Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File: 5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier: 5UjoZhIqI2De3KpriqqKuPr82Ol3rfMU3Aq0EC1/q2E=
Subject key identifier: 35:A1:9B:BE:72:81:39:B7:B9:53:26:51:2A:5D:45:2F:44:07:87:C7
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial: 019F18D62746E47B4802265CCE7B150F2D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:01:55 +0000
Manifest this update: Tue 30 Jun 2026 14:01:55 +0000
Manifest next update: Wed 01 Jul 2026 14:01:55 +0000
Files and hashes: 1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: 7MLwFHcozwiBZju0GuJwWPsMKFZO2pzhFr2PHOvIM9g=)
2: wSyM0gz4zx6p84uHauOvtvDMKGs.roa (hash: WZ6TV+R46SR5wmwXRRLIlAJ/bQgYVkvtoX9ha3Mmbrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:27:46:e4:7b:48:02:26:5c:ce:7b:15:0f:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Validity
Not Before: Jun 30 14:01:55 2026 GMT
Not After : Jul 1 14:01:55 2026 GMT
Subject: CN=35a19bbe728139b7b95326512a5d452f440787c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:38:ca:67:90:b8:85:a2:85:9a:78:61:6e:
2c:33:6e:5b:da:0c:58:fd:47:31:b0:20:43:99:3b:
71:10:19:32:43:a3:de:fd:38:82:71:71:88:89:05:
83:7b:90:a1:e1:6f:55:e2:98:ab:be:6f:38:e1:8c:
15:e8:65:23:e1:21:de:c7:09:cb:95:a7:9f:26:0b:
b4:ce:de:4b:85:ab:84:b0:d0:d8:1b:81:32:09:e7:
76:12:0c:a6:80:51:47:6a:19:7a:d4:6b:9c:76:13:
9f:95:f0:6b:be:50:53:cb:1e:07:a7:28:0e:3d:fc:
5c:a7:96:98:ec:60:b7:ab:05:e4:7d:41:4a:e0:de:
12:7d:de:06:db:59:64:38:15:65:75:2c:dd:50:35:
80:a4:bd:f1:3f:bf:96:3d:b1:0b:1d:be:61:6f:57:
ac:ae:b2:e4:ab:1a:fe:5b:f6:25:4e:db:d0:bb:eb:
07:68:e7:82:99:5f:cc:1c:8e:7e:cf:a3:be:4f:4e:
26:37:3a:c6:be:b3:93:dd:a1:af:1b:df:c5:70:3f:
81:20:56:e9:41:1c:54:5e:85:f2:d1:7c:20:77:d3:
9d:12:4d:e6:6b:d7:d6:dd:c5:e9:fc:57:ef:fa:04:
b5:1e:e0:14:fe:6f:bd:f9:3c:b5:98:a2:63:fb:f7:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:9B:BE:72:81:39:B7:B9:53:26:51:2A:5D:45:2F:44:07:87:C7
X509v3 Authority Key Identifier:
keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:cc:b0:c6:d2:b2:96:ed:d0:2d:fa:8f:dc:f4:64:5a:4a:
2d:45:f0:45:26:4c:28:02:ae:fd:a0:75:53:c5:eb:b2:22:82:
2c:69:09:d6:06:67:0c:9c:d2:1c:ac:9a:be:be:6f:3a:9d:e7:
5a:cb:61:a2:2b:ad:81:f2:9c:c3:8b:50:38:85:21:65:52:8c:
0f:eb:70:7a:2c:14:b7:83:66:89:66:be:24:1b:f2:68:1c:89:
bd:8b:26:92:c2:90:7a:de:b6:06:17:ed:08:9a:3f:02:69:7d:
42:fb:80:54:e4:44:a6:1b:05:48:0c:32:af:94:a7:66:c5:65:
c5:47:ef:60:08:8e:68:86:2b:88:32:48:14:05:1c:c3:94:3b:
09:33:05:d8:f9:d4:3e:54:ee:f1:48:cb:29:13:bc:16:d5:ab:
fd:71:24:25:7d:58:68:55:ca:08:7c:52:85:8e:38:0a:60:ae:
27:e8:dc:0d:32:aa:79:f3:40:bd:a9:19:44:1b:3b:ad:71:96:
dc:d7:26:b9:a9:2d:bf:93:93:6d:03:39:b1:f1:12:38:7e:7b:
d9:b7:8e:06:d4:96:61:91:28:7b:24:fb:d9:4c:d3:17:43:ab:
77:67:40:aa:66:aa:ea:18:c6:00:4b:97:52:a0:5a:4a:13:91:
e4:38:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:43 2026 by rpki-client