Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: DWphNkcyURCLmyyYGJYDKgyQWBIHJi6coYbAIWD9rjI=
Subject key identifier: 5D:F9:EF:E6:41:58:44:67:9F:C9:F3:BA:EB:83:C9:84:01:F0:B8:9D
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019EB7A10FE6C0D28DAA2579EB0BCE53CAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 17:00:46 +0000
Manifest this update: Thu 11 Jun 2026 17:00:46 +0000
Manifest next update: Fri 12 Jun 2026 17:00:46 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: w2XHsMXqK892bgS8Uq7Rj9xpk1IvZ6JlCCfQOEBl/uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:0f:e6:c0:d2:8d:aa:25:79:eb:0b:ce:53:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jun 11 17:00:46 2026 GMT
Not After : Jun 12 17:00:46 2026 GMT
Subject: CN=5df9efe6415844679fc9f3baeb83c98401f0b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:aa:51:ca:46:2a:72:c8:7d:c3:5e:c3:2d:
22:f3:ed:96:0c:fb:fb:bc:36:5d:22:96:6f:36:9d:
84:a9:2a:6b:98:8f:b7:e0:f1:c9:a5:92:cd:0a:26:
62:93:1c:1d:c3:fb:c6:8f:42:dd:41:ef:57:b3:62:
87:ce:15:38:81:36:7f:8a:4b:1f:a0:51:dd:2c:6a:
d9:43:95:c4:61:00:c7:7b:be:06:26:f0:37:8a:d3:
23:5e:f4:82:3b:96:5b:e1:73:95:1e:70:25:82:28:
62:55:94:80:f7:25:ad:c2:c4:16:99:a5:b7:5f:f9:
77:c8:20:62:04:09:3d:0f:e6:56:3e:85:ae:8e:ec:
55:fa:c6:73:bf:19:2c:08:d8:79:76:35:78:8c:32:
60:10:68:27:05:0e:b5:e1:7a:27:28:dc:32:4d:ed:
8f:c4:80:2d:6b:44:f5:e6:7c:15:2b:b0:28:0f:f0:
8f:fc:9d:c5:28:e5:5a:9a:d8:b1:66:9b:cc:c3:c9:
b0:6c:dc:db:83:05:d7:89:42:eb:3e:a6:c7:5f:d1:
5d:33:a6:96:fa:a7:0f:af:05:95:bf:2a:d3:0d:4a:
51:36:93:57:b2:2e:17:f3:04:24:4b:21:55:5d:5e:
ff:a2:e1:9b:35:a8:bf:fe:14:e4:54:01:8e:f3:81:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:EF:E6:41:58:44:67:9F:C9:F3:BA:EB:83:C9:84:01:F0:B8:9D
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8f:79:4e:63:bf:d0:91:48:57:17:9c:da:86:2c:7b:bf:ff:
20:41:28:1c:c3:b1:f2:b3:60:4b:72:31:e3:7c:45:f9:d4:8e:
ee:82:9c:ac:9f:b2:6c:de:a3:56:34:b3:fc:5f:f8:98:eb:42:
cc:d9:f8:1d:a1:f1:db:cd:d3:5e:c8:b6:94:a4:c4:ad:66:37:
8f:16:25:9d:f1:ef:d9:e2:e9:f8:cc:03:fa:ad:c8:87:2f:75:
eb:a9:d7:41:44:c6:87:e0:9a:11:27:bf:f5:be:44:f4:30:89:
9d:6c:f5:22:55:42:62:cf:b1:1d:ae:e5:a4:91:e2:b0:04:c2:
49:58:54:f0:c8:8e:c6:e2:09:46:69:79:d6:e0:95:39:83:05:
e3:1f:a9:ba:f6:f7:d2:9e:6b:8c:01:d8:27:88:4a:e8:4a:55:
ea:28:fc:1d:fe:ab:bd:2b:f1:47:c7:98:9d:03:db:30:12:63:
1c:74:82:2e:a1:f3:ce:78:31:50:d9:dc:cf:75:ca:c8:42:e6:
3e:25:09:d0:c9:aa:07:73:93:de:36:d6:73:0d:38:fd:5d:84:
03:c0:8e:ea:54:37:9c:a9:72:bf:40:30:1b:68:51:40:a2:44:
a2:e1:77:1d:d8:9a:3a:6c:b0:29:fa:c0:af:52:d8:21:b0:3e:
bf:17:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:26 2026 by rpki-client