Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: ryy5auKqdP8AHrTa4FI571dJ4LrD5oui2eTk152ZgYg=
Subject key identifier: 33:72:AA:5D:D5:C6:DB:0E:D2:40:A4:76:ED:F9:71:81:17:F3:60:5C
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 019FA975CCB0FED523B5CA3A9B51B5A547A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 16:01:37 +0000
Manifest this update: Tue 28 Jul 2026 16:01:37 +0000
Manifest next update: Wed 29 Jul 2026 16:01:37 +0000
Files and hashes: 1: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: kdQc7yCR9F3KSQe6GUgsxtGnuyXFNg9ct1dhbt7kUGo=)
2: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (hash: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:cc:b0:fe:d5:23:b5:ca:3a:9b:51:b5:a5:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jul 28 16:01:37 2026 GMT
Not After : Jul 29 16:01:37 2026 GMT
Subject: CN=3372aa5dd5c6db0ed240a476edf9718117f3605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:51:13:ea:fd:c6:1e:bf:8b:d8:92:f2:f3:
2f:a0:8b:a5:81:c0:8f:e4:4d:7e:43:42:f1:d3:45:
c6:9c:d9:29:ab:3b:d1:aa:74:a6:37:12:88:4a:1a:
ab:5a:68:b8:14:83:80:f1:3a:3c:e8:a5:40:39:89:
df:db:0e:d7:01:b9:71:cd:f5:32:ed:e8:10:1c:e9:
40:8b:05:25:da:1c:37:eb:2d:92:8b:7f:72:1b:c7:
04:9b:c5:00:7f:77:0f:02:67:b6:8c:d5:64:b5:62:
47:dc:ec:74:8b:a3:ee:ef:39:0f:96:ad:e8:2a:09:
0e:ca:d4:f0:3a:9f:ae:7f:ba:b1:60:59:89:83:cb:
64:18:d1:a8:83:6b:69:6b:27:6c:1a:71:c8:5e:fc:
5c:dc:a8:72:ec:af:2d:50:c0:bc:a4:10:72:d6:a2:
ca:ab:6e:44:5d:a3:07:8c:64:54:13:51:52:a3:55:
76:3b:50:ad:07:73:e6:ea:6f:aa:1e:2b:6e:17:7c:
b8:19:11:e6:47:50:eb:bd:f1:40:3d:c4:8f:ab:f1:
5b:9f:be:96:2b:9d:ad:de:09:89:42:64:da:c6:ff:
1e:6a:e9:b0:a5:9b:60:2d:c0:9b:3f:6c:85:c0:78:
b4:1c:77:6a:99:30:a0:e8:02:7a:f5:3c:b5:3f:5c:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:AA:5D:D5:C6:DB:0E:D2:40:A4:76:ED:F9:71:81:17:F3:60:5C
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:bc:92:c0:9a:8f:a6:ec:7b:97:b6:1f:50:07:d2:6b:fe:
bf:bd:08:c3:6a:5a:41:3c:eb:11:60:d2:07:a2:ba:af:63:a6:
c4:26:cb:5f:ef:9b:30:3a:35:7d:25:7a:b6:b0:a8:1f:b4:57:
f7:e2:5a:6a:6e:dd:77:72:29:cf:2c:d7:37:4f:06:ad:6a:d7:
d1:0c:50:a3:ee:32:45:ed:6f:0a:5c:b6:1f:a1:b9:f5:b5:a1:
d6:f1:5d:b4:76:10:74:e3:4d:4f:9d:3d:86:a0:36:dc:07:3e:
e1:12:ac:8f:a6:41:a3:8c:dd:c2:b9:f4:b0:68:cf:25:f3:2f:
81:ef:dd:85:c5:6e:d3:fd:53:65:0d:fe:2b:b8:cf:a8:68:b7:
33:5a:51:c4:41:b7:5a:a2:46:78:28:3d:ef:9b:07:a5:77:1a:
4f:23:1e:f6:f3:4c:63:a1:b2:a0:cb:30:f5:13:79:1e:f5:62:
3c:a5:1a:e4:42:20:d5:da:00:81:dc:9a:ff:0d:54:90:aa:5b:
0d:3b:71:57:87:ce:71:8f:2d:bb:27:47:61:c6:40:04:b4:d7:
e3:ab:3e:4c:5b:5f:6c:9e:8e:30:02:ba:23:e0:4e:a2:77:bc:
50:e1:4d:bc:f5:e7:2a:04:89:1b:8b:32:af:b3:b0:34:7d:7d:
af:bf:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:34 2026 by rpki-client