Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: nJJweDt6Nr5dhuG+27r2clgCj0BhvrSxNFhPHvVeH4g=
Subject key identifier: 66:8C:13:A9:CA:7D:26:C4:0A:3C:F6:98:88:5A:2D:AD:FC:51:E0:DD
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019EC06E4E62367B0AEC70418CFE6E883E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0CA1
Signing time: Sat 13 Jun 2026 10:01:54 +0000
Manifest this update: Sat 13 Jun 2026 10:01:54 +0000
Manifest next update: Sun 14 Jun 2026 10:01:54 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: kOOiYsFZuooLL+g8g1c1yHHGHgfns/R6ULD29WYrPs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:4e:62:36:7b:0a:ec:70:41:8c:fe:6e:88:3e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Jun 13 10:01:54 2026 GMT
Not After : Jun 14 10:01:54 2026 GMT
Subject: CN=668c13a9ca7d26c40a3cf698885a2dadfc51e0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:c5:1b:c0:ba:bb:4f:bc:4b:be:a4:ee:82:
ad:ea:7d:6e:ae:37:12:86:88:35:18:aa:17:96:96:
a4:2c:ea:1d:3d:7f:f4:37:d2:9d:7e:b6:08:7a:3a:
31:47:ab:8b:15:0b:84:f1:e6:cb:5f:24:43:2e:c6:
f0:64:d4:85:d3:98:a3:be:fe:33:5d:45:63:3b:d4:
3a:70:cc:4a:6a:7e:1c:a2:3f:98:e4:01:b6:b6:33:
cd:79:a7:12:f7:ec:43:21:7e:80:0c:97:02:b7:1b:
22:ff:bc:b5:10:af:2c:64:72:3c:24:8f:24:b3:8e:
19:73:80:67:e9:0e:23:9e:60:05:74:aa:d1:04:61:
f7:7e:5f:fa:02:db:f9:9e:c3:55:a6:69:f4:8a:2d:
ef:c6:ed:7e:e7:e8:38:b8:d0:7b:64:ea:b5:19:60:
c6:9b:c3:17:5e:1a:a7:48:7e:d2:1b:20:2e:cd:82:
9e:83:f2:b9:b2:07:9b:4f:ad:d4:1f:26:37:11:94:
da:2f:5b:9d:67:c8:a3:4b:9f:32:4b:46:8a:be:13:
0d:16:31:fe:84:f8:8c:9d:79:aa:5f:2d:85:42:61:
13:3f:81:7f:56:19:7a:b8:e5:3c:e0:23:51:25:22:
e5:eb:d8:17:0a:55:1c:9c:71:91:d1:d5:c2:ed:46:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:13:A9:CA:7D:26:C4:0A:3C:F6:98:88:5A:2D:AD:FC:51:E0:DD
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dc:62:1a:33:e3:66:3a:95:16:5b:18:a8:8f:81:84:1c:5d:
07:65:b0:73:bb:84:00:21:0e:b0:4e:4d:a6:9a:89:cf:12:05:
db:ad:24:52:05:98:a2:ac:a6:7b:94:42:9a:4d:37:81:14:0d:
34:f9:85:a0:de:d1:64:09:1a:fa:98:ae:da:37:63:54:fd:72:
1f:76:6d:be:84:32:aa:51:34:e6:a1:73:44:ee:a6:f3:9e:71:
98:c0:e3:5f:34:88:56:e5:44:cd:6c:e2:de:7b:0f:39:c4:64:
38:d6:2d:fd:df:79:7a:bb:7b:1f:78:e6:ca:31:5d:85:ce:73:
05:7a:26:6a:53:8f:a4:40:53:9d:2b:2e:3f:c5:e0:4e:70:a2:
4b:5f:e8:06:e0:bd:c3:52:2f:94:a6:2a:0c:44:eb:88:2a:46:
b6:fc:12:14:6d:a9:29:a3:9d:d6:1e:fd:9e:34:d4:0c:a1:b9:
4d:21:2e:83:1c:90:09:3f:32:27:9c:34:ff:df:ac:4a:f8:6d:
ad:ad:4b:6d:50:cb:a1:22:d6:2c:f2:eb:22:ff:42:c7:ff:2e:
49:25:dc:4d:75:43:6c:fa:e4:f0:2a:0e:43:15:a9:cf:94:b8:
d9:6a:6e:b3:0d:eb:c5:5a:cc:8a:5d:82:f0:18:cf:74:7e:61:
d2:3a:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:31 2026 by rpki-client