Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: UEKyXpeMegA5KdnFfc49i5ZX9vskWsBfyA6ZPEVU5mM=
Subject key identifier: A6:C1:A2:49:86:9A:1F:D3:C6:C7:1B:A6:98:27:07:B4:79:EB:69:9C
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019FA907B6A4B147C817E29DEDDA80A52F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 0676
Signing time: Tue 28 Jul 2026 14:01:22 +0000
Manifest this update: Tue 28 Jul 2026 14:01:22 +0000
Manifest next update: Wed 29 Jul 2026 14:01:22 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: 1UtkvAJgs2FO+WRLC+fLXW2YmJpTfzDGho8uPGNPxhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:b6:a4:b1:47:c8:17:e2:9d:ed:da:80:a5:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Jul 28 14:01:22 2026 GMT
Not After : Jul 29 14:01:22 2026 GMT
Subject: CN=a6c1a249869a1fd3c6c71ba6982707b479eb699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:57:4f:da:fb:7a:24:6d:3b:9a:91:06:69:
4d:cf:cb:be:2c:f9:4f:dc:1d:30:e1:94:36:0f:4e:
03:ff:9e:82:79:6f:7e:32:37:ca:03:39:89:63:d4:
4b:df:b0:71:49:96:ca:04:93:41:4c:3a:d5:28:61:
7c:f4:d0:02:12:d4:3a:48:ab:5f:5c:1e:13:51:e2:
91:59:db:4a:49:99:20:e7:84:b8:e2:9f:dc:05:8f:
74:bf:dd:06:71:33:a9:41:f0:7e:68:56:24:16:39:
1d:1a:b3:df:3b:84:c9:ee:10:80:87:da:cd:37:cd:
9c:91:4f:c5:81:a0:67:b9:bb:ad:e6:96:f2:0d:38:
9d:e6:14:c8:7f:9f:ab:c8:bb:05:48:dd:d6:25:89:
b1:21:3b:b5:dd:28:47:0e:ab:bd:64:4e:8f:05:55:
be:8f:52:df:65:f2:c5:e3:27:14:15:bf:1d:b9:5a:
7d:7d:04:ef:51:43:27:ec:90:32:81:13:36:12:ed:
68:3d:77:a1:b6:05:82:fd:65:15:29:70:10:05:6e:
55:84:02:6a:55:32:01:14:d6:6c:fc:65:0a:44:a8:
8e:60:e6:41:e9:4b:8f:d9:e3:e9:ad:9b:cb:c4:68:
55:c1:ac:f9:0e:e7:86:78:e2:32:ad:23:b0:59:6d:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:A2:49:86:9A:1F:D3:C6:C7:1B:A6:98:27:07:B4:79:EB:69:9C
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:59:94:7f:98:64:eb:ca:78:22:1e:1b:3b:97:6d:2f:6d:
fd:03:26:e6:d6:a1:fa:92:e0:57:7c:fa:62:42:1e:95:ca:f8:
60:2b:f7:5b:b4:06:99:02:20:87:72:eb:67:94:d1:2e:8d:dd:
c7:54:52:f9:3b:a6:12:e6:af:3f:e6:38:d0:9a:98:e2:a2:3b:
98:e0:11:d7:e8:04:7a:0c:6f:75:10:8a:14:21:7c:b6:a7:47:
4c:be:6c:17:f4:04:df:9f:47:ff:79:65:8d:3d:08:7b:c2:0e:
67:2a:f2:7f:e0:cd:8b:d5:b6:55:ce:53:75:88:29:01:b7:46:
da:2d:b5:da:e4:0e:19:95:a5:b4:3d:da:34:c9:24:93:37:d9:
97:5c:be:82:49:23:d0:45:02:18:52:3d:1b:07:8d:1b:cb:bd:
47:61:19:50:0e:d4:03:47:7b:3c:7e:9f:73:1e:7b:e6:05:04:
91:10:d6:13:a0:89:9c:96:50:fa:d4:b3:b2:e1:d8:61:d4:c2:
e9:67:90:3b:0f:91:b7:db:61:c6:1d:16:87:59:a9:1d:61:90:
a2:53:ab:a9:c2:ad:93:51:38:b0:36:51:ae:1d:a0:2e:d6:7a:
79:12:cf:57:23:ad:b4:35:fd:96:c0:d1:6a:04:34:a4:9e:08:
4e:8b:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:30 2026 by rpki-client