Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier: kFoWpH8Od+QLwfudBz7imm5hVRCJrfwrb34PVGAG42Y=
Subject key identifier: CF:74:BB:1D:4A:B5:05:B0:0D:15:AF:40:A9:BB:A9:A6:1F:A4:07:47
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer: /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial: 019F1830C6557FF6D6A315052AF9802C2102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number: 059D
Signing time: Tue 30 Jun 2026 11:01:17 +0000
Manifest this update: Tue 30 Jun 2026 11:01:17 +0000
Manifest next update: Wed 01 Jul 2026 11:01:17 +0000
Files and hashes: 1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: 47Vj7sCVI1YswOrvPv4TIRBEqm5fYMn3fvdTu/Ue2lk=)
2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:c6:55:7f:f6:d6:a3:15:05:2a:f9:80:2c:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Validity
Not Before: Jun 30 11:01:17 2026 GMT
Not After : Jul 1 11:01:17 2026 GMT
Subject: CN=cf74bb1d4ab505b00d15af40a9bba9a61fa40747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:97:9f:4c:d2:83:b3:cf:ac:30:2b:e2:b2:
8f:5a:1b:53:7d:cc:3a:5b:e9:ac:23:09:23:ac:ed:
71:b8:91:47:82:c9:bc:9c:6f:a7:9c:ce:c9:f7:cd:
00:8e:fd:6b:f5:e5:e4:ca:6f:60:9a:d6:ff:1e:ac:
ed:c8:08:e6:0b:2d:a8:49:52:e8:e1:2d:ab:a3:fd:
b3:d3:97:36:54:92:83:87:28:34:ca:7d:b1:38:f6:
68:46:11:95:4e:3d:16:f7:e2:e0:22:f8:6c:e6:fb:
a8:9a:35:85:4a:08:9c:93:86:35:da:32:9a:d7:f0:
d6:59:29:05:50:bf:50:d0:f4:c4:24:fe:83:f0:52:
51:a9:00:64:01:ad:ec:1e:3d:6f:1b:5a:16:37:18:
e3:e6:d9:0f:ed:a2:be:f8:f1:28:ea:90:93:0a:bd:
3d:00:be:6f:fc:25:1a:45:a7:b9:6e:19:c9:b6:ab:
47:79:39:89:c3:7f:7d:a4:7a:71:8e:28:af:b8:e9:
54:d2:7c:52:de:70:56:54:88:84:b2:d9:d5:67:d0:
64:c4:be:e6:dd:4f:73:9d:0b:e2:3b:55:4a:5b:84:
0a:45:bd:a8:16:b6:68:00:87:cc:e7:37:63:c8:3c:
bd:15:35:80:2f:ee:8f:38:6f:62:2f:d0:78:ff:45:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:74:BB:1D:4A:B5:05:B0:0D:15:AF:40:A9:BB:A9:A6:1F:A4:07:47
X509v3 Authority Key Identifier:
keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:f7:d2:0e:d3:dd:04:eb:98:0a:a1:dc:f9:9a:cb:7b:0d:
eb:f5:98:ed:99:88:16:ee:bc:1d:b0:c4:4d:02:ea:79:44:0f:
66:8d:4d:a1:fd:51:88:44:23:e4:07:05:99:69:8a:17:9e:98:
50:55:1f:ae:b2:b1:80:0b:17:d3:d7:93:f3:44:84:26:9f:02:
b3:fa:80:42:9b:9c:43:1c:f9:38:81:49:38:cf:b7:11:26:52:
e7:12:5e:d4:b5:c0:71:da:e9:1f:44:1c:96:47:13:71:43:65:
d3:9a:2a:bb:f5:6c:27:24:10:ed:20:db:52:aa:8f:f2:25:e4:
f4:36:9b:30:3b:42:86:0e:ac:4f:78:44:5a:5e:dd:61:51:94:
c1:3b:86:e9:38:af:49:b4:30:7d:77:af:34:ca:88:89:74:07:
d7:03:b4:44:a6:56:dd:45:2f:91:9f:0d:b0:a8:4e:40:ae:82:
77:7c:16:d2:6a:f2:42:79:6c:65:e9:43:83:aa:1c:24:d1:8d:
57:44:dd:72:8a:ad:b4:88:06:2a:7b:69:09:9e:65:e9:2d:e4:
e9:fe:68:be:61:74:c4:ec:0e:10:b1:dc:bf:98:1a:5b:0e:4e:
30:58:78:24:33:ce:b3:4f:ed:a9:8e:93:b3:c8:20:8b:5b:31:
38:2d:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:31 2026 by rpki-client