Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier: 39PX+WvztWbNC52LMyyWtOT6fEf0ckvA0KtCi4D5CgA=
Subject key identifier: C4:90:8D:B4:B7:58:70:A6:E3:43:8A:83:8F:F0:99:11:D3:98:CE:5E
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial: 019F17C355769A53E06D52D658833E5206E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number: 0C3D
Signing time: Tue 30 Jun 2026 09:01:45 +0000
Manifest this update: Tue 30 Jun 2026 09:01:45 +0000
Manifest next update: Wed 01 Jul 2026 09:01:45 +0000
Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: t2DPDArrbRghW1MnsxDbpZDLHhRjxoGqhLGUlfgLUhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:55:76:9a:53:e0:6d:52:d6:58:83:3e:52:06:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Validity
Not Before: Jun 30 09:01:45 2026 GMT
Not After : Jul 1 09:01:45 2026 GMT
Subject: CN=c4908db4b75870a6e3438a838ff09911d398ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:b1:6a:26:e3:41:6f:c1:cc:65:6b:2e:38:
46:4b:d2:18:87:b8:35:ff:3a:d4:97:78:41:8e:93:
c2:d1:b9:95:b6:73:f4:38:28:59:d5:8f:6a:9e:39:
28:e4:4e:e8:b6:d6:47:b1:8f:2e:eb:bd:1a:4d:1e:
37:65:a6:76:71:2b:ab:35:41:31:0b:83:35:af:b9:
e2:bb:c1:38:03:1c:d7:a9:e2:23:2c:4b:4c:49:8a:
16:47:6b:3c:8a:4c:e4:14:ee:7b:e5:ab:1a:f6:d1:
ae:d5:7c:71:9e:bd:69:8d:19:a7:f8:eb:7d:a1:8c:
46:de:36:69:b8:be:e0:6f:1f:bc:22:ea:e1:96:b7:
92:a6:1b:6d:75:44:d3:24:36:e2:d8:76:8a:41:e5:
f1:02:84:1e:48:60:64:75:96:7b:5b:4d:ba:90:ff:
bf:b5:f5:dd:ac:cf:93:9d:e1:ad:27:bb:49:40:ce:
24:73:73:7d:70:a8:c2:a8:b1:8d:8d:4d:3a:45:df:
cb:ca:4a:0d:1e:d0:46:8c:be:c2:8d:48:cb:80:e9:
1e:59:dd:52:2b:f9:bb:ed:c8:3f:a5:e8:f7:b4:ab:
74:e0:6a:a3:6d:c6:02:8b:b8:5b:81:69:97:91:7d:
ed:a2:82:61:4a:f6:d4:d9:90:a8:f9:87:66:3c:97:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:8D:B4:B7:58:70:A6:E3:43:8A:83:8F:F0:99:11:D3:98:CE:5E
X509v3 Authority Key Identifier:
keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d3:93:da:c3:43:66:d2:09:27:75:c4:93:ea:51:5f:ee:ca:
68:f2:48:38:92:43:2a:5f:25:a8:04:c1:9e:bc:ae:86:d1:65:
64:fd:e5:ba:be:96:7c:03:7f:7e:23:f4:3f:96:f5:3e:22:21:
5d:7f:ab:e3:9a:14:ee:96:d5:18:44:18:6c:a1:ba:c2:fe:e2:
77:ca:0b:d7:95:99:63:86:c1:b6:93:d2:93:fc:23:8c:34:ad:
e6:42:40:e9:2a:df:80:14:0b:24:8b:13:04:b2:a4:b0:31:ea:
1d:78:1c:95:4a:cf:b1:a7:88:90:60:78:30:e7:bf:c0:45:9c:
0a:a5:b7:49:5a:39:b5:9b:fb:d0:2f:42:15:ff:02:b5:5b:c2:
c3:61:0f:26:3b:7f:94:96:35:29:ae:36:ba:c1:71:bd:07:27:
74:c7:b3:d6:33:76:2e:25:5e:43:36:f2:ff:60:16:4c:db:d5:
1a:39:29:a9:7b:cc:fe:a7:9f:42:39:1e:8b:74:6b:61:d2:c6:
ee:75:65:9a:f1:4e:ee:0e:28:ef:6f:b7:78:0a:60:8f:f0:98:
04:d4:f3:d9:30:57:67:d0:99:33:54:cd:93:fb:da:27:a5:52:
21:1a:d5:95:3c:9c:6f:f1:8a:75:cf:89:19:fd:62:9b:bd:cb:
45:a3:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:16 2026 by rpki-client