Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: 7L9Q4p3YegGFt/ZnbY3EgKymYsfygmQUM8ndhMHqYQg=
Subject key identifier: 01:9A:F2:31:68:CC:35:F7:96:22:2C:5E:E7:8C:18:76:02:C9:72:B1
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 019F178C0ED0B63C35BEB6FA3E45ADD89CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0C41
Signing time: Tue 30 Jun 2026 08:01:22 +0000
Manifest this update: Tue 30 Jun 2026 08:01:22 +0000
Manifest next update: Wed 01 Jul 2026 08:01:22 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: rAqu0h+nxamWprnBXUtrz97LMOUFShBpXBcLCbkNjfU=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:0e:d0:b6:3c:35:be:b6:fa:3e:45:ad:d8:9c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Jun 30 08:01:22 2026 GMT
Not After : Jul 1 08:01:22 2026 GMT
Subject: CN=019af23168cc35f796222c5ee78c187602c972b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:10:2b:bd:a1:3c:4b:25:35:11:14:be:92:
f0:4c:91:fd:b9:fc:4d:bc:95:84:3e:fe:b9:f7:c4:
e5:18:6d:7b:5d:a4:27:9a:96:91:a9:8e:64:f8:1e:
15:8c:ce:a5:c5:81:ee:5d:0a:5f:0b:58:b4:76:97:
fb:af:33:c2:8f:9a:17:e2:59:02:a6:08:9d:d1:b9:
cd:c4:ce:9d:bc:b7:e8:7b:e2:c1:48:36:ba:55:05:
a1:55:be:b0:11:0a:dd:56:6a:a8:bb:0e:70:b3:91:
a7:3b:ec:7d:f8:33:39:57:f1:29:cb:a5:0b:04:0a:
3c:e1:f9:68:c3:ec:4d:c7:4b:61:04:86:94:1a:f2:
af:39:f4:c6:13:72:78:1f:d5:22:1e:85:37:6b:66:
0a:8b:ea:c0:a5:1d:53:18:e8:fc:c5:0c:e6:5d:ef:
1b:08:c7:79:6e:50:cd:7a:18:4d:75:67:1c:9d:6a:
da:11:51:87:d8:ca:f2:0b:a7:99:f2:83:45:ee:ce:
55:5a:ff:03:75:69:32:f4:c6:cd:e4:f3:b7:c9:d1:
e9:0c:39:1e:42:f6:0f:d1:74:83:e4:9a:ed:6f:20:
8a:19:3d:50:ed:87:8b:4d:1c:df:08:4a:42:c5:fa:
52:e6:7a:9b:9f:7a:a3:43:a2:e2:9f:de:ea:e2:cb:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:F2:31:68:CC:35:F7:96:22:2C:5E:E7:8C:18:76:02:C9:72:B1
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:02:b1:bd:2b:31:78:0d:6c:98:74:c0:bd:16:11:a4:ef:
63:3b:fe:b7:af:3c:9c:6c:1e:f6:1f:91:04:22:d9:fd:85:6d:
5b:0b:c3:a0:22:da:16:d2:df:6d:d3:62:62:4d:d0:41:50:25:
68:d5:de:c0:08:7f:f4:fa:0e:fe:35:21:15:fb:56:f4:8f:a3:
eb:74:0c:96:32:3c:54:db:7a:7f:ff:dc:88:a9:fc:e4:07:25:
2f:88:e4:af:e0:b0:c0:50:94:8b:a9:d2:88:b9:b8:1f:43:96:
95:5d:b1:10:06:2b:5a:58:8d:4f:46:60:43:db:f6:81:d6:8d:
1c:3d:e1:38:bc:59:8f:a7:89:5a:e0:00:47:63:d0:66:e8:d5:
bb:0e:a9:37:00:7b:14:cb:83:0a:c5:1f:4f:d3:37:0c:91:9b:
5f:72:86:3b:51:f9:87:92:75:31:a3:5e:8a:55:1a:c9:b6:79:
88:af:f4:4f:b7:bb:24:03:15:8c:6d:94:aa:66:a7:09:58:d6:
34:f9:9c:9c:49:40:c6:84:fa:e7:cd:38:3b:43:f7:b3:cf:6a:
0f:d2:17:31:d7:55:e5:46:06:2c:3d:bd:d2:89:9c:95:1d:39:
43:4d:7f:ba:43:60:7e:7e:2d:43:0b:e8:5f:06:ea:8f:52:89:
4d:73:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:02 2026 by rpki-client