Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: WYnfyMswpzMQ27IzrTH4mtPkAUL5oRZOpWnASfVUccs=
Subject key identifier: 5C:67:F4:81:4E:C4:DE:D2:69:F2:98:89:BD:9A:DF:F4:51:CA:12:2A
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 019EC1B6DCFA9FA80E7D2402FB528DC301F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 16:00:47 +0000
Manifest this update: Sat 13 Jun 2026 16:00:47 +0000
Manifest next update: Sun 14 Jun 2026 16:00:47 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: BH7lUzdgch2N7Rw6sCspmb4rfLJviw65UJg9e3s+6dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:dc:fa:9f:a8:0e:7d:24:02:fb:52:8d:c3:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Jun 13 16:00:47 2026 GMT
Not After : Jun 14 16:00:47 2026 GMT
Subject: CN=5c67f4814ec4ded269f29889bd9adff451ca122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:3b:ab:e6:d6:a5:4f:37:fa:78:9d:78:c0:
f2:67:86:fe:d6:02:fb:ce:ed:1d:ba:07:9b:d0:4a:
17:1e:77:9f:9b:4c:e8:9a:05:69:5a:8d:33:08:73:
39:19:d2:a1:1b:0b:e7:d2:39:df:99:90:21:70:80:
d6:4b:94:72:5c:dc:94:b3:aa:ba:57:ad:d6:b1:49:
4f:75:99:5c:a2:10:33:a5:8f:59:9c:95:ec:3f:aa:
25:63:ee:0b:62:4c:a3:29:85:9c:56:c3:a4:ee:ad:
8d:e6:26:13:b5:03:09:a9:9a:e0:38:4d:fe:0a:4d:
4b:06:19:5e:4f:db:cb:ec:fd:0b:d2:bf:fb:33:70:
ae:1e:83:59:c4:26:9e:4a:e7:98:c5:c3:75:3b:96:
a6:1b:6b:27:43:2e:ab:e7:d4:09:ab:05:96:19:80:
d4:73:73:98:b0:cd:07:e7:90:20:54:90:48:b3:f2:
4a:ef:b5:09:04:b7:18:3f:6e:f4:80:7f:db:38:18:
a4:69:0a:76:6e:80:94:c8:4d:b0:44:51:aa:7a:d0:
02:10:46:06:54:a4:b7:4f:ed:fd:61:3a:d9:44:55:
fb:fb:e3:b5:d7:ef:11:af:81:51:cc:87:03:6c:21:
c6:2c:b5:a9:30:5e:d8:54:d4:c9:07:9a:db:2d:70:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:F4:81:4E:C4:DE:D2:69:F2:98:89:BD:9A:DF:F4:51:CA:12:2A
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:a7:b4:80:e4:21:83:95:65:9d:7a:53:1b:c3:2f:57:54:
8d:ca:9c:d0:f1:d4:aa:a2:e6:aa:4b:59:f0:57:92:78:40:a2:
6b:bc:53:ce:50:c1:39:59:f8:a0:65:48:87:46:d9:ac:96:2d:
34:07:96:0d:7f:63:fe:c1:e6:a1:1c:66:c1:02:c1:f7:5b:f7:
c5:88:79:01:71:3f:bf:d9:f6:ab:bb:1f:c0:60:ff:bc:8b:a6:
24:c6:37:11:c3:a8:02:5f:d6:fd:89:90:b8:68:8f:64:25:82:
ba:7e:a7:d5:b3:68:51:c0:18:8b:87:b4:40:ed:22:ee:f3:92:
bd:bd:77:9f:97:3f:e0:e8:3b:02:d4:9a:52:65:7f:23:b8:a4:
38:c9:11:5d:da:bd:04:e1:8e:78:88:5a:b2:1f:f5:d4:11:2d:
8b:9b:42:bc:f6:fa:15:5a:67:03:26:b5:6e:32:5e:05:91:ad:
0d:cf:68:c7:e1:57:f8:ab:eb:60:11:81:ac:2d:79:77:2c:28:
09:5c:65:82:dd:27:b2:c8:f5:38:1e:e2:99:02:d6:9b:82:0f:
0d:b6:51:ab:21:05:51:5f:e9:4a:4d:86:66:02:92:40:54:c4:
df:40:b9:1b:5a:f5:b3:b3:35:e6:63:0d:ca:97:fd:d0:d5:fa:
3a:1c:76:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bttz6n6gOfSQC+1KNwwHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmNiN2FjZDU1ZjYzNDliOWQ4MTQ2MTc4NmMxMjQ1OGY4
NmY3MmUwHhcNMjYwNjEzMTYwMDQ3WhcNMjYwNjE0MTYwMDQ3WjAzMTEwLwYDVQQD
Eyg1YzY3ZjQ4MTRlYzRkZWQyNjlmMjk4ODliZDlhZGZmNDUxY2ExMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+E7q+bWpU83+nideMDyZ4b+1gL7
zu0dugeb0EoXHnefm0zomgVpWo0zCHM5GdKhGwvn0jnfmZAhcIDWS5RyXNyUs6q6
V63WsUlPdZlcohAzpY9ZnJXsP6olY+4LYkyjKYWcVsOk7q2N5iYTtQMJqZrgOE3+
Ck1LBhleT9vL7P0L0r/7M3CuHoNZxCaeSueYxcN1O5amG2snQy6r59QJqwWWGYDU
c3OYsM0H55AgVJBIs/JK77UJBLcYP270gH/bOBikaQp2boCUyE2wRFGqetACEEYG
VKS3T+39YTrZRFX7++O11+8Rr4FRzIcDbCHGLLWpMF7YVNTJB5rbLXBtbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxn9IFOxN7SafKYib2a3/RRyhIqMB8GA1UdIwQY
MBaAFOf8t6zVX2NJudgUYXhsEkWPhvcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMt
Y2RiM2E2NTdkOWVlLzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMtY2RiM2E2NTdkOWVl
LzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy+ntIDk
IYOVZZ16UxvDL1dUjcqc0PHUqqLmqktZ8FeSeECia7xTzlDBOVn4oGVIh0bZrJYt
NAeWDX9j/sHmoRxmwQLB91v3xYh5AXE/v9n2q7sfwGD/vIumJMY3EcOoAl/W/YmQ
uGiPZCWCun6n1bNoUcAYi4e0QO0i7vOSvb13n5c/4Og7AtSaUmV/I7ikOMkRXdq9
BOGOeIhash/11BEti5tCvPb6FVpnAya1bjJeBZGtDc9ox+FX+KvrYBGBrC15dywo
CVxlgt0nssj1OB7imQLWm4IPDbZRqyEFUV/pSk2GZgKSQFTE30C5G1r1s7M15mMN
ypf90NX6Ohx2cQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:03:12 2026 by rpki-client