Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: U349J4rgx6Ov987aAdTTGXGGntskMTIw5bJj23GVadg=
Subject key identifier: A9:5A:39:17:E8:D9:E4:F5:E7:3A:40:C1:85:6A:9B:FF:5E:38:51:92
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019F118A49D8969B77D1CB794EFCE0A45FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 04:01:43 +0000
Manifest this update: Mon 29 Jun 2026 04:01:43 +0000
Manifest next update: Tue 30 Jun 2026 04:01:43 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: eiJxTM2T1CdxnKVN1vNhUCJmf0uBiqtT3p7DQk3VrYg=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:49:d8:96:9b:77:d1:cb:79:4e:fc:e0:a4:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jun 29 04:01:43 2026 GMT
Not After : Jun 30 04:01:43 2026 GMT
Subject: CN=a95a3917e8d9e4f5e73a40c1856a9bff5e385192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:b7:80:18:69:39:3e:2a:92:4e:3c:57:71:
bc:e4:65:6c:93:15:97:04:21:c2:8a:db:bf:24:30:
63:73:d4:03:41:af:99:8c:e5:f9:87:00:9e:bb:87:
ac:67:33:16:11:5e:b3:74:99:15:ab:2f:17:c6:1c:
65:58:58:ae:19:70:e6:1d:f0:38:cf:d8:77:1f:b1:
fc:f7:d8:dd:d6:60:a7:d4:be:c4:66:c2:d0:6c:2a:
bb:90:25:0b:ef:fe:31:90:d9:e5:ca:d6:4e:9c:4a:
58:2b:86:17:91:ef:f0:eb:db:ff:73:fe:be:c1:0a:
51:40:e8:5b:9d:4b:2c:66:a6:0d:ca:2d:03:ed:c4:
26:18:07:66:80:1b:71:e5:4f:05:25:fc:6a:22:34:
6d:f6:4d:b5:c1:78:f4:b5:8d:54:4e:c1:ea:e3:9e:
8e:b3:36:99:ec:87:91:17:ee:5e:6e:9d:df:8a:b9:
2c:63:d2:9f:3d:03:ae:c3:46:4d:63:73:e6:95:53:
6c:70:dc:f8:ce:43:98:2c:66:e6:56:6e:18:84:19:
bd:ef:a1:cc:43:07:e8:ce:8c:51:2e:b8:51:84:d5:
5f:b6:71:ba:a4:e2:9d:c7:eb:b1:0d:ab:68:4c:56:
0d:ee:5e:66:ab:5e:64:fa:cb:d2:74:44:6d:94:1f:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:39:17:E8:D9:E4:F5:E7:3A:40:C1:85:6A:9B:FF:5E:38:51:92
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:ce:42:aa:4a:ce:8d:25:dd:e8:04:ec:79:92:57:8d:b3:
cf:2f:dc:db:ef:d3:0a:93:66:2a:79:fd:d4:26:f9:65:b1:5c:
64:0c:02:a9:35:3a:86:15:e0:5b:c5:8b:9b:65:1a:03:58:a7:
06:0f:da:b6:e3:9c:53:c5:2c:e2:e2:03:a0:f5:77:dd:64:fc:
29:a3:b7:c4:4a:34:68:f1:e0:42:64:e2:fe:78:2f:98:c1:37:
c6:51:5a:34:c7:ff:cf:9d:c0:45:10:15:38:d9:36:ed:1c:a1:
ca:32:74:11:f7:11:aa:23:6a:0a:48:bc:ef:d1:90:20:62:23:
06:a1:d9:31:29:f8:dc:be:e5:19:b5:f7:15:18:71:da:89:87:
92:fc:e2:b4:26:3e:ce:77:6b:ac:e7:51:1c:a8:65:8d:a7:91:
31:b3:5b:57:ab:92:38:40:f3:0c:b0:a6:eb:33:01:41:ed:3b:
49:25:48:5d:98:9b:e1:b4:60:8a:aa:fd:89:06:ae:76:2d:eb:
e3:de:a5:5f:26:ec:94:9f:cd:05:62:b2:e3:60:fa:30:a4:a0:
80:59:90:21:54:07:9d:6b:ca:6f:be:ce:95:14:9b:f6:43:37:
21:1e:ea:3b:94:b4:dd:0f:df:b8:7b:f8:40:c6:9c:cd:10:1c:
e3:07:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:22 2026 by rpki-client