Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: qHE/H1z7fxLe+VzFS7A7o2QAWdUhUIWsaocnDQtUj9o=
Subject key identifier: EB:74:46:4F:08:E6:A4:0B:19:C1:59:B5:C7:67:57:9C:1E:FD:C4:77
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019FA14DC557148EAB2AA46BC72C14080CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0B06
Signing time: Mon 27 Jul 2026 02:00:56 +0000
Manifest this update: Mon 27 Jul 2026 02:00:56 +0000
Manifest next update: Tue 28 Jul 2026 02:00:56 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: RhKSdYMtpzsUmMB2IuBXNohXWOhyQNm8JKtqW1PT1lA=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:c5:57:14:8e:ab:2a:a4:6b:c7:2c:14:08:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jul 27 02:00:56 2026 GMT
Not After : Jul 28 02:00:56 2026 GMT
Subject: CN=eb74464f08e6a40b19c159b5c767579c1efdc477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:35:d0:ea:76:1c:8a:df:de:30:2a:94:6a:
d1:9e:6e:80:47:2a:85:04:5f:99:58:1e:9b:61:d4:
0d:ab:93:2f:de:dd:24:73:94:dc:b6:4e:f4:57:3c:
96:32:bb:94:57:a2:27:57:5f:ff:df:8d:1d:7f:5a:
5c:9d:b4:2c:20:c1:88:b6:76:68:ae:93:f6:20:32:
83:90:bc:23:0c:ef:b6:81:1a:ae:ce:c4:d6:0d:2b:
63:7f:f7:56:2e:30:49:3a:6a:e4:a9:bd:b5:c1:62:
d1:dd:88:4c:1a:11:eb:b6:b0:f8:29:d4:93:ed:85:
40:5b:81:92:dc:0a:96:0b:c0:3a:86:fc:47:c8:91:
5c:ed:d9:fc:54:f7:5a:1b:28:58:07:ec:a0:85:ef:
a5:cf:f4:eb:8f:b0:18:2c:d4:81:a9:67:25:f2:32:
d9:ae:d3:d3:54:63:9c:c1:8b:85:37:66:22:93:ce:
2a:b6:50:f4:5e:cc:00:59:e5:b2:d6:57:5c:24:8b:
50:5a:55:9a:40:96:c6:cf:28:fc:99:e9:6f:f8:78:
50:9b:45:dd:b0:0a:b1:23:73:3f:03:61:78:c9:04:
cd:aa:7e:8d:32:d0:29:2c:03:53:9a:99:cb:36:4f:
f7:c0:7d:c2:63:a7:3d:63:da:62:00:d1:f4:8f:5e:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:46:4F:08:E6:A4:0B:19:C1:59:B5:C7:67:57:9C:1E:FD:C4:77
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8c:38:54:ac:75:11:19:92:d3:36:e0:93:1e:12:1b:f2:e3:
14:b9:bb:96:a3:9d:67:02:da:39:93:97:b1:c0:f3:5c:d2:98:
5e:16:1c:4b:8e:14:ae:a9:41:aa:3e:60:87:08:3d:2f:f4:e2:
92:fa:84:d3:6c:19:c4:00:d9:00:4c:a5:36:26:1a:3c:bd:93:
26:f5:86:1e:2d:92:01:9a:75:24:60:5c:5d:87:bc:ea:66:b1:
40:51:76:23:31:c7:19:9d:5c:2a:d9:9b:08:13:22:34:c8:ca:
74:9f:5c:18:f7:cc:67:68:11:38:fd:a6:19:15:02:ee:bc:60:
af:62:e8:b1:60:c1:72:27:cf:82:67:4c:53:df:d2:ff:81:b6:
60:39:3c:83:d9:b9:d1:7a:88:c4:3e:2e:49:8c:a4:36:87:d3:
d5:d0:c6:b4:42:8e:dd:e1:42:ec:15:5a:96:75:da:da:7c:3c:
8e:70:56:60:c8:b1:c1:90:cf:db:ac:b4:61:ff:45:65:b4:7d:
14:8f:1f:2b:42:91:35:02:69:60:7b:e2:8d:e2:eb:cb:a5:d8:
a9:48:64:25:73:f4:b4:c4:b8:e5:0b:05:50:bf:cc:8f:c3:c8:
e5:fe:e5:a5:60:13:2d:13:74:a0:05:13:5d:ed:7d:0e:cb:40:
44:b3:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:32 2026 by rpki-client