Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: XaH590E/5TTunRo1GzUFC0hEU4nUcbqvwzMRfOzk0Cc=
Subject key identifier: 40:A4:E9:8B:AB:37:0B:F1:D9:5A:0F:43:B2:21:63:73:B3:07:27:95
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 019EC06DD53ACB3779DB03B25EF297F95CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 10:01:23 +0000
Manifest this update: Sat 13 Jun 2026 10:01:23 +0000
Manifest next update: Sun 14 Jun 2026 10:01:23 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: FYkwLYTzgorPCq6Udk/Y4TecGx4KM54vIBhsIKxIQkI=)
2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:d5:3a:cb:37:79:db:03:b2:5e:f2:97:f9:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jun 13 10:01:23 2026 GMT
Not After : Jun 14 10:01:23 2026 GMT
Subject: CN=40a4e98bab370bf1d95a0f43b2216373b3072795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:dc:45:10:06:0c:52:df:21:07:72:da:89:
b5:49:31:ce:92:c7:e8:ec:b6:53:c4:d5:53:16:2d:
f7:3f:d2:4c:98:ab:b2:1c:92:95:56:97:bd:46:b0:
5e:01:fc:1e:ff:ff:60:96:f5:f2:73:47:b6:47:81:
65:1d:0e:13:b9:e4:a5:36:ba:4e:cb:d3:d6:b4:37:
91:0f:cc:4a:51:b2:65:9c:1c:6f:d0:38:6c:37:66:
7c:e2:07:99:52:f6:00:4e:4b:6a:41:96:76:8a:79:
5d:49:c2:39:b1:02:f4:eb:62:e7:80:bc:7c:c4:da:
63:f6:b8:49:ba:30:27:71:28:9b:c6:55:76:45:07:
27:46:86:7f:45:9e:bb:c6:84:12:59:be:20:2f:e2:
66:fb:a3:0c:ac:5d:2e:ca:ac:9b:d1:55:5f:e9:ec:
86:a1:29:c1:ae:f1:d7:cc:be:6d:c3:95:9c:4f:c9:
de:36:a7:54:38:a8:95:99:80:7b:e4:06:68:eb:cd:
9f:34:02:6d:d8:31:3e:9e:ca:fe:6f:6f:27:7f:56:
77:33:f2:d5:6f:da:6e:61:60:76:7f:24:df:2a:c7:
99:b4:a6:bc:1d:22:d8:cf:56:80:eb:21:31:ad:a1:
be:bd:61:de:d7:d9:2f:17:51:ea:4c:ee:19:83:01:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:E9:8B:AB:37:0B:F1:D9:5A:0F:43:B2:21:63:73:B3:07:27:95
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:fb:8a:30:3d:09:12:ea:da:d6:c6:77:e1:a7:96:4a:a3:
9f:2b:d8:64:eb:b8:9f:c8:40:3d:32:45:73:b2:8e:a9:80:e3:
c2:11:38:fd:79:fc:5e:51:12:da:15:80:68:88:d1:6a:6c:36:
3a:7d:5e:87:21:cd:6d:94:6b:34:47:70:27:3c:d9:fc:9b:93:
7f:0a:e6:d1:db:59:83:4a:b1:d0:c3:74:e0:11:1e:cd:41:a8:
60:7a:6a:bf:21:33:c2:6c:53:8d:c0:b0:5f:08:77:60:64:7f:
6a:0b:bc:c2:9d:a5:87:b9:90:f3:dc:4d:06:c9:74:a2:18:a6:
5f:f1:96:5e:25:86:70:4a:fa:04:c1:78:16:63:83:47:b1:fc:
3c:a0:63:e5:93:53:c3:2c:e4:b4:ae:97:2f:27:3e:bb:bc:ef:
62:1a:c5:63:43:e7:a4:ca:dd:28:ee:d7:73:95:94:d7:4d:07:
22:b7:9a:b1:75:ec:8f:a3:e5:a8:67:ac:d0:d0:ab:f1:a9:fa:
85:e0:c1:2a:73:76:c0:e0:cc:bb:d6:e2:ea:4e:3a:db:a8:9e:
ec:60:cc:ce:ee:4d:5f:7f:d7:3c:b5:64:90:53:46:6e:87:71:
1c:00:e9:9e:e1:ce:12:c3:2e:e1:00:ec:5f:f3:28:f3:04:60:
0e:60:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:32 2026 by rpki-client