Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier: pJ9kQXeNpQepbkXoxgcOw2so7ucRgCNgpAkfp+NySj0=
Subject key identifier: 7A:A3:49:47:B7:6C:1C:3B:CB:70:04:84:B1:61:4B:9A:F6:31:9F:00
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial: 019F18674669B07ACAD1F681FC88675F6655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number: 1067
Signing time: Tue 30 Jun 2026 12:00:49 +0000
Manifest this update: Tue 30 Jun 2026 12:00:49 +0000
Manifest next update: Wed 01 Jul 2026 12:00:49 +0000
Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: ZWVUxNaXg5imDa6RyEK2ejFfuNnZ994UaYRwsskPgNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:46:69:b0:7a:ca:d1:f6:81:fc:88:67:5f:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Validity
Not Before: Jun 30 12:00:49 2026 GMT
Not After : Jul 1 12:00:49 2026 GMT
Subject: CN=7aa34947b76c1c3bcb700484b1614b9af6319f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:fc:e3:cb:c5:95:5e:bc:5d:2e:fd:56:3e:
9c:83:97:ca:a4:d8:b0:64:c4:06:2c:fb:07:40:49:
18:4f:88:09:9e:46:25:01:57:65:ca:c9:9d:fe:0a:
06:f8:56:b0:b0:4c:62:98:42:dc:00:1a:a1:19:30:
9a:76:f4:be:ab:48:1d:3d:92:e5:07:61:be:d2:8c:
06:8a:6f:d7:12:24:8f:6d:cf:15:b7:5a:58:e0:67:
da:fb:9c:d0:48:8c:08:d2:8e:7a:d1:01:43:b1:35:
5f:73:70:c1:40:4b:37:9c:b9:06:a8:36:02:83:71:
dc:84:ef:16:76:35:00:ae:c1:e9:ee:77:19:c1:07:
8d:ac:66:15:1c:bf:59:ea:cf:49:76:e5:fc:0c:42:
83:7f:7a:5f:15:96:78:0b:1d:14:06:77:b7:e1:d8:
dc:9a:d0:55:cc:80:c6:6c:cc:b5:59:61:48:41:af:
bf:99:dd:0f:d8:36:0f:79:fb:17:8d:a6:9f:a0:de:
5d:a8:54:f0:e5:e5:16:32:e9:96:19:05:db:e3:df:
07:18:37:e5:0f:aa:11:9e:df:8a:8c:55:49:ea:84:
43:82:16:d6:ce:1e:cf:38:e5:0d:26:e7:a9:03:d8:
90:a6:09:1f:5d:c8:c5:67:d4:7c:7b:3d:3f:88:25:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:49:47:B7:6C:1C:3B:CB:70:04:84:B1:61:4B:9A:F6:31:9F:00
X509v3 Authority Key Identifier:
keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:4e:ee:76:60:2f:50:ff:e4:50:ae:e9:35:18:86:49:a2:
b5:ea:15:93:1f:15:94:90:5b:e2:64:5a:a3:86:65:ae:6d:7d:
cc:d9:b2:ac:bf:f4:31:ac:f0:12:68:5f:2a:60:26:23:ec:8c:
5d:ee:bb:5c:e3:e6:ba:ea:76:02:76:53:c8:75:15:b0:54:34:
b6:9b:cf:73:76:fe:b9:3f:70:2c:b3:25:a7:2b:f2:54:44:26:
18:51:4f:fc:14:18:19:89:e8:fe:89:d8:41:a4:85:fc:91:11:
76:5c:d0:0a:eb:dd:ba:b4:6d:32:a2:32:b5:7c:5b:ef:57:86:
82:21:56:09:a8:ec:78:23:f8:20:36:09:da:a7:a7:1a:db:05:
fe:3d:4b:20:05:3d:76:05:ca:b0:94:fb:48:1d:80:36:42:6e:
64:95:c4:a1:ab:48:95:9c:a4:55:bb:0a:37:ae:40:10:37:cd:
3b:04:5c:2e:47:6d:ac:dd:89:84:b5:b2:af:a9:cf:3f:a6:44:
5e:c2:69:85:7e:78:9b:8c:fc:39:ca:73:87:97:b6:2c:66:67:
bc:ad:3d:21:00:17:66:a5:3d:fa:60:35:bd:af:c7:33:b5:57:
21:fd:90:c0:de:a9:87:33:1e:15:3a:c5:8e:eb:e9:b0:ba:21:
2d:f8:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:24 2026 by rpki-client