Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: Pm+iBgtKO/u0YILZI4ZAVP7eumGmIS2rdS5UCCSr8G8=
Subject key identifier: 4E:B1:EA:B0:5C:82:E1:E7:4C:AA:C6:03:F0:5A:16:F9:CD:96:3D:79
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 019F18D66EF2C56FDC0149BCC1E40BBE6DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 05EC
Signing time: Tue 30 Jun 2026 14:02:13 +0000
Manifest this update: Tue 30 Jun 2026 14:02:13 +0000
Manifest next update: Wed 01 Jul 2026 14:02:13 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: Xy43VPyBgUmXp4f5IDNCDa3wZN43REYOo/HwfsedctQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:6e:f2:c5:6f:dc:01:49:bc:c1:e4:0b:be:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Jun 30 14:02:13 2026 GMT
Not After : Jul 1 14:02:13 2026 GMT
Subject: CN=4eb1eab05c82e1e74caac603f05a16f9cd963d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:a6:49:ff:64:81:3c:a1:70:45:3d:c0:28:
94:cb:1a:70:68:a7:9a:0d:b7:ca:58:ef:c6:6c:d8:
2d:d4:1f:4e:50:8d:79:79:96:72:43:3d:63:c3:8e:
a7:b3:7c:95:b5:fd:2e:b6:c8:fd:71:58:c1:a3:4b:
68:29:2b:33:3f:f9:c6:1d:c0:c4:d1:4f:18:80:a4:
2f:d8:59:d8:dc:19:93:95:08:6e:6a:a9:9a:2e:ef:
21:61:2a:5f:59:54:4a:90:d1:6f:7e:cc:ff:71:13:
5f:c9:ec:36:59:08:e0:4a:36:a3:04:53:ba:64:7b:
25:26:8a:48:20:f7:4a:66:63:56:9b:c4:a5:df:c9:
6a:9a:b2:60:93:1e:b0:c4:0e:c4:df:12:c3:5a:1c:
a5:3f:d7:11:f8:3d:73:ab:ca:04:53:77:1b:73:19:
b1:43:11:ff:0c:2d:42:f0:d3:43:4e:15:ad:0a:54:
2c:38:4a:6b:92:25:af:ae:6d:f3:27:d6:d7:1c:58:
49:68:25:17:2a:e2:cb:90:e9:7b:0c:5c:c9:06:9b:
69:27:d8:e7:cd:a5:41:ea:6b:7b:f0:7c:cd:8e:f3:
42:24:42:b3:1f:6a:4f:fd:6c:e4:3a:9f:1f:35:30:
d8:03:d1:43:f9:ba:88:f8:ce:e3:1f:2a:50:33:32:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:EA:B0:5C:82:E1:E7:4C:AA:C6:03:F0:5A:16:F9:CD:96:3D:79
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:f3:34:9d:e7:a1:11:62:e0:f3:1f:41:f3:ab:3c:d0:49:
32:16:62:90:7b:2c:73:f0:af:98:1a:53:de:a6:22:b7:7f:e7:
ec:3e:4e:e2:ce:00:73:23:dd:aa:58:85:91:22:5a:3e:f6:ed:
dd:97:90:21:f2:5f:79:e9:61:7d:f2:84:1d:4d:8b:b7:16:4e:
fa:62:f1:ea:fb:da:8d:65:36:03:3d:46:79:e7:94:5a:27:23:
de:e9:76:23:30:37:62:45:07:e0:f2:1a:15:5f:1d:19:98:93:
c4:80:4e:96:c3:c3:8c:51:b1:67:bd:b6:0d:66:f9:9e:72:73:
3a:91:8f:f7:ec:0d:11:86:d9:c5:db:37:4e:7a:fa:a1:c3:97:
5a:7b:b3:51:d5:cf:ce:15:62:9c:8b:d1:b0:e2:3a:d3:47:20:
46:60:f4:a5:9d:95:e8:7d:2a:98:d7:76:ba:eb:16:0a:00:84:
89:fa:32:74:89:8f:7f:f8:23:ed:da:d2:8c:92:3a:e9:51:73:
90:c3:57:f2:6a:2f:9e:79:01:c7:af:f2:fc:84:9e:72:12:2a:
66:82:b6:4a:7e:1a:fb:da:ea:4d:8d:60:5b:04:6d:4d:52:0d:
63:fb:76:53:b5:27:a4:df:e6:9b:f5:95:fd:f1:78:a6:53:4d:
34:06:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:29 2026 by rpki-client