Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: +eT7M0jDgO3J8Jw8J61zKgJgXPhHjNAlRcvVEwW6PN0=
Subject key identifier: E6:D2:7F:15:D9:7F:B4:29:BA:95:32:A3:DE:0F:4D:CA:4B:4F:1D:64
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 019F189E6C429914FD7618EC8AD454E6486E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 13:01:03 +0000
Manifest this update: Tue 30 Jun 2026 13:01:03 +0000
Manifest next update: Wed 01 Jul 2026 13:01:03 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: HLfKTOa1G5GXoKBKocsSTmQsOWM5ekCuydxgcXibWlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:6c:42:99:14:fd:76:18:ec:8a:d4:54:e6:48:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jun 30 13:01:03 2026 GMT
Not After : Jul 1 13:01:03 2026 GMT
Subject: CN=e6d27f15d97fb429ba9532a3de0f4dca4b4f1d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:78:fa:bd:c1:87:0b:78:0f:da:91:ec:9f:
9f:5d:4b:cc:0c:76:f9:06:e4:1e:59:ab:f9:79:f7:
e6:1e:87:f5:05:f4:45:a8:63:12:11:9d:25:10:66:
eb:e2:24:22:d4:6f:3a:c4:e6:69:67:37:84:5d:86:
0e:0d:d4:83:ea:f9:43:d1:c2:ad:40:c0:81:28:ca:
71:78:18:f8:98:f6:e4:73:42:66:1c:5f:86:e4:4d:
0e:b7:48:08:21:7f:3e:d6:b0:0a:53:d8:a1:cc:2d:
f1:8b:0c:c5:a1:f1:5a:31:8f:c4:28:13:a9:74:bf:
e0:91:7f:31:60:55:33:f3:bf:fb:c9:0f:8a:6b:08:
1e:9d:40:43:f5:e3:f4:b9:07:18:4d:9e:4b:cf:3e:
10:d0:0a:7e:88:6e:6a:59:5a:f7:58:a0:af:ca:b9:
b7:e6:de:95:62:79:52:ef:d3:b1:97:3d:7f:f9:95:
0a:83:96:57:8a:da:ac:aa:25:9c:3c:31:71:1c:4c:
96:4c:40:e1:dd:68:93:bf:24:7d:6d:63:27:7a:b5:
84:5b:70:56:2a:69:88:cb:01:db:2d:fb:55:26:31:
90:d7:45:31:33:9b:6b:77:50:64:66:fd:9c:5b:dd:
70:8b:70:4c:bb:93:09:36:e1:9c:ab:4c:31:d0:1d:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:7F:15:D9:7F:B4:29:BA:95:32:A3:DE:0F:4D:CA:4B:4F:1D:64
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:5e:89:70:eb:7b:dd:0e:fc:f7:2a:3d:87:e5:14:1c:4d:
8c:01:27:b1:8c:30:ee:5f:e2:a2:78:2c:d7:26:15:ae:c9:83:
b9:4b:bb:f5:f9:69:8e:43:42:31:a4:d8:6e:63:f4:32:cf:bb:
57:c9:96:88:4f:a9:ee:2f:0f:31:4d:14:4a:c1:ba:fe:fe:f3:
5d:4c:d7:db:74:3b:8a:d8:23:9f:d4:5c:2c:1c:e3:6b:03:af:
49:8d:ae:33:32:2b:c5:68:32:36:4d:bb:50:e2:9d:3f:5b:3d:
e5:0a:9b:65:44:48:7f:cd:dd:22:ba:f8:1b:07:26:94:1d:da:
40:1a:dc:b7:45:75:bc:3c:9c:83:bf:cb:b2:d4:9e:17:4b:38:
e0:21:2d:25:4e:bd:15:09:5f:a2:d1:a7:94:ac:7e:91:cb:31:
9f:48:94:5d:97:ca:04:61:ec:fa:b7:e6:58:74:a0:e4:d2:7f:
3b:a7:64:d4:4f:cc:cd:8d:80:ac:02:02:ab:9c:82:61:e1:de:
db:57:60:3a:8f:04:23:9b:2b:bf:ec:51:1e:3e:fb:05:77:6d:
3c:5d:12:aa:f9:aa:47:ec:7a:70:8f:68:33:0c:0a:62:53:49:
57:d3:41:45:a0:17:ab:f4:a0:5c:35:87:2e:4f:37:52:21:4a:
bd:8f:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:51 2026 by rpki-client