Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File: 5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier: c8o2AFyiON87nYN2V9yLfRZ9XqoSzA11f3AMG0wIHXs=
Subject key identifier: DD:48:EB:FD:12:F2:6A:68:2A:00:63:AA:55:FB:D3:E4:5B:89:8B:27
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer: /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial: 019EC06E029C5F6C63FEB5B70315AE81EFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number: 07DF
Signing time: Sat 13 Jun 2026 10:01:35 +0000
Manifest this update: Sat 13 Jun 2026 10:01:35 +0000
Manifest next update: Sun 14 Jun 2026 10:01:35 +0000
Files and hashes: 1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: MYDR5RjffxvD1rMNxLEel6iypl2X1ebHgGwstfcptcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:02:9c:5f:6c:63:fe:b5:b7:03:15:ae:81:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Validity
Not Before: Jun 13 10:01:35 2026 GMT
Not After : Jun 14 10:01:35 2026 GMT
Subject: CN=dd48ebfd12f26a682a0063aa55fbd3e45b898b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:03:66:27:7b:69:40:73:c1:38:05:1c:f3:
47:eb:4a:e5:28:35:c8:1d:59:ee:a3:be:4f:47:62:
26:5a:6e:d8:5e:4a:aa:23:6a:9f:e1:c1:7f:55:d5:
0c:fb:65:4f:2b:46:ac:c5:fd:0c:c1:7b:ea:64:3a:
21:49:fe:b0:d1:30:2f:17:a1:32:9b:a4:94:aa:ef:
13:99:c3:5c:c0:42:42:32:6c:7d:86:7b:e7:7e:07:
12:0c:d6:47:d8:9b:dc:cd:02:1c:3a:8c:e5:e8:6a:
db:42:e5:c5:19:65:5c:b9:86:f7:34:f0:77:d4:17:
e6:64:5c:8d:ee:c4:2b:28:0e:93:4a:9f:d4:fb:78:
c2:37:23:a6:ed:63:62:4e:26:15:e4:f5:b2:99:f9:
9f:17:c0:39:9f:37:ee:28:5d:41:fb:e0:7f:01:b4:
03:36:48:db:d8:5c:49:28:c6:18:62:19:66:05:94:
f8:0b:cf:54:a3:fe:b7:0d:3e:f8:a4:dd:5a:9d:6e:
28:e5:77:f0:18:a1:48:f2:8c:5b:cc:0b:df:c0:d0:
fe:bf:8b:d0:64:12:d2:35:0b:ea:a3:ac:5e:d6:75:
0e:a5:06:96:5b:bb:fb:bb:97:22:fd:6e:46:b8:11:
41:3d:77:66:0a:34:78:df:d4:4e:30:85:09:76:64:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:48:EB:FD:12:F2:6A:68:2A:00:63:AA:55:FB:D3:E4:5B:89:8B:27
X509v3 Authority Key Identifier:
keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:cf:96:32:da:e7:09:ce:39:b1:00:9b:a9:6a:b6:eb:4c:
79:83:56:ce:b9:0b:7f:c9:29:1c:28:7d:71:92:03:f9:2b:60:
2a:7b:25:7c:55:90:0f:c1:3a:20:84:67:a1:bd:70:5b:af:2b:
55:b7:28:28:49:e1:60:99:21:99:e1:15:71:75:e9:fd:84:1c:
32:6f:c4:ee:67:df:2f:10:38:79:e6:6b:45:9e:0e:f1:e8:89:
d2:fa:09:b8:ee:66:09:c9:13:a8:f3:4b:f7:81:10:ef:01:67:
15:79:7c:41:3c:f4:72:f8:a6:b6:73:06:3d:31:63:89:11:9c:
2a:45:9b:10:7b:39:cf:89:68:35:a3:a0:ca:ce:a1:e7:99:68:
68:b9:7a:e7:b6:7f:3f:55:81:18:be:53:df:bc:93:6b:28:d3:
e8:f0:b0:a3:cd:2b:be:4a:16:20:f8:26:e5:56:09:73:35:57:
52:03:22:69:60:84:0e:ef:8d:47:5d:f4:1e:05:8d:3c:41:99:
33:c2:58:b6:67:f2:13:40:a9:0f:2e:79:fb:34:b1:68:80:9f:
b5:28:dc:e7:6b:2a:2a:4b:dc:74:c6:25:06:18:31:a6:6c:b2:
4e:c7:e3:4d:d9:8a:31:1a:e7:09:5b:06:d0:05:9d:0b:6f:45:
86:d1:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:15:24 2026 by rpki-client