Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: VaVVQ594Q/egVlcrx8GMTVlCcEeNSWRdn1MCPyv4Fow=
Subject key identifier: F2:4E:F8:26:B9:E5:07:68:83:8E:6F:7B:35:DE:98:F4:9F:81:23:2A
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 019F1453C3C61D24A4DBAE6BF650C7F3997D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 17:01:01 +0000
Manifest this update: Mon 29 Jun 2026 17:01:01 +0000
Manifest next update: Tue 30 Jun 2026 17:01:01 +0000
Files and hashes: 1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: M/DVJY/p3EH48DJtj0GUuF997oaUuutogyxvXrGZO4s=)
3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:c3:c6:1d:24:a4:db:ae:6b:f6:50:c7:f3:99:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jun 29 17:01:01 2026 GMT
Not After : Jun 30 17:01:01 2026 GMT
Subject: CN=f24ef826b9e50768838e6f7b35de98f49f81232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:14:e5:6f:f3:5b:11:ca:d0:b4:c2:67:80:
08:8f:18:e2:35:21:f6:a9:9a:8f:4f:be:9d:a7:e1:
da:ca:ef:dd:2b:bb:13:1c:1d:83:78:b3:26:f4:2e:
d3:4b:34:07:c6:0c:ee:f3:fc:83:3e:e9:28:26:14:
6e:03:60:40:16:35:ce:be:02:08:e8:13:fa:32:ee:
cf:08:61:97:f6:20:c1:14:41:c1:a0:55:f4:30:ab:
0e:26:01:3a:f5:63:24:5b:83:b1:97:5c:5e:f7:9e:
09:65:30:bc:57:ff:d9:ed:32:91:4c:da:4f:1c:9a:
a0:6d:09:bf:ba:2d:2b:14:10:3d:57:8e:19:f6:12:
68:07:0a:cc:f2:e8:68:77:89:59:51:ed:e9:80:b5:
0a:df:87:f1:98:fa:79:2f:22:31:65:25:b0:9e:be:
5c:76:58:5e:fd:10:35:de:d9:32:10:99:e6:c2:24:
9c:38:a3:f3:5a:24:3a:2b:70:8e:00:15:bd:dc:dc:
24:e9:1a:30:60:a8:c6:e4:81:99:97:6a:f4:f2:13:
40:ae:04:33:66:07:df:2e:91:01:1f:bc:b5:b0:51:
7c:c5:52:ac:dc:1d:05:de:38:82:6f:c3:1f:b8:a2:
92:f5:14:e8:09:df:6d:90:84:38:10:08:43:f0:15:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:F8:26:B9:E5:07:68:83:8E:6F:7B:35:DE:98:F4:9F:81:23:2A
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:c9:42:07:21:98:fc:a4:db:48:48:dd:43:90:84:75:57:
eb:eb:8d:37:53:97:88:85:fb:81:06:a7:b2:42:9d:45:a1:a5:
1a:5d:eb:bf:35:a3:36:ab:26:22:6a:d9:73:77:be:e2:10:3c:
03:03:f3:2e:ec:fc:09:4b:85:45:55:52:58:25:e0:c1:d7:99:
a2:ce:78:da:f1:cd:ac:26:2e:d0:34:68:69:0d:06:cf:ca:e5:
05:3a:9f:66:24:2e:05:60:67:61:45:57:66:eb:2e:3c:05:1e:
07:c8:8a:37:69:25:a3:ef:22:80:ee:ab:5f:bc:4a:20:cd:25:
d5:0d:c7:3c:67:74:a6:e5:4c:b6:65:b0:5e:db:d8:b4:82:23:
96:67:b8:a3:7a:9b:f2:61:88:06:a4:20:3a:a1:a4:4c:b6:29:
3f:88:72:b5:95:19:af:d9:1e:e1:eb:fa:e8:04:22:92:ec:21:
c6:5e:f1:e3:2d:4f:c5:00:2b:22:33:3e:ba:9f:50:b0:2e:a2:
43:4e:3d:ae:b1:50:b0:3e:69:d4:df:f1:6e:b3:28:45:83:c8:
8f:47:f8:ba:c2:c0:88:b5:d8:d7:ed:e9:a9:c5:94:43:f4:6a:
2c:28:be:94:d9:f5:8f:96:b1:4c:45:86:ea:f4:87:7e:4e:f0:
07:14:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:33:04 2026 by rpki-client