57:11:4f:d0:e8:83:45:d1:2d:ec:48:8b:29:03:90:ee:e1:23:
12:ba:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:18 2026 by rpki-client