Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: CnFJRLy7n5mFUUQsKhK68EMJLDRHBd/R4bnlA/QCPwE=
Subject key identifier: 52:5B:CA:B5:48:81:46:1D:C2:96:52:EE:43:2E:28:84:0D:42:4D:0F
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019EBF5A527E032C846ED8E429AD9A8E0153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0614
Signing time: Sat 13 Jun 2026 05:00:28 +0000
Manifest this update: Sat 13 Jun 2026 05:00:28 +0000
Manifest next update: Sun 14 Jun 2026 05:00:28 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: 086tqiIPYcfDTLQhs0W+nLXgtfIOUhMCFU6hZwSK1co=)
2: Gki0ECoPAysMOyKXl5MRgDPOl8U.asa (hash: E0R2O9JvpmCh8PA1gKVXhP81+K3nRGm/rwyvvFQeeqI=)
3: NPoJ48rOlMylXSV9suu4vTiIJd8.roa (hash: aQKCUY2SNtZbLIRkM+mjutTaN8ryl5E8Zuu6G5SpnXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:52:7e:03:2c:84:6e:d8:e4:29:ad:9a:8e:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jun 13 05:00:28 2026 GMT
Not After : Jun 14 05:00:28 2026 GMT
Subject: CN=525bcab54881461dc29652ee432e28840d424d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:88:22:3c:16:79:bd:1b:6c:f4:ad:98:4b:
9e:4a:52:64:f3:08:b3:37:f0:72:4a:89:f7:88:46:
d5:51:bd:af:de:ac:a6:1e:43:a0:d1:3f:ce:e9:82:
5f:f5:2b:60:ff:65:0d:01:89:16:16:34:74:bc:b6:
3b:31:44:04:89:15:03:0b:35:24:90:29:30:1d:45:
8b:c2:72:ba:7b:9c:9e:b7:ba:ee:97:29:89:70:74:
fa:f4:13:b4:68:5a:19:56:e5:33:05:02:8c:3b:93:
96:c2:2f:0e:0d:82:bb:cc:5a:11:a5:30:12:2e:8a:
7c:8c:e2:18:b6:f6:6b:91:c7:a4:9e:3b:d1:ad:8b:
04:e3:7f:07:7d:8e:3a:4c:43:9c:df:ea:ea:27:8b:
07:fc:aa:0d:e7:5e:02:f2:f0:70:54:c7:73:d6:d7:
01:86:95:e7:27:f6:10:62:f0:1d:94:38:6f:e7:27:
8d:51:89:7d:8d:e8:29:22:42:fa:86:1d:ce:44:8c:
a9:bb:f1:77:bc:ca:ff:d8:da:5a:ac:42:45:0f:11:
71:03:a8:36:58:fc:06:23:f5:1f:b0:ad:4d:4f:09:
00:6a:cc:d3:ac:d5:f2:86:bc:ad:cf:61:cb:f3:a0:
3b:9d:8b:30:56:99:a3:07:a3:42:ed:62:23:f5:46:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:CA:B5:48:81:46:1D:C2:96:52:EE:43:2E:28:84:0D:42:4D:0F
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:d8:5d:46:35:be:46:a9:05:60:4e:f9:c5:2a:34:19:2f:
7a:0c:73:33:3e:4d:d3:ea:6f:37:4e:2e:e4:be:e1:f9:60:dc:
61:bd:05:0c:01:06:8d:fa:06:14:a3:a4:14:5f:3b:a8:aa:d4:
f3:61:d0:9f:3b:ce:f1:4d:0f:c9:89:0a:dc:c5:1b:35:8f:2c:
bb:12:5e:78:79:de:78:f5:9e:cc:8c:21:4d:fd:06:98:8d:88:
52:4f:bf:bc:49:45:ce:36:b7:cd:cc:a7:52:b6:32:1e:90:fc:
3d:ed:99:1f:49:24:ac:56:5e:55:1a:3e:64:01:7f:29:c0:46:
42:71:a0:d3:6c:74:73:82:00:a0:03:47:d4:d9:bc:8b:fe:4f:
8a:38:21:93:ff:d8:30:7b:72:59:90:08:cb:c8:9f:74:9f:73:
f4:16:8d:09:2d:c6:87:4a:cb:e6:f0:5b:c8:6c:b1:da:42:f2:
4a:59:a8:e0:03:b9:4a:f6:ac:d1:fd:ff:4a:4e:1b:50:22:d8:
83:ac:b0:65:b5:09:d4:4f:9a:91:bb:2f:a3:96:61:9f:b4:f3:
e8:ef:47:a2:46:e4:42:3d:c1:59:6c:9d:20:1e:4f:3a:53:1e:
48:79:58:fd:9e:53:ea:9e:33:d7:94:11:7c:5f:dc:ed:cd:ca:
8c:3b:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:19 2026 by rpki-client