Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: PrQ6oSXcWkJ6wdNX9WGsjmKUzyF8MdVIeHGMVXzDeXQ=
Subject key identifier: 2A:3E:B3:7C:D3:4C:E6:6B:AB:68:D9:63:52:3E:F9:0F:A4:31:F0:1F
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019F17C3131321EF19DB5CC7C2376C80E027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1639
Signing time: Tue 30 Jun 2026 09:01:28 +0000
Manifest this update: Tue 30 Jun 2026 09:01:28 +0000
Manifest next update: Wed 01 Jul 2026 09:01:28 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: sS1oh1vItZKXLGda4rK2JVHeP1myLicsopeYRAKpsgA=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:13:13:21:ef:19:db:5c:c7:c2:37:6c:80:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jun 30 09:01:28 2026 GMT
Not After : Jul 1 09:01:28 2026 GMT
Subject: CN=2a3eb37cd34ce66bab68d963523ef90fa431f01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:e4:d9:8f:1a:d9:8b:0f:62:12:a3:39:cd:
8e:cc:6c:76:3e:f8:a1:e4:9b:13:77:51:5a:f9:a4:
c7:64:46:4c:bc:a5:69:e3:44:01:e2:b6:c9:f6:e5:
5a:a7:c4:66:9e:b6:52:fa:97:b5:af:b1:16:c3:41:
cc:12:9d:62:c1:93:db:79:b1:83:09:f8:97:6f:b4:
02:56:10:71:7b:0d:6f:08:21:81:22:e4:5e:94:a5:
ad:e5:cf:5f:98:82:83:84:1e:71:3a:65:cc:5f:9b:
08:1e:7c:6d:93:c7:fc:e6:7d:f0:18:2f:d8:17:71:
3c:7a:41:31:65:b9:d5:f9:53:94:ef:96:cd:83:d1:
29:28:bd:92:48:c0:3e:58:2a:d2:14:11:5e:75:e9:
71:6c:a2:00:40:db:1a:e8:38:9f:8f:b9:b8:c0:7e:
b3:c8:40:1e:f4:68:0c:13:c0:12:f1:6c:c3:6f:60:
06:4c:9d:ed:28:12:36:9b:08:f0:b0:1c:ef:db:f1:
f5:c5:77:a2:13:4b:a8:4c:39:69:63:5b:b5:a9:1f:
0b:2a:05:a0:e3:46:fc:5c:a9:f9:57:a8:5c:bb:9b:
71:28:1b:d4:0f:86:4a:ef:5f:bc:99:20:ba:00:77:
72:21:03:d9:a7:e2:71:76:a1:d8:78:2e:c8:f5:f0:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:B3:7C:D3:4C:E6:6B:AB:68:D9:63:52:3E:F9:0F:A4:31:F0:1F
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:2b:10:74:8b:78:8f:43:e0:4d:38:4f:86:4b:30:60:f0:
09:a6:c8:d6:43:f2:cb:9c:c9:59:0c:e7:bd:ed:fd:a5:db:59:
84:d8:86:c6:13:f2:28:b1:0c:0a:3b:ba:00:79:d6:61:21:75:
83:51:eb:95:7a:b1:db:4f:e6:08:36:1d:94:e4:1b:13:2b:80:
34:3a:4d:8b:7e:a0:db:11:85:f1:3d:32:62:4d:15:0b:9e:03:
ee:07:c6:c0:fd:f9:cc:6d:8c:a8:ff:e9:85:90:76:49:c2:b0:
cd:76:9a:78:5d:07:df:22:7a:b7:60:c0:50:28:b4:b2:08:75:
de:a8:35:da:7a:8e:08:2f:6b:41:d8:d2:7a:9d:c6:91:5d:e7:
6a:b5:d9:4b:78:84:a7:88:98:24:8f:b7:de:5f:f3:4b:43:0d:
6e:b8:7b:df:75:7f:1b:89:f4:90:fd:45:09:8c:8e:4d:62:3a:
36:80:9a:30:24:08:1a:8e:0d:c2:dd:ad:27:ac:be:bf:40:b8:
b4:d6:e9:af:1e:5d:c9:79:81:4a:e1:0a:1e:c7:6e:90:fc:ff:
93:bc:19:43:55:25:b3:03:c0:24:e8:17:fa:46:16:22:ed:28:
91:3a:6b:37:ff:05:67:44:b2:77:b1:ba:b7:7c:8f:27:60:ef:
1e:1e:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:19 2026 by rpki-client