Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: rMVwqJhmAJRyGRlQlfQpW6kvc1s0HAWX9C7WZbI8T4Y=
Subject key identifier: BD:C8:49:36:D1:54:4F:E8:A5:67:7E:73:EC:5F:E9:7B:9E:2A:F2:36
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 019F190D4A2B0D78325E0F551860C9B36607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:02:09 +0000
Manifest this update: Tue 30 Jun 2026 15:02:09 +0000
Manifest next update: Wed 01 Jul 2026 15:02:09 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: IwtFJjCsTL39kZSStOstCTShCYCpXlAD8+xcCuyeJqA=)
2: z-3swOq83iQal-4HNbXMWQFTmtk.roa (hash: 2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:4a:2b:0d:78:32:5e:0f:55:18:60:c9:b3:66:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Jun 30 15:02:09 2026 GMT
Not After : Jul 1 15:02:09 2026 GMT
Subject: CN=bdc84936d1544fe8a5677e73ec5fe97b9e2af236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:e9:fd:61:4c:e5:da:c5:68:b0:8d:6b:72:
fb:f6:72:71:9b:0e:f5:a3:30:4f:26:7a:72:fd:f1:
1e:11:23:b4:f0:ff:49:3e:34:32:d7:22:02:6e:4d:
16:f7:b0:b1:60:c0:ba:00:6e:55:48:42:2e:8c:09:
99:25:64:39:dd:7d:73:54:0c:2b:48:2f:19:78:cb:
56:e6:8a:8d:8b:e1:0c:ad:8a:94:c5:a4:3b:66:12:
18:ad:1e:28:d1:e9:29:ce:89:95:e9:84:b2:30:7a:
5e:f3:fb:8f:12:54:b8:21:06:b3:b8:ac:e9:4b:a3:
51:b7:14:a4:2b:91:72:17:a7:52:24:fa:64:88:ec:
71:d5:0a:33:64:93:5c:3d:33:0a:23:0c:e9:6a:f4:
98:a1:8b:46:70:00:0c:0f:68:aa:b9:b3:f3:c5:aa:
ef:ee:66:ba:e6:64:ec:8e:40:f7:e4:35:e3:50:9d:
e8:42:db:24:24:b3:69:b6:27:a0:d2:c2:4e:43:3b:
b0:f3:d6:e9:c9:ac:a3:45:a6:a1:33:3d:e8:ca:50:
9b:ae:01:71:8a:18:47:26:4b:fd:fe:93:b4:5f:3b:
0d:06:7c:39:ca:f3:64:dc:c8:11:58:8b:86:bb:30:
d9:cd:b1:16:3d:8b:5d:7b:af:74:22:d6:b4:f7:63:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:49:36:D1:54:4F:E8:A5:67:7E:73:EC:5F:E9:7B:9E:2A:F2:36
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:2d:91:13:98:5b:0b:32:dc:c4:c6:c8:c3:e0:13:5c:85:
36:48:d7:ae:40:0e:78:e7:a1:29:06:9b:22:e4:03:a7:a6:16:
b6:ab:9f:84:30:9e:aa:c7:5c:2b:a3:69:3c:1d:35:ef:3d:44:
97:b7:5b:56:9f:74:a1:96:5d:ac:30:73:a9:27:4d:dd:37:67:
a4:35:7d:3a:5a:ed:c2:0a:3c:5f:01:a8:3b:63:ea:9d:c1:72:
c1:a0:50:ce:56:ea:a2:e4:c7:02:aa:32:c4:2f:6b:65:a8:e7:
45:6a:9a:f0:c2:71:fd:91:6d:55:c5:ff:83:37:d8:54:e6:4c:
f5:e1:2f:75:50:3e:c5:65:5d:24:b6:88:91:6e:4d:ee:56:88:
b3:b9:72:a1:cf:08:0d:0d:67:a2:09:c8:03:17:9d:98:36:0c:
4f:b9:33:fe:ec:98:53:cb:18:e2:a7:35:4f:01:16:0d:5d:e8:
7f:ed:29:01:79:29:fd:3d:75:12:20:75:89:05:de:ce:4c:4c:
13:1e:c4:71:2c:6d:38:f0:fc:b4:cc:fe:cb:32:ce:73:97:b2:
b2:c3:e8:d4:83:bb:f6:ef:9d:f1:9d:48:df:d4:cb:27:0c:70:
d6:bf:c7:1a:27:90:c4:da:4e:1d:a8:32:a3:b0:e7:fd:99:96:
c4:bc:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:43 2026 by rpki-client