Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: 1B7SvxLjKuXtqEch6XHN4d3muu2GXgqDD5eKo2Qw2Wc=
Subject key identifier: 59:10:29:73:58:CD:70:2F:0F:78:18:74:C6:75:33:FD:83:04:0D:B8
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 01A001DD3D6C632B5FD06BF2D4C690591FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 06CF
Signing time: Fri 14 Aug 2026 20:01:11 +0000
Manifest this update: Fri 14 Aug 2026 20:01:11 +0000
Manifest next update: Sat 15 Aug 2026 20:01:11 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: zi1srNJv7xryykJIN7xibOH8bTo8SqNBGhoqnhmEUAI=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3d:6c:63:2b:5f:d0:6b:f2:d4:c6:90:59:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Aug 14 20:01:11 2026 GMT
Not After : Aug 15 20:01:11 2026 GMT
Subject: CN=5910297358cd702f0f781874c67533fd83040db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:05:a6:f1:c7:91:54:43:17:fd:87:a6:ac:
e8:52:9d:92:c9:aa:a6:77:5e:08:a9:b3:7e:ae:2a:
e4:3c:19:d0:8b:43:a8:f7:c3:81:56:50:1c:2b:09:
66:5c:f0:e3:7b:35:86:1a:f6:af:5b:cc:3d:77:51:
e2:f5:28:dc:1c:c4:ae:cc:12:e1:44:08:25:58:f6:
d0:d1:de:0c:41:e5:ef:38:14:f0:ed:b2:01:f2:4d:
c7:3c:dd:56:cd:72:9c:98:fe:8e:7f:2c:16:e1:a6:
54:2d:ce:68:2d:96:2c:95:5d:8c:9d:1f:19:25:b5:
d0:12:61:14:93:e1:d8:fa:96:3d:3f:14:50:11:95:
60:95:17:31:5c:28:e0:99:b4:71:16:9c:51:10:d6:
e2:c6:40:e8:c8:8d:57:a8:69:6e:bc:3a:b5:fe:d3:
c5:0e:a5:20:4d:8f:0f:06:d6:5b:13:5a:8a:17:3b:
c8:b3:c8:25:53:be:a8:7f:af:45:d7:5c:e9:df:af:
c4:fe:9c:44:88:74:69:a0:c5:3c:00:14:45:5d:8f:
6b:2e:ab:6f:50:d8:5d:a3:f6:35:c0:a5:0c:b5:43:
59:a2:c3:a1:69:86:7c:eb:5a:fc:cf:08:a5:25:f4:
89:d3:dc:11:2c:b8:c2:e1:4d:f8:91:f2:79:e2:9a:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:10:29:73:58:CD:70:2F:0F:78:18:74:C6:75:33:FD:83:04:0D:B8
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:89:ab:44:57:5a:a8:27:42:8b:c7:c5:45:95:32:ea:cd:
fb:cc:72:cd:c0:aa:7d:02:d8:4b:5e:01:b5:f2:2b:d5:f9:bd:
a7:2f:3b:7e:84:55:a6:6c:b8:88:06:7f:f6:02:f0:55:17:b1:
97:d3:76:95:63:1c:bf:47:2c:a8:36:6e:30:48:41:d1:db:bc:
47:17:20:e8:a6:8d:2d:2d:e5:44:37:d5:e7:b3:de:6b:d7:6d:
e4:f6:41:ff:bf:18:66:da:c6:65:fd:dc:3b:a7:63:40:68:52:
49:8d:06:5a:55:28:4c:7f:d7:78:56:2b:3f:40:a0:13:6a:a8:
0a:6e:7a:46:c0:d0:23:01:30:ea:f8:cd:e9:88:22:4f:45:a1:
9d:b7:8d:0f:f3:f6:db:4b:e3:df:63:2a:3e:a4:19:70:97:d7:
f7:52:86:19:1b:15:05:e8:93:2a:e1:19:61:3a:46:02:9b:b1:
65:77:28:c2:96:20:6b:02:76:1f:1a:a5:f9:2e:a4:d7:9b:49:
7b:6a:db:70:54:9e:66:0a:1f:69:8a:a8:27:81:3d:3d:b9:89:
6d:45:75:22:d8:12:eb:69:e4:9c:8f:cb:d4:b7:72:b0:8f:f3:
d3:89:d2:a5:f4:ec:dc:2f:d8:8d:7a:70:20:21:90:b4:c7:c1:
25:f8:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:28 2026 by rpki-client