
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: 3Z4CWKPTDBhCN9TCeVcqV2uO92McEC9Am73McwPhfOQ=
Subject key identifier: 33:E8:E7:D4:7A:B5:25:29:8F:A4:41:AA:B8:81:57:A6:37:B4:5A:7C
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 019FA9AB9F795DE5831852D5FF763104B3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0FE9
Signing time: Tue 28 Jul 2026 17:00:24 +0000
Manifest this update: Tue 28 Jul 2026 17:00:24 +0000
Manifest next update: Wed 29 Jul 2026 17:00:24 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: l3jex4TRpLEsADKOgnTLdTd1e7uOPPF8Lf+sFm0LyMc=)
2: KdkSplDy4QjMpE4fLCxjhJLFG-A.roa (hash: GJjKbZNtY1x/kWqwNINR2VUda7Jb8+5oqTMBWfwhVbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:9f:79:5d:e5:83:18:52:d5:ff:76:31:04:b3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Jul 28 17:00:24 2026 GMT
Not After : Jul 29 17:00:24 2026 GMT
Subject: CN=33e8e7d47ab525298fa441aab88157a637b45a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:cc:94:35:b4:4b:bf:f1:5f:3d:6b:5e:6d:
5f:da:09:78:7b:7a:1a:c7:cd:68:c4:de:65:a2:91:
b2:aa:4f:c1:f1:b1:05:27:42:4e:2b:40:5f:f5:02:
cc:b4:84:4c:5b:4b:3c:d3:57:db:64:5b:4e:84:95:
f7:2f:36:27:c9:d8:cf:14:c5:a1:e9:78:d2:94:87:
12:71:9a:69:24:c1:41:cb:0e:81:6b:e7:33:d1:5b:
7f:39:f8:f7:ed:27:a3:05:75:93:af:87:24:56:3b:
7f:f0:44:1f:09:22:1a:9e:1f:ba:89:b9:18:d4:df:
07:21:96:33:4e:5b:ac:f9:d7:03:60:db:62:74:f3:
d4:e5:0c:d9:16:f3:99:0d:9b:81:d3:c8:7c:29:0f:
44:99:40:5b:e7:7d:9b:26:a9:e9:fb:5c:90:db:a9:
dc:52:21:36:7e:3f:13:46:22:79:49:f3:5a:e2:16:
82:22:2f:fc:49:6b:7e:a1:55:3a:df:05:38:55:9a:
0b:de:58:54:cb:33:6e:7b:89:af:f2:e1:09:32:59:
40:f4:38:c5:23:20:a0:e9:05:e1:e3:60:51:d6:ce:
eb:c1:16:3e:bf:74:57:27:ba:63:3f:20:30:e7:9e:
d5:fe:20:c7:3a:7a:f6:70:0b:5b:7b:59:d0:fe:11:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:E7:D4:7A:B5:25:29:8F:A4:41:AA:B8:81:57:A6:37:B4:5A:7C
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d5:e8:f5:d8:09:a2:b3:a2:8e:a5:26:ce:3e:31:6f:54:a0:
54:0c:a8:14:a8:07:22:cd:e9:59:4b:75:62:c7:26:79:f7:db:
3d:51:e7:b8:d4:31:99:d4:46:d5:1e:7c:ae:d5:83:1b:ab:26:
96:c1:a2:7c:76:d7:3d:45:ca:a5:34:9f:c6:77:26:02:63:78:
43:94:27:e4:e1:23:d5:4a:19:5f:b8:59:a6:bc:af:f4:3c:be:
a4:eb:23:c7:d2:35:ca:73:d5:49:72:92:03:59:0f:f1:59:b4:
dc:d9:b9:ca:d5:ea:77:5e:b4:31:da:98:2f:3a:b5:17:0b:b4:
93:43:6c:07:fb:ae:eb:d6:80:2b:28:46:14:a3:29:69:29:33:
52:70:21:da:b0:84:d0:93:24:1e:75:e6:90:3d:12:e5:04:3d:
c6:0a:ab:36:84:7c:29:b7:1a:ea:e5:12:17:19:af:5c:2a:25:
22:34:ab:8f:1f:5f:f0:bd:48:52:e6:6e:52:aa:15:cd:cc:a9:
c1:53:b1:2e:7a:06:6d:02:c7:26:8d:a3:75:0b:cf:91:de:33:
96:0c:7c:f5:7f:cc:4b:a5:1e:74:4b:cd:80:7e:c6:77:21:c9:
4b:ec:2f:ea:7d:5b:35:9b:33:60:3e:a5:99:1c:a5:be:22:73:
42:d0:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:25 2026 by rpki-client