Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: WIEPgOZJFo1y6PHNZFFaeXUAAcQeQFTg/lqtKiG2tFI=
Subject key identifier: 3B:4B:3E:26:30:06:4C:0E:AE:CD:CF:D5:BB:44:C7:0C:EE:7F:5D:0B
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019F17C31B0110EAE5E4C01CE0DC237BE0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:01:30 +0000
Manifest this update: Tue 30 Jun 2026 09:01:30 +0000
Manifest next update: Wed 01 Jul 2026 09:01:30 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: CsVo0Xra8FDcvQWpQ2cCX3+vpGdOwrYQYW7raF4bBfA=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:1b:01:10:ea:e5:e4:c0:1c:e0:dc:23:7b:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jun 30 09:01:30 2026 GMT
Not After : Jul 1 09:01:30 2026 GMT
Subject: CN=3b4b3e2630064c0eaecdcfd5bb44c70cee7f5d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:2d:be:75:8f:7f:63:9e:ed:70:21:26:b8:
dc:86:26:ee:0d:76:02:e6:37:b2:71:05:29:8e:36:
24:55:1b:81:1e:cf:ef:87:03:e5:15:85:03:c2:d7:
d3:3c:24:97:ed:43:7d:13:d9:43:1b:d4:70:49:12:
68:d9:47:3e:81:a1:bb:fb:47:64:d8:04:0c:a3:91:
22:39:7e:34:fe:cd:7b:05:4f:0f:bd:00:7e:d1:71:
dc:ff:06:f9:07:7d:13:66:4e:65:7e:7f:82:3f:51:
e6:0e:f3:a6:68:8c:6f:82:84:9b:8f:d8:e5:34:3b:
26:6a:a3:0d:9f:d5:8e:4d:b0:e6:03:98:6f:1f:3c:
d9:49:74:6b:91:03:d6:8e:3a:06:fc:30:87:c7:8f:
cd:e6:08:1f:0a:71:81:e5:16:38:c3:e8:b9:70:6d:
6d:ee:ed:b2:e4:6f:bd:37:f9:27:03:c9:1e:ce:aa:
98:e7:f8:c1:fc:d1:76:02:75:05:6d:db:a6:2c:c0:
d7:18:76:22:ee:d3:41:5b:c7:fa:8b:84:6f:b4:c7:
e5:21:dd:c2:83:a4:b1:23:b1:91:ec:4a:ba:49:94:
0e:88:24:fb:3b:aa:9a:33:33:23:fe:42:52:27:26:
7e:48:37:c4:1a:43:74:fc:1e:92:15:10:96:14:26:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:3E:26:30:06:4C:0E:AE:CD:CF:D5:BB:44:C7:0C:EE:7F:5D:0B
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2a:44:6e:a0:1e:e2:46:75:e3:4b:85:72:f3:52:14:03:eb:
d2:85:c7:3e:ad:e9:71:b9:96:7a:d7:c5:d9:4f:8f:cb:b3:19:
02:c2:25:a6:95:7d:df:d3:ab:d5:70:91:bc:f2:03:d7:c5:82:
07:3b:c7:41:92:0c:2e:4a:f3:e8:c5:31:47:32:2e:5f:f8:af:
1b:3b:a5:72:38:53:91:a0:c6:d6:f2:af:70:f5:d3:4d:52:58:
f9:9c:c5:12:d9:b9:93:d2:97:2e:3a:62:3d:17:d6:8a:7c:d4:
ee:57:11:b2:70:8e:e1:d2:e4:f0:23:46:ae:de:99:d8:5c:76:
39:19:b0:b7:fe:e7:83:27:82:29:b4:8f:31:71:4a:11:07:6e:
30:9f:59:0c:f2:fc:79:41:21:7e:1e:7c:d6:09:be:4e:3e:c1:
4d:a6:40:38:c9:a1:fc:69:b9:09:39:8d:67:f3:0e:32:af:4e:
16:7b:2e:3c:84:81:4e:81:90:35:34:95:56:05:0c:a7:77:d1:
36:8f:d9:e5:a9:cb:7e:dd:d9:52:12:46:81:1a:fa:0a:4a:72:
4d:76:ba:f2:b9:54:46:26:59:8b:42:67:de:8a:5e:bd:39:8d:
8d:71:29:60:db:96:8f:d2:2f:1d:3f:aa:ac:cb:58:de:17:62:
81:bc:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:49 2026 by rpki-client