Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: F9X0CKCUW4qodguH5Rycl3IzNCr+fA8ZlkPMcVpijIk=
Subject key identifier: A7:07:00:96:AE:7B:7B:36:64:5D:48:D6:EF:01:75:67:99:20:12:2B
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019EB7A12D9269A098F3B0F974104D6578B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0A8D
Signing time: Thu 11 Jun 2026 17:00:53 +0000
Manifest this update: Thu 11 Jun 2026 17:00:53 +0000
Manifest next update: Fri 12 Jun 2026 17:00:53 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: HnraBuZtBN+TpqEZYmidReE0nATy5QUTjHD5crXZ/ao=)
2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:2d:92:69:a0:98:f3:b0:f9:74:10:4d:65:78:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jun 11 17:00:53 2026 GMT
Not After : Jun 12 17:00:53 2026 GMT
Subject: CN=a7070096ae7b7b36645d48d6ef0175679920122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:5d:2f:fc:4c:6c:e0:4c:3f:83:35:5b:77:
2d:6d:07:2b:d9:28:62:c2:48:99:10:1c:6d:99:94:
63:a5:9d:3b:80:dd:90:eb:ac:b5:13:cd:7d:0f:02:
30:a8:e8:3d:db:a3:be:78:b9:ae:30:15:f4:57:f3:
ee:98:c8:28:57:30:47:ba:99:1c:e0:c1:ab:21:97:
e0:ff:f0:e1:25:b4:9c:d5:cf:44:63:d4:c8:b8:89:
6c:31:5b:a7:5d:0c:4b:63:ef:12:e6:fd:ea:7f:e3:
be:be:12:61:87:db:12:3f:08:d5:92:b8:fe:cc:a7:
81:ef:ae:82:a2:32:9c:1c:df:ea:d6:93:eb:ae:ca:
79:25:b3:21:30:3a:90:49:1f:24:16:e2:40:39:db:
d2:bb:b9:36:ce:a1:cc:73:70:06:8d:7b:a4:22:08:
86:0f:9d:c8:e5:61:44:9b:53:19:6b:b5:be:d7:5b:
d5:3b:3b:e6:be:31:64:c3:10:38:d7:7e:87:56:e2:
48:71:e4:ad:9f:6f:ad:04:6b:51:ca:35:0b:74:67:
e3:ae:3b:94:71:c2:7b:2f:c0:d1:f3:1f:37:cd:d1:
4e:97:ae:d9:09:8c:85:c9:51:0e:6b:64:1e:36:4c:
3c:bb:d5:49:bd:2a:42:63:77:5a:5d:22:4c:d8:1b:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:00:96:AE:7B:7B:36:64:5D:48:D6:EF:01:75:67:99:20:12:2B
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:1d:d3:60:67:dd:cd:76:31:05:b8:d5:3c:88:54:da:53:
ae:f4:ef:0b:87:49:7a:fe:a0:b4:e2:a5:e5:39:52:9d:b7:69:
d8:bc:99:17:b5:b8:21:e4:37:22:41:63:fb:cb:67:e7:ce:98:
dd:69:9f:49:7d:e3:fa:e7:8b:61:c8:66:9f:74:4f:43:db:32:
95:b5:3c:b7:b9:dd:08:85:22:83:6c:4a:d1:52:e3:e1:b1:09:
d7:a6:40:42:85:67:cc:ef:5e:24:9c:f9:0b:f1:eb:7e:77:5b:
33:96:02:4d:a5:71:35:39:82:32:73:23:e6:45:da:29:e8:72:
52:02:d2:ed:6a:fb:45:52:48:f9:b6:9d:8d:20:92:5a:a1:9a:
57:0b:88:12:a2:fa:31:2e:2a:2f:e1:14:f9:7a:3a:06:2c:34:
b7:fc:6e:c1:c1:90:13:4b:09:aa:8e:0f:31:15:5f:cb:b9:a2:
40:95:b5:64:06:1d:98:3c:42:cc:19:da:25:9a:e6:ef:55:a5:
7f:01:ae:a3:e9:c3:c0:5f:1f:5d:a4:94:80:70:15:5b:3f:98:
43:23:f0:b0:0e:9a:ea:3b:8b:ca:40:46:6e:bc:99:ff:14:dd:
e7:48:22:51:48:03:ac:02:f8:2d:e2:95:d4:4f:59:3c:cb:6b:
c1:f3:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:29 2026 by rpki-client