Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: HqpYOFFHWX+K5vtgooZcIMA46UoTOzZTix9/k8gM5+s=
Subject key identifier: E2:A5:99:3B:4F:4D:8E:81:9C:C3:C2:FA:BA:1D:5B:84:24:3F:9F:36
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019F18D6E979295A3900FF0FA30F1810E025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0BAE
Signing time: Tue 30 Jun 2026 14:02:45 +0000
Manifest this update: Tue 30 Jun 2026 14:02:45 +0000
Manifest next update: Wed 01 Jul 2026 14:02:45 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: QMfhhOYT52vO7zqRt3gSmjMcIcjirBG0J0oHA5D52QY=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:e9:79:29:5a:39:00:ff:0f:a3:0f:18:10:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Jun 30 14:02:45 2026 GMT
Not After : Jul 1 14:02:45 2026 GMT
Subject: CN=e2a5993b4f4d8e819cc3c2faba1d5b84243f9f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b1:56:db:46:40:a2:c6:41:b8:0a:fe:32:00:
e0:c8:15:d7:67:cb:e0:69:b9:bf:36:a4:e5:da:71:
d8:df:54:02:af:82:e2:ed:d5:31:2d:46:f2:3d:2e:
40:85:5a:6d:e0:a9:82:13:54:42:da:8f:4c:d4:ff:
46:16:ad:20:41:80:f7:12:70:54:2e:34:f1:d0:7c:
85:84:f7:af:67:6d:36:07:e0:4f:6b:71:88:a2:a2:
9d:74:ec:70:88:b9:2b:44:ad:62:fe:94:88:00:5d:
14:ae:69:e8:5d:95:7b:af:86:cb:6d:f2:d6:80:9b:
60:ad:0f:40:84:eb:1e:ec:3d:d1:47:16:67:e4:19:
b2:0e:bf:94:9c:e5:ad:c2:c1:e7:13:69:b7:77:51:
c7:89:ee:13:31:e0:be:b1:3d:ab:88:89:db:d3:a6:
36:b9:39:20:1e:d7:11:29:f1:3d:59:43:c5:8c:da:
37:e7:ae:68:43:26:81:02:9d:21:57:ba:a3:51:f1:
89:11:62:5a:a1:df:fd:b3:c4:9e:6b:39:bb:7c:09:
15:34:b1:82:95:e5:f4:de:f2:b4:4c:6c:a6:49:25:
b4:14:3e:5c:bf:0c:b7:94:7a:88:32:99:35:a6:4c:
17:d9:5f:50:1d:0a:fe:ed:99:81:f8:bc:1b:40:f2:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:99:3B:4F:4D:8E:81:9C:C3:C2:FA:BA:1D:5B:84:24:3F:9F:36
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:58:83:f2:d2:a5:ca:4f:b9:00:76:26:59:a1:dd:8e:45:
a2:d1:52:9a:d6:cd:d0:b1:0c:91:93:24:08:32:03:0c:8a:04:
bf:3f:0f:15:2e:2a:cd:04:5a:8c:58:d9:46:dd:b7:ad:b7:7b:
e4:76:b9:e1:3b:85:94:46:57:03:38:a5:90:57:58:ba:a6:c4:
22:3e:30:13:cd:63:30:b2:e0:25:d1:79:be:13:42:32:72:0e:
dd:7e:5f:86:79:75:0b:85:65:91:49:8b:aa:21:eb:e4:a2:b5:
df:40:81:e8:a0:b1:89:02:3c:7c:5e:2d:45:07:bd:df:cb:3d:
c9:c3:28:67:be:f7:a9:f4:e2:49:93:6b:c5:7f:ac:8c:0b:8d:
4e:1f:9c:5f:ba:ea:81:84:4f:c7:af:90:80:7b:54:2e:ab:36:
26:b1:00:37:3b:81:84:53:82:41:c3:a8:39:91:a0:be:09:83:
7f:0f:cd:dd:95:75:67:54:db:8f:b7:90:13:60:ff:d8:43:08:
e9:65:51:6d:b6:a9:1c:8d:e3:fb:0c:6f:62:c6:71:8e:39:a4:
e2:fa:a5:a8:59:d7:d2:45:f8:a1:e9:94:45:54:86:55:0e:db:
d0:4d:23:ea:a1:84:27:9c:3f:09:27:3a:19:85:1c:8a:91:23:
8f:4f:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client