Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: hyjzENxhgeI9b7rHt0b5pkEN53+ItcW+z5YcL1OvNWs=
Subject key identifier: 17:BC:D2:AF:9A:1A:68:B4:27:85:17:74:15:3C:F4:0C:3C:1F:80:B6
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 019F1943F726941FBE31A0DF0ADCFBF28FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0EFD
Signing time: Tue 30 Jun 2026 16:01:52 +0000
Manifest this update: Tue 30 Jun 2026 16:01:52 +0000
Manifest next update: Wed 01 Jul 2026 16:01:52 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: 5+tTi198OzdhOTUsWBk6yQnq3dKEmsDja8cV6bySiXI=)
2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f7:26:94:1f:be:31:a0:df:0a:dc:fb:f2:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Jun 30 16:01:52 2026 GMT
Not After : Jul 1 16:01:52 2026 GMT
Subject: CN=17bcd2af9a1a68b427851774153cf40c3c1f80b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:13:40:80:fa:54:18:24:1f:87:59:36:22:
c1:25:5e:ba:73:8a:16:34:b5:6d:06:d7:57:4a:db:
6b:88:9c:15:39:e9:50:14:70:7b:be:51:fa:15:0a:
39:f9:f2:9c:39:ff:4f:47:a9:02:49:80:b1:fc:e1:
df:c1:39:fd:0e:24:3c:fd:8b:e6:f7:8d:15:95:f0:
7f:b0:66:93:5c:57:5a:90:c6:54:98:c3:30:26:76:
3d:71:d7:2f:ee:6c:9c:e4:32:fc:50:af:36:43:72:
3d:3c:6c:17:49:90:40:bd:d0:26:bb:90:9c:b9:53:
e4:67:df:fd:52:ce:e8:ed:3e:e2:36:c2:52:d6:6e:
f0:22:84:ca:fd:3e:2a:7e:ec:87:26:8a:3c:b5:72:
a9:22:9b:af:50:f0:6b:8d:66:fe:49:ef:fa:ad:99:
3f:0f:13:f6:2f:8f:5f:cf:86:c1:6e:84:e7:94:93:
90:75:4c:39:96:a3:0f:a3:4b:b1:bf:1d:b3:10:a8:
9d:bc:19:83:a5:26:c1:6f:5f:f2:90:9b:96:ed:47:
df:05:c2:7d:97:35:63:67:cc:00:ce:e4:a9:55:86:
f6:8a:2e:77:55:ea:a0:7c:e4:2b:f2:08:83:e9:0a:
80:48:be:65:26:5f:5e:6e:a8:c3:11:62:00:db:48:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:D2:AF:9A:1A:68:B4:27:85:17:74:15:3C:F4:0C:3C:1F:80:B6
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:b0:1c:ef:12:e6:88:68:3a:a3:11:53:1c:aa:6e:b6:29:
be:83:3c:43:fc:78:3e:d0:98:a0:71:31:dc:bc:ea:a9:cb:07:
8c:25:6c:14:ae:09:45:37:37:0c:97:7e:e6:b4:8c:fa:52:0c:
0c:31:f0:66:8b:09:3a:da:a7:89:72:af:55:fa:eb:8b:21:e4:
92:7c:cb:76:85:49:cc:6d:17:34:8c:ac:9b:20:ba:b4:8e:83:
07:7a:36:7d:97:2a:a9:3e:18:f1:62:f9:d0:d2:ef:df:9a:38:
42:71:64:80:7b:18:8f:ef:27:31:49:28:91:58:00:08:64:53:
1b:de:3c:0b:8c:10:c5:84:d0:d3:ea:2d:98:32:f6:1c:5d:be:
a4:08:af:dc:67:3d:a9:c6:cf:1c:43:01:c3:53:17:80:19:24:
4c:4e:ea:bc:c2:4c:c9:25:19:b4:50:b7:a1:3b:94:ce:13:98:
83:d9:2a:cd:bf:de:c4:8c:1d:67:d5:a0:e0:a1:88:15:eb:83:
d6:05:95:2c:c1:4c:50:de:90:f0:7f:ad:35:ba:46:8e:cf:ac:
e8:42:60:e0:b7:94:a7:7e:ce:a0:10:c5:6a:96:b1:1f:52:3b:
f5:2b:a9:04:4b:03:e5:a2:2c:b3:b6:b9:88:9a:e9:58:9b:ea:
8e:7b:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:39 2026 by rpki-client