Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: ZsOwhr6d1G+lIIAI+ziAKNUENTWu8gcISDcyiBCTAA4=
Subject key identifier: ED:9D:24:70:25:2C:49:7C:0F:98:B0:FA:49:95:2B:D9:96:EE:99:B1
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019EBF5AB0211BA553B086249672FAF12F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0628
Signing time: Sat 13 Jun 2026 05:00:51 +0000
Manifest this update: Sat 13 Jun 2026 05:00:51 +0000
Manifest next update: Sun 14 Jun 2026 05:00:51 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 8H61qaRPaj9mN7gFlACYoWYi+rBW9t6ozzLoxMxAxGo=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:b0:21:1b:a5:53:b0:86:24:96:72:fa:f1:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jun 13 05:00:51 2026 GMT
Not After : Jun 14 05:00:51 2026 GMT
Subject: CN=ed9d2470252c497c0f98b0fa49952bd996ee99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:47:69:ed:13:c6:24:27:fa:42:84:5a:e3:
ea:ea:cf:76:2d:39:5b:29:90:fc:dd:09:4b:71:7a:
c9:29:10:ff:3f:1c:98:9b:b9:4b:d4:1e:55:30:53:
d5:7e:3f:4f:c1:85:f2:bf:ec:4a:7d:98:84:a6:6a:
50:d4:4f:a1:51:e1:81:c7:20:6b:02:65:89:86:ee:
86:a1:50:71:30:8a:c9:9d:86:8e:48:cd:6a:92:79:
fc:74:72:52:bb:ab:f8:76:6d:af:3c:f5:c4:67:a6:
fc:4b:ac:82:96:4b:64:9f:71:b5:f0:f6:4b:d4:f3:
cc:fb:91:a2:e5:d9:56:0d:02:8c:fd:b6:f0:c1:b5:
c3:ef:7b:a7:7d:1d:ae:ea:20:84:14:9a:ca:71:cc:
a8:46:4f:5b:c9:b1:d7:63:8c:dd:54:c9:9d:e6:d6:
fd:ef:b9:b3:4f:a0:3f:b0:cb:87:0f:dd:2f:bc:c1:
92:5c:d9:27:0f:f8:a6:ba:f1:45:4e:92:6d:69:d3:
96:92:98:fb:36:e3:01:ec:59:d3:66:2d:5f:1e:21:
cb:5e:b8:09:79:26:69:40:c7:0e:5e:8d:20:eb:3c:
6a:3a:26:9b:84:c6:af:5b:a4:d4:36:c4:54:f1:ff:
38:be:ac:55:31:e7:6f:aa:dc:c2:ee:e4:43:6a:f2:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:24:70:25:2C:49:7C:0F:98:B0:FA:49:95:2B:D9:96:EE:99:B1
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:07:37:49:dd:cb:d1:c8:c3:a7:95:b7:31:96:af:dd:fa:
00:85:b8:48:f3:c3:18:df:27:d8:42:47:78:82:d1:59:7a:ed:
21:a5:a2:ef:ad:67:43:b8:d5:64:41:32:d1:b8:70:da:61:de:
01:ef:36:64:16:31:3d:c3:62:7c:9c:d3:01:c0:72:fd:01:aa:
a5:26:c0:39:f8:1c:ab:be:2a:2a:f3:e4:b2:ef:81:1e:7a:33:
25:22:fc:12:b0:0b:2e:9a:fd:a6:e0:44:f4:92:98:03:e1:67:
3d:99:64:b2:5e:4f:38:fb:cf:1e:58:27:18:ad:73:20:1e:d2:
9c:5b:d1:22:60:c6:d2:52:0c:b3:08:ef:4b:90:3b:0f:9a:59:
0c:73:8b:41:f1:af:3e:ce:70:0b:e4:44:e1:ce:22:ef:57:d8:
2e:10:08:98:fa:35:86:83:52:03:cb:98:0d:a0:9b:48:0a:30:
9f:2d:bd:5c:f6:a0:23:ee:12:53:b0:0a:ca:55:d2:b7:55:1f:
46:85:31:e8:17:56:24:0d:13:9e:88:c8:97:69:e1:ff:b1:34:
fb:78:06:c5:ee:88:e5:27:0e:24:42:17:43:b4:d6:82:7c:57:
5a:8c:b4:c1:3e:7f:d8:c0:b0:b1:59:8e:56:95:62:6e:a1:1e:
5a:fc:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:30 2026 by rpki-client