Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: HoI/e0YshS750TCwACLnMX4PNKDaV6ML2nBkie8VyFU=
Subject key identifier: 38:DE:46:3D:AC:1F:6F:95:D2:6B:9A:5A:CC:A4:DE:51:45:13:56:19
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019FAA8894AC9431CFFB7FCAAC23B564CA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1685
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: Add8IKciFqC4QxBwyuFCRAUiuTAhfegFefrBQUNtuhQ=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:94:ac:94:31:cf:fb:7f:ca:ac:23:b5:64:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=38de463dac1f6f95d26b9a5acca4de5145135619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:b4:5e:34:b8:63:d2:38:74:8b:c0:de:cc:
40:a6:6f:4c:62:7d:94:1d:51:de:3b:98:30:83:1e:
e1:ff:ed:e2:8f:63:e6:3e:8e:aa:b8:56:43:f3:c3:
2e:6a:51:54:88:94:3e:08:4d:45:54:01:53:c3:3f:
2d:a9:16:a2:5f:a9:ed:0b:e9:6c:92:81:be:18:c7:
92:32:a6:39:14:90:16:e2:b5:4f:1c:40:fb:3c:f5:
2d:1e:be:7d:e5:f6:bc:e5:1b:a6:58:22:80:68:2d:
ac:60:ac:4e:61:16:d1:cd:96:92:3f:98:32:d7:57:
09:f1:1d:92:67:63:1b:f1:63:9e:25:e6:c9:08:29:
ce:ed:fd:36:b1:72:fe:f5:81:9d:84:e7:98:9b:a3:
44:f7:4e:eb:a0:9d:f6:61:8a:42:2c:b5:31:6a:3e:
23:ab:a0:b5:d1:cf:7a:52:08:93:46:97:39:e8:93:
89:54:f4:85:84:74:86:08:28:33:e5:5d:55:d9:c6:
99:18:59:82:61:f6:fb:69:ab:b4:de:df:73:63:28:
a5:6c:a3:8b:0f:12:21:fd:e5:f7:31:98:01:4a:06:
c7:94:76:64:6a:c5:e7:25:89:d2:04:25:6c:15:7f:
5c:45:a0:bc:80:a3:9a:02:ea:4e:31:c7:fe:41:e2:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:46:3D:AC:1F:6F:95:D2:6B:9A:5A:CC:A4:DE:51:45:13:56:19
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:ab:bd:78:4e:43:ab:6f:0c:ea:fa:4b:4e:c0:f4:c0:33:
38:02:d6:cd:58:15:a0:30:f8:05:da:ac:e1:92:7f:8d:07:1e:
c5:08:d1:44:b9:27:0c:a4:5a:d1:61:f0:b6:45:f8:ef:be:55:
83:a8:60:e1:8c:6b:9c:1a:c9:99:2b:b8:2c:6e:28:5f:37:72:
2d:02:09:59:63:19:a4:4d:87:5e:02:f2:8b:c0:1a:bf:8a:30:
14:54:8d:e7:db:df:02:0c:42:c8:dc:e2:61:c6:93:81:6e:ff:
33:4d:85:03:df:79:d1:69:76:7c:9e:4e:09:15:ec:74:71:02:
2d:ab:08:14:54:33:ff:f4:8a:de:bb:9e:6d:9d:60:8f:78:0d:
f6:cf:0a:fc:7a:55:53:a1:4d:00:88:d2:fa:8c:ec:c6:e4:cd:
e7:b4:91:be:e5:cf:c9:f9:81:e1:15:79:79:8d:11:bf:72:54:
e1:c1:82:f2:64:06:b7:cb:aa:18:48:38:03:f5:a6:53:3c:ae:
0f:67:92:78:1b:13:05:34:6a:3c:9c:ec:66:31:3c:25:a1:33:
9f:0e:88:67:45:77:b0:da:4f:f9:d3:4a:92:36:50:b3:48:88:
85:b5:dd:0a:41:28:23:7a:4c:af:7c:87:73:e4:9f:a0:48:58:
0e:70:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:07 2026 by rpki-client