Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: iX2CpIQHkTPy9s2NHZWe/3dFxO+3PFtjIU4daLYZ5AM=
Subject key identifier: 08:8A:69:70:6B:8B:99:1C:C3:CD:65:6A:D0:DF:4B:16:BB:10:36:5E
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 019F18D702A980D237D528E205905EA217C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0F9E
Signing time: Tue 30 Jun 2026 14:02:51 +0000
Manifest this update: Tue 30 Jun 2026 14:02:51 +0000
Manifest next update: Wed 01 Jul 2026 14:02:51 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: coivXXROj7Vc9GrvoR5JTTqNFJ1o/QkYFJ/VTVgJm6Q=)
2: KdkSplDy4QjMpE4fLCxjhJLFG-A.roa (hash: GJjKbZNtY1x/kWqwNINR2VUda7Jb8+5oqTMBWfwhVbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d7:02:a9:80:d2:37:d5:28:e2:05:90:5e:a2:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Jun 30 14:02:51 2026 GMT
Not After : Jul 1 14:02:51 2026 GMT
Subject: CN=088a69706b8b991cc3cd656ad0df4b16bb10365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:14:ad:2f:95:c1:3e:c1:84:e9:a1:78:6b:
9f:e8:e2:52:b3:d1:78:ac:c9:59:db:06:4e:c2:d3:
7d:60:ce:89:16:eb:19:06:a0:9c:97:71:f0:67:d3:
5b:a2:2d:a1:08:19:4f:5d:b3:6d:1c:2c:21:22:8b:
8d:c7:53:8a:df:89:f8:e2:88:86:ac:b1:5d:7b:53:
85:00:6f:85:6d:5e:c2:34:b8:9b:62:da:c5:d7:ac:
b0:99:e4:82:89:a7:4b:16:53:0a:9d:9e:a7:67:e7:
17:8f:2e:0b:bb:2d:96:ca:6b:d8:45:bc:cb:b8:64:
6d:66:b9:58:56:18:d8:69:9c:25:5d:60:45:4b:f5:
1d:d5:85:28:3a:d7:27:6c:88:ba:b1:7a:20:85:36:
42:90:a7:0e:91:b2:05:9d:6a:5a:e9:af:35:ba:76:
af:4e:32:92:54:a8:c9:cd:48:c7:36:2b:73:fa:1a:
f1:1e:87:a4:2e:cc:23:34:ce:35:42:05:a4:cc:fe:
57:04:e2:ba:a4:94:2a:ee:0a:f3:63:91:9c:da:b6:
a3:d8:d1:58:93:92:7c:31:9d:2c:cd:22:ec:d4:aa:
ac:1d:85:e8:08:f0:7b:bb:49:87:6a:1a:21:57:37:
48:cf:d7:58:4d:8e:a8:79:89:2c:96:b5:f9:ce:21:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:69:70:6B:8B:99:1C:C3:CD:65:6A:D0:DF:4B:16:BB:10:36:5E
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:37:16:78:ee:86:0c:1a:c2:c2:62:c4:93:d4:79:20:e6:
a1:5e:ff:9c:1b:77:15:64:70:65:0b:b8:4c:46:ca:58:c3:71:
9e:93:b9:11:e6:6e:60:86:37:0d:86:0f:71:5a:f4:0f:3a:42:
63:e3:e6:a1:36:54:3e:fc:0d:06:74:59:f9:81:b0:9b:94:11:
3b:a7:36:54:bb:2b:6c:b4:bb:88:8c:0f:a3:44:e9:cf:92:52:
8f:38:9b:61:48:30:ff:be:8f:77:01:37:59:0b:af:0d:c2:43:
08:62:dd:e1:9e:fa:3b:4a:0a:68:f5:d2:e3:b2:03:c6:ee:d3:
f4:21:03:3f:4b:11:14:b8:00:31:4a:d9:ad:f4:4c:b5:40:07:
dd:69:5e:d5:5b:ae:48:f0:a5:c7:65:ac:48:5f:61:6b:39:6f:
4e:66:3a:34:fa:2a:6d:34:99:15:27:49:09:7b:81:ad:43:93:
e2:be:91:c4:f4:fe:b4:00:44:27:f5:11:86:cf:2f:c8:b6:93:
d7:2d:f5:14:49:f2:59:1e:f9:ae:73:6d:b4:b5:38:ec:8a:0a:
68:73:24:91:02:2e:10:b7:33:ac:ea:67:78:94:9e:55:76:b9:
99:2a:7d:ff:29:de:f6:98:5d:78:7f:54:65:b0:23:ee:e2:c5:
35:91:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:17 2026 by rpki-client