Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: zZVW+/S/ZyO3GuuzyX3/xIIzQt29ZAX40pcxI3gSOR8=
Subject key identifier: BC:A7:A0:BF:C5:8F:C5:7A:59:D9:74:D6:0D:AD:87:40:77:8D:48:32
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019F1830BCE8AA19F82AB9E1F58C67EB27F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0656
Signing time: Tue 30 Jun 2026 11:01:14 +0000
Manifest this update: Tue 30 Jun 2026 11:01:14 +0000
Manifest next update: Wed 01 Jul 2026 11:01:14 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: sRXueHHEqoPljNccPafX3Ik0qKUOlX62Z4cCStAQkYk=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:bc:e8:aa:19:f8:2a:b9:e1:f5:8c:67:eb:27:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jun 30 11:01:14 2026 GMT
Not After : Jul 1 11:01:14 2026 GMT
Subject: CN=bca7a0bfc58fc57a59d974d60dad8740778d4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:49:56:8a:39:0d:5c:d2:df:aa:21:53:a0:
98:44:b7:d6:ad:94:66:8e:01:5b:eb:a9:5a:ab:eb:
28:8d:ba:9c:c2:6e:0a:d9:14:be:b4:50:d1:90:06:
cd:40:0b:26:0d:c0:08:1f:d4:52:eb:65:03:d3:a5:
a3:a1:a7:1a:3e:3b:e7:f3:6b:f1:44:c8:28:7d:cb:
c9:e9:4c:af:1d:9a:f7:46:83:3c:8f:ab:1a:48:b7:
9e:84:43:92:3d:a1:94:0c:e2:3a:88:0f:b3:4f:28:
ac:18:18:24:94:6f:31:ca:9b:49:c5:ee:3b:ae:5f:
a1:d2:ef:9e:f3:be:0e:99:f1:e4:87:90:2f:d1:c6:
1e:ba:94:56:41:9d:95:16:a1:18:23:f3:6d:85:60:
ca:6c:e1:19:ce:9d:22:3c:ac:c1:57:df:bd:be:17:
39:c2:ac:d1:68:c5:e0:81:ef:bd:52:d7:3a:9f:43:
9b:6c:17:af:10:81:ca:2b:11:9e:ce:96:c5:82:6d:
8a:38:b9:9e:0e:a6:99:35:7a:f1:32:38:b1:bf:e0:
ec:d5:2d:7c:bf:9e:38:f6:69:0b:d9:7c:20:e4:aa:
fb:cd:9e:a6:56:9b:69:ec:10:9a:4a:6c:f6:97:83:
a2:af:5d:b5:aa:a1:38:0f:8b:73:ae:17:f4:8b:f8:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:A0:BF:C5:8F:C5:7A:59:D9:74:D6:0D:AD:87:40:77:8D:48:32
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ff:05:2a:36:ab:cb:95:f0:78:54:15:34:fa:28:52:e6:ed:
91:74:6f:2a:0c:3c:6f:a0:2c:8a:b2:61:a7:83:7d:04:a1:20:
6a:d2:0b:08:1d:51:b5:e1:6c:05:7f:78:95:7e:c0:f5:56:5a:
13:53:74:97:89:fc:bc:4c:e0:30:70:8e:fa:27:58:e8:15:1f:
c5:91:1b:e9:f9:7e:58:cf:12:70:af:dd:02:29:a1:a1:3b:da:
98:13:3d:71:90:a7:1f:d9:f7:dd:d8:94:21:50:bd:57:65:6e:
27:63:f4:be:40:79:bd:29:4e:48:32:9d:7e:a4:13:34:cf:48:
ed:51:9d:d9:cb:a5:a6:f8:dc:d0:0e:84:46:2a:59:e2:d1:bb:
07:b1:80:0e:96:09:ce:00:d0:5d:38:9e:50:69:b7:ce:1b:41:
48:58:1c:09:4a:62:d5:46:50:57:f7:d8:e3:8e:a3:ca:b9:a4:
f5:59:5e:d9:e9:e3:ae:27:de:34:d3:93:61:99:b9:f5:90:71:
3d:3b:9c:e9:9a:58:08:93:fb:6f:d5:25:92:de:64:64:93:25:
c4:d1:58:02:1a:14:e6:9d:4a:25:a9:ae:a4:47:77:6c:3e:d9:
40:87:24:c0:6d:00:17:a0:9c:8c:3e:a5:fc:36:78:bf:9f:20:
bd:70:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:25 2026 by rpki-client