Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: ByBCW9E2t+/wU+wbxuKh8ghZyZysgz+Kp5HB/2asKWk=
Subject key identifier: 43:D7:F0:D0:4D:84:C8:93:EA:FC:F8:E3:C7:68:12:FF:73:F0:78:32
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019EBEEC9A258278460815D5AE46689A51EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 03:00:37 +0000
Manifest this update: Sat 13 Jun 2026 03:00:37 +0000
Manifest next update: Sun 14 Jun 2026 03:00:37 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: PM+zZwA7c26d1TLcLG2Nkfwc6GsZkBUmaHMAAibqsSM=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:9a:25:82:78:46:08:15:d5:ae:46:68:9a:51:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jun 13 03:00:37 2026 GMT
Not After : Jun 14 03:00:37 2026 GMT
Subject: CN=43d7f0d04d84c893eafcf8e3c76812ff73f07832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:07:30:fa:0a:e5:9e:6a:14:d3:60:cd:9c:
97:d3:bb:6c:b4:4b:30:93:2a:7d:92:14:b0:94:b8:
56:7c:c8:7c:90:ad:ae:f1:6d:5f:20:6f:1f:54:d5:
dd:db:1f:f4:9d:af:f1:0e:a4:08:8a:f5:2e:7a:38:
22:6b:8f:bb:5d:c0:32:c8:8a:18:b7:a5:f4:68:f8:
34:cf:c9:b4:c4:ad:4e:cc:6d:89:53:21:ad:52:a7:
19:fe:96:3e:4b:17:cf:e0:50:76:4b:89:7d:93:93:
ed:f6:de:aa:4a:9b:a3:19:cb:8a:44:c0:6a:95:ab:
5c:44:af:28:d9:3e:bd:66:ff:f2:cf:6e:4b:84:81:
a7:53:c4:ca:be:5b:f0:d2:79:fc:28:31:33:75:f2:
28:0c:78:47:b8:a3:71:a4:3b:c3:44:4d:89:fa:71:
78:84:f4:21:c2:3c:6b:5d:cb:38:db:e2:75:1b:07:
e5:fc:86:b3:9d:aa:60:b1:11:f7:03:aa:35:1d:dd:
3c:3c:f1:ea:b2:bc:33:93:bb:a8:e3:9b:2b:0a:d8:
a5:83:74:7e:96:b4:f1:ab:29:d7:63:46:7c:9f:ae:
b7:19:a6:59:ab:cd:e1:2d:9c:61:50:6e:29:ac:89:
68:2b:1e:d3:d0:9c:63:03:b6:bd:45:05:c3:9e:e3:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D7:F0:D0:4D:84:C8:93:EA:FC:F8:E3:C7:68:12:FF:73:F0:78:32
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:fb:c9:70:02:e8:a5:e6:90:6b:11:aa:e3:8c:bc:2d:9d:
89:cf:79:dd:9d:74:34:c9:b4:1e:24:a2:43:c5:ad:4c:c4:c5:
09:7a:76:06:51:c8:28:4e:3e:de:e3:0c:ad:0e:b7:8e:6c:7d:
8a:e6:3a:bd:d4:11:7e:49:f3:bf:32:83:b5:ef:b7:ef:11:56:
cc:fe:28:fe:57:ec:cf:85:17:5c:4c:82:11:6c:4a:01:b4:2d:
96:3f:74:8c:26:2c:11:a9:d5:4e:a2:91:c8:55:08:89:75:c0:
d0:f3:b1:ad:7d:7b:20:4f:b4:62:95:75:c4:09:fd:05:a9:07:
f4:60:85:91:00:36:b1:9c:b2:66:3a:37:32:28:73:72:0d:ed:
5e:84:53:9d:19:19:ed:1b:dc:40:f2:43:17:70:bd:15:f0:64:
97:78:d2:9e:18:5b:10:ab:43:97:d8:da:a2:d7:2b:17:31:2e:
eb:a0:aa:a2:6c:6a:7e:a7:e4:50:ef:7c:8e:da:3b:91:e3:5a:
13:1b:c5:02:4c:47:19:6a:82:0d:9c:a0:a3:37:b7:b0:28:b4:
61:55:62:a1:08:b9:5b:99:3b:00:26:ea:93:61:30:85:02:9f:
5a:65:e8:0a:58:78:45:4f:80:7c:b0:eb:1b:21:a0:28:72:65:
f9:c3:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:58 2026 by rpki-client