Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: n3Cdg+PfMfv3fOcICD/6xUyEgCqVmNIjpSl3p88lwYA=
Subject key identifier: F2:FB:F9:5A:88:4F:80:D6:FC:9B:B5:68:74:17:CA:97:C4:A2:4F:08
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019F17F934EFB58B1AE117329E99218B2F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0D37
Signing time: Tue 30 Jun 2026 10:00:35 +0000
Manifest this update: Tue 30 Jun 2026 10:00:35 +0000
Manifest next update: Wed 01 Jul 2026 10:00:35 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: YLWhJ91HCnN+MBAbyCHQSa8mEusXLdUfku7RM7lrUYQ=)
2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:34:ef:b5:8b:1a:e1:17:32:9e:99:21:8b:2f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Jun 30 10:00:35 2026 GMT
Not After : Jul 1 10:00:35 2026 GMT
Subject: CN=f2fbf95a884f80d6fc9bb5687417ca97c4a24f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:cb:2a:85:c4:53:6b:3b:22:95:15:2a:63:
97:2f:1b:d6:a1:51:35:37:a6:e3:76:7e:f2:a9:d5:
9e:bb:a1:51:b3:97:01:fa:01:b6:9f:dc:98:15:60:
e3:66:00:64:31:8e:da:d2:ea:b9:41:a9:a5:fe:d3:
43:68:8d:fb:8a:f3:5d:1f:df:e3:5d:ab:6a:3d:07:
3b:ab:13:87:ce:59:78:f7:33:ca:97:a6:8d:37:44:
bc:3c:03:bc:35:69:0d:8a:e2:f5:43:66:99:96:78:
da:e8:9a:54:d3:69:76:a6:12:68:ae:33:81:ab:25:
c2:c0:9a:dc:4a:45:ac:08:29:70:6c:a9:fc:97:10:
90:8a:25:07:d3:29:26:39:62:98:14:d7:be:2e:27:
7c:e9:91:f0:da:f3:6b:06:4a:1e:cb:c4:a3:43:71:
43:49:17:e0:f7:ee:56:f9:dc:e6:47:2d:08:b7:c0:
9b:e4:d0:4b:da:1b:90:2e:b1:fa:64:7d:27:41:a2:
58:91:09:9e:0e:b6:2a:10:9e:ae:b2:ed:27:f7:6d:
b5:7c:48:dc:7d:db:9f:0c:f2:54:80:1d:30:67:52:
03:8f:cc:67:3d:1f:0c:04:4b:2b:78:29:9b:0b:09:
68:73:f7:63:3f:23:05:4c:95:d3:1a:cd:d4:57:79:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:F9:5A:88:4F:80:D6:FC:9B:B5:68:74:17:CA:97:C4:A2:4F:08
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7d:b9:2c:2c:59:0b:98:41:88:7c:47:ec:44:c6:cd:07:bb:
b9:33:79:65:f4:04:9d:6f:68:c9:a9:f4:38:cf:a8:06:72:13:
70:d0:d4:a4:67:d7:ab:9a:2c:b5:6d:53:36:7f:fa:16:77:c6:
8f:a8:27:ef:ae:78:47:7f:26:2c:ab:52:11:94:12:36:ec:7e:
22:85:11:00:03:00:b5:a4:d2:a0:cb:98:3b:d5:6b:d9:f6:db:
06:3c:13:70:63:ac:14:4a:42:11:0b:13:15:17:56:54:a6:bd:
31:ce:82:97:ca:c6:22:61:0f:b5:06:93:b9:1a:07:cc:8e:c9:
e6:a8:e3:57:7b:18:a2:b7:2f:19:c5:72:62:ff:9e:33:d5:3d:
c1:1f:c3:57:d1:f3:a7:d6:39:c4:43:02:02:10:68:8f:a7:b9:
15:ee:48:5a:87:38:d4:ab:b3:4b:2c:2b:1b:25:bf:f2:5c:03:
4e:59:8f:31:1a:04:47:b1:ac:e6:d1:b9:61:ca:96:df:3a:29:
0d:46:e2:4b:0f:bd:45:f7:dd:9a:cf:68:bd:12:86:25:a4:08:
00:9b:4c:b4:8d:74:c0:f9:46:91:68:77:7e:e6:3e:93:1c:ed:
2c:6c:c2:9e:24:f0:88:96:12:29:fd:5f:43:2f:ba:36:b9:a4:
0c:52:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:10 2026 by rpki-client