Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: oTnYBgNM/R8WRJXHHN2Y3kWlAjrT5/Bv/AmEo47hcIQ=
Subject key identifier: 21:D2:65:CE:3D:A9:58:BA:FE:71:8E:61:DF:B0:0A:FC:86:45:3F:E6
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 019F1754BB824A774252F28BF672326C5A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 0BB9
Signing time: Tue 30 Jun 2026 07:00:56 +0000
Manifest this update: Tue 30 Jun 2026 07:00:56 +0000
Manifest next update: Wed 01 Jul 2026 07:00:56 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: ispIVUfbXMSvD+GZTZUopaXSKD+JZPKIYgE0QbY1COo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:bb:82:4a:77:42:52:f2:8b:f6:72:32:6c:5a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Jun 30 07:00:56 2026 GMT
Not After : Jul 1 07:00:56 2026 GMT
Subject: CN=21d265ce3da958bafe718e61dfb00afc86453fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:e1:08:ea:59:1f:45:14:ad:84:88:56:f8:
15:d5:e8:0d:2a:67:d2:1b:47:ea:13:b0:f6:f6:c2:
08:22:c9:3d:f9:56:99:06:98:9a:d7:e0:b7:51:69:
52:22:a0:a6:5e:03:18:48:48:be:36:15:99:a4:57:
eb:14:c4:05:ee:59:6b:b9:5c:7f:24:78:69:a9:ab:
2b:eb:93:0b:db:a3:fc:b7:c6:13:65:cd:37:90:f5:
44:8b:f2:f1:26:5d:e7:39:10:6a:b2:b3:8c:0b:00:
33:2f:c5:c1:07:a7:23:c0:15:1a:b6:89:41:b8:c9:
22:f0:23:47:03:58:e4:a6:e3:4c:d7:d0:5d:d6:09:
b4:1a:24:db:cb:ae:a4:bb:f4:89:f3:3e:85:27:30:
88:8d:d1:63:84:4d:b9:11:d1:2c:55:69:1c:e3:6e:
10:e9:ea:6e:9a:db:54:3f:d7:6e:f5:17:29:3e:70:
da:6e:ae:f2:e9:c0:00:01:85:4d:aa:46:6b:21:c7:
93:68:88:a7:73:80:6c:a3:96:f9:b9:77:d0:a7:bb:
d9:10:b4:f9:0d:bf:9e:29:c0:55:33:cb:3d:a4:a2:
e3:c5:38:ea:96:c6:0a:2c:55:9b:a2:fb:f4:74:32:
fc:bd:da:40:ee:f1:6a:98:89:02:dc:84:54:1b:6a:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:65:CE:3D:A9:58:BA:FE:71:8E:61:DF:B0:0A:FC:86:45:3F:E6
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b7:47:88:50:c2:e6:f0:a4:ec:87:82:3d:68:ac:57:c4:61:
96:d6:c5:8d:23:19:2b:49:80:fa:1c:98:38:e9:1d:fa:90:ea:
68:ad:e9:d4:e8:55:0f:12:9e:54:c6:01:5a:d4:5e:b1:ed:7d:
b4:0a:d9:05:d6:b9:12:cc:d9:10:00:0a:e6:86:64:0c:fa:74:
64:2d:eb:37:7c:b0:64:be:d0:3e:3a:0e:41:94:1e:55:a5:11:
95:5a:2c:48:09:b4:34:6b:13:1f:96:0a:71:09:5b:19:3c:1c:
cf:93:76:7e:da:b8:0f:d7:ff:cb:9c:0f:fd:40:b8:6b:0a:c6:
4a:8c:c7:23:c4:28:9c:bc:2b:03:a1:7f:2e:bd:ad:d4:ff:d3:
85:97:b4:8c:83:64:66:51:fd:18:db:f4:b4:9f:12:58:3b:5f:
c6:c9:78:85:2b:84:6d:f9:b0:41:62:6a:cf:76:30:ae:35:20:
a3:f1:23:3a:f4:b8:05:a2:da:52:d9:6c:4c:28:37:f7:08:51:
fd:34:05:34:40:39:d7:2b:a4:22:89:4f:b8:47:80:54:14:4e:
fa:ee:07:c5:e4:0f:2f:97:2e:6c:dc:96:9a:87:7f:86:b0:7a:
11:80:e5:d0:d1:77:58:4e:af:90:8d:5f:ff:9e:bc:dd:bf:7c:
b9:ad:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:22 2026 by rpki-client