Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: 1ZCNhNXMudO+/T4DVojS4qYSjYNv3INuBlIRuYeZbPI=
Subject key identifier: EA:3D:80:B4:4F:22:1B:ED:2A:72:0F:44:12:7A:EB:8D:BE:89:D4:4C
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019FAA87CFC9D1A3E03717937AC5C78F8F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 16B1
Signing time: Tue 28 Jul 2026 21:00:54 +0000
Manifest this update: Tue 28 Jul 2026 21:00:54 +0000
Manifest next update: Wed 29 Jul 2026 21:00:54 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: RdTqlN1gUQ/khxUFvuIcM/JTRiu47069SCK50QsHGYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:cf:c9:d1:a3:e0:37:17:93:7a:c5:c7:8f:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Jul 28 21:00:54 2026 GMT
Not After : Jul 29 21:00:54 2026 GMT
Subject: CN=ea3d80b44f221bed2a720f44127aeb8dbe89d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:9d:c4:e0:73:63:33:49:d1:12:30:f9:eb:
27:6a:e3:49:33:58:c1:f7:f8:f2:6b:d2:f8:5d:5a:
03:58:45:90:cc:91:ff:2b:d8:cb:e7:b7:7d:6f:bf:
cf:f7:d8:24:4c:3d:c2:ee:71:9f:9f:a9:05:36:0a:
54:00:5b:60:73:91:55:68:df:18:49:64:69:fe:2e:
9e:1c:a1:c8:db:66:32:a1:a2:02:f2:90:10:b0:d6:
9a:f8:8f:2f:86:c3:3c:85:7c:bc:6b:42:0a:37:b1:
3b:20:d6:23:a6:c0:78:c0:6d:7a:64:4d:6e:79:27:
7c:a0:09:8e:3d:3e:c6:ac:23:58:20:aa:6b:68:9f:
02:41:44:22:aa:46:23:94:dc:5a:8d:af:6c:f4:e3:
4d:91:0a:21:39:e9:4e:89:89:eb:48:52:9d:5e:f5:
42:ef:ec:3f:dd:f2:ab:89:b8:2a:99:bd:b5:71:4d:
bf:0a:c3:04:cc:49:af:60:95:4e:77:c1:ed:17:27:
5f:e4:b8:ec:da:50:f8:70:0d:6e:da:46:d9:70:11:
26:89:16:69:c5:b3:b9:ff:b7:a3:42:03:9b:af:90:
ac:3f:33:6b:7c:1c:c3:21:51:3e:c9:de:25:ac:35:
c0:c5:c8:dc:cf:0a:d6:c3:b5:70:64:ad:a1:1b:f9:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:80:B4:4F:22:1B:ED:2A:72:0F:44:12:7A:EB:8D:BE:89:D4:4C
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:11:67:dd:7a:22:f8:b9:85:25:35:ed:7a:0a:d5:81:da:
e9:00:a1:1b:97:56:ae:ba:07:7c:57:98:96:17:a1:26:52:90:
cf:c7:c9:82:50:d3:58:32:e9:44:bf:ee:a8:2b:88:83:cc:46:
ea:a6:d9:00:98:d2:d1:1d:01:20:05:6f:d1:c4:4a:fc:eb:0e:
fd:82:49:dd:b5:81:9a:07:76:9f:70:97:6f:b9:e0:ee:98:ab:
c0:8c:4c:cc:b9:64:0c:fd:37:f6:e9:23:f0:f7:6e:64:e4:da:
3a:05:b3:e8:cf:bb:3e:64:06:c6:69:de:c0:75:25:a8:c1:d9:
7a:19:7b:75:0f:b7:f3:53:c0:98:e9:18:7b:46:bc:e4:a3:6d:
1d:e7:eb:92:e5:5e:00:83:85:db:52:2f:4d:fe:02:35:f2:cb:
1f:62:20:9b:2e:7e:e8:2e:6c:1f:38:8f:31:5b:e6:c9:f1:9e:
8a:69:50:d9:c5:cd:41:a6:dc:08:72:a7:3b:bf:24:68:28:d1:
0a:f4:1b:71:49:5c:ed:9f:14:64:12:35:f6:c5:cd:8a:ef:3b:
05:e9:2d:74:9c:69:3a:f2:25:a1:a9:39:9d:54:a6:f8:1b:f4:
ee:41:eb:b2:45:6b:b1:b1:1d:a8:66:63:9e:70:a4:e4:c4:a3:
57:d3:a0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:50 2026 by rpki-client