
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: BBQ9C18b+1pDsZ439v0/ZBjjbt69AVP9fHcZdKrZWxA=
Subject key identifier: A8:7A:25:C9:61:C7:16:1A:8D:6F:52:FB:65:BA:7D:B1:72:76:D8:54
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019F1979F8D31CD7FE3E76E8BDC13F30F682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0D78
Signing time: Tue 30 Jun 2026 17:00:51 +0000
Manifest this update: Tue 30 Jun 2026 17:00:51 +0000
Manifest next update: Wed 01 Jul 2026 17:00:51 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 0iGCDwzO6xispNY+KS2idPL22AqbI2WEUDUYgsyav3Q=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:79:f8:d3:1c:d7:fe:3e:76:e8:bd:c1:3f:30:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Jun 30 17:00:51 2026 GMT
Not After : Jul 1 17:00:51 2026 GMT
Subject: CN=a87a25c961c7161a8d6f52fb65ba7db17276d854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:36:e4:e4:73:2d:43:16:55:6f:9d:42:e5:
83:d2:e1:48:49:4d:5b:d8:f4:c5:0b:e7:f8:15:41:
81:49:88:80:5e:be:6e:3e:f4:ed:94:5c:01:83:a3:
e9:9f:ac:8c:bf:97:9b:d5:61:82:8c:21:50:44:d9:
bb:85:c1:48:16:7b:bc:dd:5a:db:69:6a:6b:28:03:
c9:56:6b:ef:8f:bf:8b:72:d4:9d:65:16:d4:fa:18:
1d:1a:f9:ef:0a:c7:bb:f1:b4:2a:f7:83:f6:59:70:
ba:75:f9:63:f0:0a:c7:52:52:b6:01:11:e5:15:13:
fa:1f:97:e3:73:c0:b7:af:3b:bf:c2:e6:e8:88:45:
ae:ee:75:e6:06:c0:30:94:af:f2:c5:6d:56:f4:4f:
b1:0c:ef:f7:82:2e:64:44:37:d5:b8:d7:41:4c:2c:
21:66:96:23:e4:a8:bf:23:66:3c:fa:cb:c3:ef:24:
31:c9:af:71:ed:15:a7:4a:58:ac:24:7a:e1:32:b5:
6a:a6:b3:b8:bc:fb:e5:1b:b2:e2:7a:7b:33:f2:4d:
bf:cc:59:43:05:ba:49:d6:02:b3:7d:11:db:97:a7:
e6:28:f1:ca:2d:37:30:72:ba:c1:71:d9:cd:89:8a:
4f:25:17:3c:1a:b3:b1:96:f6:69:71:ad:bd:57:2f:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:25:C9:61:C7:16:1A:8D:6F:52:FB:65:BA:7D:B1:72:76:D8:54
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:38:02:33:63:05:7e:79:47:1b:58:44:e7:6a:f3:2c:0f:
7f:25:9f:69:47:1f:94:dd:28:34:08:4a:b0:7e:63:2a:c4:7a:
92:b0:41:34:f2:d7:61:08:90:a8:98:19:0e:8f:26:f4:35:d4:
db:c5:30:ca:07:85:ee:9b:85:27:8b:94:96:5d:18:e8:f4:9d:
e7:bd:e0:f9:7b:30:6e:5c:2f:ec:89:74:71:9b:ad:76:25:a6:
87:3c:c0:f7:0c:d2:ca:b0:33:3b:da:42:34:0d:ce:0d:2c:44:
69:9a:f9:7a:88:cc:1d:f1:a1:6e:96:8a:c0:a1:50:84:41:d9:
9b:57:50:77:02:37:55:39:d8:30:05:f9:3f:17:18:f8:26:2d:
b1:de:bf:56:70:d4:86:f7:02:fc:a7:f5:cc:a8:db:d3:e4:be:
46:45:d5:a8:1f:f2:6a:6d:cf:d6:c5:30:1c:7c:75:04:7f:fd:
0c:26:ac:26:81:1d:92:47:10:0d:61:e9:7c:18:8c:8c:d7:14:
07:47:d7:24:0f:d3:d3:65:3f:1e:03:8f:34:ed:1d:45:07:4f:
72:45:ae:82:5d:70:e4:2f:8c:a9:85:4d:85:4e:0b:0d:c4:a0:
b6:02:1b:0c:9f:25:ce:4c:c7:85:08:93:92:6e:4c:1e:c8:8d:
94:c4:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:01 2026 by rpki-client