Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: QVA0leIw5iDs0Somb4/wContJX2hpj48LxvylLfbArY=
Subject key identifier: 17:7C:C2:3B:7F:E5:63:63:E4:30:0D:ED:8E:6A:B7:24:9D:77:2B:EE
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 01A00102080C849A73EA283A1101E6540504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 07E4
Signing time: Fri 14 Aug 2026 16:01:45 +0000
Manifest this update: Fri 14 Aug 2026 16:01:45 +0000
Manifest next update: Sat 15 Aug 2026 16:01:45 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: 6DguSey0ZmuvC3qx3Oqj5a0nZPAI5rFTsiaDygJWf0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:08:0c:84:9a:73:ea:28:3a:11:01:e6:54:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Aug 14 16:01:45 2026 GMT
Not After : Aug 15 16:01:45 2026 GMT
Subject: CN=177cc23b7fe56363e4300ded8e6ab7249d772bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:c4:cd:68:25:47:12:b6:e9:0a:ed:73:ad:
2d:3d:69:18:e9:25:f4:0e:14:d7:76:e5:37:9f:32:
57:c2:45:d7:af:90:92:68:01:ee:4f:5d:ed:b1:b7:
89:9c:24:7e:68:6b:78:a8:6c:a3:23:4b:c2:e8:2b:
e5:d4:ac:5d:d8:68:04:93:c0:93:50:7b:40:dc:36:
c5:ac:4e:57:c7:b6:72:6f:b6:73:f2:17:c2:f8:e1:
15:c2:d9:d6:9b:66:86:79:92:5d:88:74:a6:60:44:
c0:29:85:19:3c:87:08:49:fc:51:79:fd:95:2f:76:
3f:2c:82:fa:e4:9d:00:4e:67:a3:10:fb:6a:e5:ea:
be:5f:a3:92:a2:86:1c:68:dd:1a:13:e4:71:f2:de:
a0:4a:43:4a:ef:56:16:64:b2:2f:7b:68:87:fd:2c:
67:24:75:b3:11:60:ff:b2:17:0c:5d:08:f9:0e:64:
c5:41:a9:a1:3b:87:4d:e7:e9:6d:e9:61:8c:46:44:
6d:72:34:d4:36:11:d8:04:8e:2f:dd:b8:2f:1c:fc:
eb:cc:a3:09:b8:26:de:1e:ba:1e:7c:0a:fb:67:5e:
2f:ac:a8:90:c6:bc:13:67:3f:87:61:23:c0:e8:88:
88:8f:89:90:36:6a:c0:4c:1e:3c:10:4d:8c:cf:01:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:C2:3B:7F:E5:63:63:E4:30:0D:ED:8E:6A:B7:24:9D:77:2B:EE
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:9a:35:b0:eb:7f:17:ca:07:7f:01:4f:4e:d0:3b:58:79:
06:d9:6e:28:d6:d5:ee:0d:40:08:9f:7c:51:9f:f1:80:f1:75:
8b:9a:b2:b5:f1:49:95:44:03:50:a5:97:ec:95:a8:4c:59:30:
4c:27:cc:46:28:71:4d:38:b6:99:b2:f8:a3:84:13:61:e2:2b:
5d:3e:f9:29:f8:ba:6a:51:33:d8:4c:af:8e:98:23:2a:1c:6a:
c9:59:d1:ea:d1:3e:2d:53:a8:6c:ee:98:a6:61:92:5a:f9:ef:
94:2c:82:c7:78:2d:fc:41:5b:e6:ba:b3:4f:6f:ba:d2:51:d5:
be:b1:7b:9c:96:99:79:17:4c:4b:cb:75:93:51:c1:94:61:89:
19:3f:79:e5:9e:28:24:69:e1:4f:d4:8b:13:ce:f3:27:d0:62:
bf:9d:39:e1:58:86:ca:74:29:e5:ff:de:1c:73:35:61:af:d7:
a2:a7:6a:07:d1:68:dc:ff:cd:31:f9:3a:d4:42:7e:99:8f:0b:
cc:07:f6:34:88:cb:b8:20:b3:16:9f:49:99:93:45:38:72:51:
30:ff:bd:39:25:8d:06:93:8c:26:c9:71:1e:ec:80:0a:29:8d:
1a:8e:5f:cb:34:b8:aa:34:28:a9:da:36:b6:8d:f0:2d:7b:24:
f3:01:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:15 2026 by rpki-client