Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: mhtlSs8noyydkwGXZhYzTfo+nRFiR8Wd6pWhMxhVS6o=
Subject key identifier: FA:4C:0C:58:90:E4:4A:80:A9:7D:94:89:37:90:4E:34:1E:07:44:A1
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019EC3A5258A032572914BFCC871CC042C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 10DC
Signing time: Sun 14 Jun 2026 01:00:40 +0000
Manifest this update: Sun 14 Jun 2026 01:00:40 +0000
Manifest next update: Mon 15 Jun 2026 01:00:40 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: mv7b8jeFh/ARJKwRDuwMSqhK3uU71W0oJgljJR5YXXY=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:25:8a:03:25:72:91:4b:fc:c8:71:cc:04:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Jun 14 01:00:40 2026 GMT
Not After : Jun 15 01:00:40 2026 GMT
Subject: CN=fa4c0c5890e44a80a97d948937904e341e0744a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:db:fd:b4:35:58:3a:57:19:78:3d:f8:5d:
ab:a8:8e:d4:b2:b4:af:fc:c1:06:8f:f7:53:40:d8:
91:96:14:31:ca:83:9e:9c:68:34:d9:5d:f8:b3:98:
6d:f4:b8:3f:3a:49:fc:fc:8a:df:e7:1a:cb:b1:10:
c0:5c:f0:7c:cd:c3:c9:28:d3:92:d4:6a:97:aa:45:
f1:5c:45:fa:7a:9d:5c:21:0f:fd:7e:42:03:9d:37:
53:5a:72:1e:91:d2:ae:c9:94:65:da:c6:62:cf:b5:
c2:19:53:f8:cb:b0:e6:1c:4d:8b:c8:ee:a3:18:14:
b1:3e:51:50:cb:d3:fd:93:09:10:32:2c:3a:36:f7:
15:7d:a3:a2:1a:5a:36:5c:09:66:f2:4b:83:61:d9:
41:ad:4a:a6:5d:4b:cc:11:d9:0c:43:7d:8c:92:6d:
5c:0f:ff:01:fb:95:bc:16:7f:d0:81:85:bd:cb:89:
1b:a6:ea:50:77:e0:b2:3d:09:b4:a6:22:79:0a:62:
43:9c:9c:d0:22:84:3e:e8:eb:ec:a9:45:42:0c:16:
36:d6:d5:3e:d7:af:6c:e5:8c:bb:ba:0f:69:9b:d9:
6c:cb:1c:e4:48:14:47:9a:51:59:8e:77:a1:02:44:
5b:7e:f0:e6:5a:6f:e3:9d:b4:3b:7f:10:b1:85:d6:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:0C:58:90:E4:4A:80:A9:7D:94:89:37:90:4E:34:1E:07:44:A1
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:bf:28:fb:4c:69:84:f6:7f:bb:a0:b0:3a:fb:0d:78:4b:
49:b4:c7:a8:95:08:cc:ba:f1:3d:b5:00:41:be:27:5d:b5:0b:
48:71:d8:7f:1f:96:60:ed:6b:16:eb:98:4c:de:1c:07:a0:99:
20:93:fb:24:3c:e9:b4:1a:e2:4a:b5:71:d6:8e:74:86:67:df:
12:04:8e:cc:a6:d2:f1:90:46:4b:58:e5:1e:53:cc:a8:25:6d:
ee:ec:de:f1:8d:cf:b4:07:09:8f:ed:40:48:92:c7:6c:79:68:
5c:d5:27:5d:5a:aa:00:e1:88:ec:c2:9b:46:66:e1:76:5b:30:
d1:49:2f:22:36:39:a4:7a:8a:7a:e0:52:2e:a3:97:20:65:af:
56:fd:28:8e:c9:2d:67:91:d4:96:3d:ee:61:a1:dc:12:a7:66:
23:1a:b5:1c:9d:cb:66:a5:7f:b3:b8:c1:f7:b7:c8:e0:ed:65:
e7:d3:fc:cd:da:ab:60:bb:6f:08:bd:ad:e2:76:54:1d:1c:b3:
c5:69:5a:71:e0:c7:9a:a5:f6:37:02:07:1d:a2:2f:6e:2b:05:
7a:4a:bd:19:30:02:00:5d:44:4a:4c:e9:63:0f:18:3d:ff:98:
8a:ea:23:16:37:84:d2:e1:e0:28:29:8a:55:df:d8:7a:41:42:
84:e1:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:44 2026 by rpki-client