Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: jka4wUqB5cjT5vzjTaOhtNIVE84L6reLucm5C4bLdKw=
Subject key identifier: FC:F8:FA:F4:82:E9:D2:A1:B8:CF:47:1F:C5:D0:06:54:60:86:B2:5B
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019EBE4782B56FB6B92A502E125BEE2F44F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:17 +0000
Manifest this update: Sat 13 Jun 2026 00:00:17 +0000
Manifest next update: Sun 14 Jun 2026 00:00:17 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: KJiuBSYuAa623jRqwcqpbWTUcbyVYrIIeeF8ZfKtl/c=)
2: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
3: R_B2jaSZhjP35wcys5mL5Se3j8Q.roa (hash: dwMcpw95Em2A9IwZsNozR3xo42Nso6kgZ/pvjcsJhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:82:b5:6f:b6:b9:2a:50:2e:12:5b:ee:2f:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jun 13 00:00:17 2026 GMT
Not After : Jun 14 00:00:17 2026 GMT
Subject: CN=fcf8faf482e9d2a1b8cf471fc5d006546086b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:65:aa:3f:b8:87:08:4c:b6:9d:82:4d:0b:
69:0f:ab:5d:1f:41:aa:f3:b3:a0:b5:f0:12:0c:d9:
43:f9:0a:e1:6e:63:be:5d:ef:ef:09:9f:2a:ac:f3:
90:8c:04:ad:66:49:f5:1e:5b:b0:58:4e:3c:bf:21:
be:a7:2f:4b:49:f0:0e:3f:f1:36:d8:59:cb:db:4e:
76:66:ba:39:ec:a4:2a:e2:3f:24:60:eb:96:04:6b:
9b:ca:69:b2:e4:1e:f0:85:68:3f:de:27:df:37:e5:
ca:f0:72:6a:3a:cc:1f:24:55:96:91:16:c3:e4:f2:
5f:98:e1:69:7a:51:a6:ed:ab:bd:5c:03:c3:9a:0d:
11:5a:1d:cb:42:ba:3c:4b:80:33:7d:3d:c6:09:39:
79:93:e6:17:2f:b6:b9:12:a9:f2:e3:2c:01:07:24:
c1:2e:35:61:67:8c:b4:af:da:f2:7a:1f:bd:24:8e:
6c:d5:b8:ed:85:56:0f:ba:3b:d3:d2:c9:2c:4a:f6:
6f:3d:7d:7f:c1:f6:e5:f6:59:a7:dc:92:40:5e:c6:
4c:75:91:c3:b1:99:14:af:2e:10:fe:5b:fa:28:64:
30:82:6c:7c:14:a3:cf:4a:0a:22:f6:17:e4:5e:25:
b7:da:6a:82:f4:a9:c1:43:ef:af:72:14:49:95:78:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F8:FA:F4:82:E9:D2:A1:B8:CF:47:1F:C5:D0:06:54:60:86:B2:5B
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0e:5e:e9:86:4b:23:7a:39:28:ad:e2:16:fa:1f:8a:8a:ee:
9d:89:17:ab:b8:4b:26:15:5b:04:bb:4d:2b:dc:9f:1e:c2:e7:
7c:f0:cb:69:c7:0b:f7:d9:cd:27:f8:bd:f8:17:93:2c:ca:20:
64:fd:6d:77:dd:6e:02:b7:2e:98:62:9b:85:4b:7c:02:d0:55:
81:a5:20:d1:86:b9:31:97:b2:74:b7:44:a1:c5:51:7e:6e:f5:
07:bd:ee:19:c0:65:89:0e:cc:2b:71:86:e7:4a:b7:3a:95:6e:
6f:d3:91:ba:21:ef:07:d4:f1:e5:4d:86:da:4a:30:f2:43:05:
1c:2c:41:a0:9d:ce:26:67:e1:84:8c:c2:da:6d:58:4d:6c:a4:
16:65:29:32:e3:aa:a2:7f:5e:0a:81:75:b7:5d:07:8e:9e:d6:
55:4d:e5:05:b2:74:80:2f:35:dd:c0:5b:f1:51:83:f1:13:cb:
9c:65:a1:e2:d4:9c:06:b7:10:5c:23:60:d8:60:f0:47:74:7a:
4a:fb:1f:27:91:0f:82:ee:c1:70:4f:87:64:b9:f4:ea:eb:69:
29:c1:b6:f1:95:a8:e8:ab:0c:05:fd:fd:8e:e8:62:b4:03:d6:
ed:31:9a:1d:f3:55:a0:f3:98:5b:94:ac:a4:a6:c1:b7:94:86:
9b:d8:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:48 2026 by rpki-client