Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: elTYPBODItlkfZmEzrsuJ32sUbmQkmT91ZAipS0RL3k=
Subject key identifier: 65:6A:5D:0A:E5:30:FD:E9:02:F4:01:62:88:1C:31:5E:DC:4B:3B:9F
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019F17F931FD60AEBC73CA9E85F017B2B334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 06A5
Signing time: Tue 30 Jun 2026 10:00:34 +0000
Manifest this update: Tue 30 Jun 2026 10:00:34 +0000
Manifest next update: Wed 01 Jul 2026 10:00:34 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: k3eskg+EIiKGB+e+Pm4ltI0MpqWQCXinqIeHzWS49/0=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:31:fd:60:ae:bc:73:ca:9e:85:f0:17:b2:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Jun 30 10:00:34 2026 GMT
Not After : Jul 1 10:00:34 2026 GMT
Subject: CN=656a5d0ae530fde902f40162881c315edc4b3b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:9f:27:5c:70:3f:e7:ca:31:31:2b:02:bf:
ff:67:be:a8:11:4c:0e:d0:0d:79:83:e9:df:6c:98:
91:09:3b:49:16:4f:65:a1:2a:73:f3:6f:db:f8:f9:
ae:62:83:af:88:7c:ec:0d:bb:67:b5:86:3e:ae:27:
45:b9:4f:84:3e:ed:4b:e7:f5:ca:70:ce:4d:77:8d:
0c:f7:cd:5d:b6:e6:cd:73:c4:c6:d9:6a:5d:1b:11:
d0:1b:2d:44:0c:4c:71:cd:f8:54:60:06:97:42:3d:
7c:e8:2c:ce:86:4f:8a:c6:65:29:8e:e6:ab:d3:0a:
a5:41:1e:3e:72:79:0f:aa:e7:00:68:68:db:70:04:
d9:68:e5:a0:bd:2f:93:6f:45:65:6a:80:2d:3a:04:
28:c5:6d:87:24:02:41:3a:6b:80:d4:fa:ed:39:5f:
83:07:92:e9:ea:c0:1d:9d:a7:b6:32:f7:67:ea:f8:
0b:97:f6:04:2f:b5:b8:c3:de:dc:80:37:0d:b8:f5:
a7:19:f5:03:50:f1:8d:33:90:57:41:0e:73:78:1b:
8d:6e:5c:69:43:f2:78:0b:41:8b:8e:0a:1f:8a:20:
be:56:27:30:8a:a4:1f:e1:0e:96:a9:15:0a:c5:35:
a8:3d:1c:69:8c:7d:cb:c5:0e:77:96:a5:65:26:4d:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:5D:0A:E5:30:FD:E9:02:F4:01:62:88:1C:31:5E:DC:4B:3B:9F
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e4:33:1b:e0:cc:21:49:13:89:ba:cf:81:42:a5:9b:6b:bf:
10:2e:e7:80:d1:d2:47:f1:a3:81:dd:98:c7:3c:64:f8:81:24:
cb:86:a6:96:7c:7e:b5:7e:d6:86:77:30:99:c0:f8:d7:b4:ad:
76:96:2a:44:ed:fd:8a:f8:8d:cc:ce:fc:53:c6:70:1f:cc:26:
f2:73:2c:53:f0:f5:35:5b:8a:60:6b:e9:45:2a:e0:8a:52:ac:
97:d3:f5:f1:f0:37:51:8f:1e:4f:c1:5c:99:0b:6b:66:c3:f2:
68:57:e0:f0:17:7c:85:69:19:6a:d6:c7:8a:ad:f1:4a:d6:8b:
8e:63:5a:59:a5:ec:44:8a:32:07:8f:02:27:2d:d7:57:23:ec:
82:bc:4f:f1:35:08:b2:19:cd:86:34:bc:cc:68:c8:ad:08:9b:
9a:a0:a0:e4:fe:cc:ff:77:77:34:80:65:34:52:9b:1f:cd:38:
e3:4f:95:1e:03:a9:f7:4e:e8:28:7e:a8:4e:6a:a4:dd:1e:fc:
27:22:5d:14:9f:d4:3f:da:e7:41:0c:e0:87:1b:2b:5f:72:0c:
42:d3:ee:7d:46:de:cb:7c:d5:57:4d:25:f1:45:a0:a1:35:20:
63:78:29:ae:06:7f:a0:77:dc:bc:6f:15:b2:1d:66:56:28:69:
36:7e:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:35 2026 by rpki-client