Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: Hq1KSPnolA3vDzhpIK87lZjK/wq5C0vc8cpjMGloQ00=
Subject key identifier: 9B:5F:76:A6:74:68:46:F4:19:FE:28:8E:B0:A9:2B:DA:D1:7B:2D:AF
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019EC3A51371AFBF21AB0ADD9900DC768F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 0640
Signing time: Sun 14 Jun 2026 01:00:35 +0000
Manifest this update: Sun 14 Jun 2026 01:00:35 +0000
Manifest next update: Mon 15 Jun 2026 01:00:35 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: F2OL25CGGa5MbVgHaD69femE8bLbAlA1WxBBhyqM2V4=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:13:71:af:bf:21:ab:0a:dd:99:00:dc:76:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jun 14 01:00:35 2026 GMT
Not After : Jun 15 01:00:35 2026 GMT
Subject: CN=9b5f76a6746846f419fe288eb0a92bdad17b2daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:eb:32:d0:71:bd:ae:d1:9c:6e:75:17:31:
c8:7d:4a:49:96:94:69:9a:8b:e3:e3:d6:89:da:34:
5c:8d:81:8f:16:76:d8:dc:b0:83:f9:df:a5:83:af:
3d:21:e5:9d:58:a7:25:0f:38:30:e3:1d:57:98:0c:
85:c8:ae:11:f3:af:f0:c7:09:15:a6:3c:8b:30:38:
c3:d1:7d:ff:dd:29:e7:63:10:6e:64:6b:a2:d1:d2:
e5:be:81:2a:77:fd:69:72:7b:f5:fb:a9:55:fa:76:
06:82:b3:5e:fe:59:bd:38:42:5e:8a:aa:9b:58:d8:
c0:66:75:a3:f9:52:73:f3:b7:d2:08:7a:46:7f:02:
bf:fb:78:19:31:f5:47:57:e3:eb:77:64:06:3a:b6:
f5:b5:85:c6:d9:97:b8:f8:e6:5a:6d:0b:9a:ce:7d:
24:04:13:c7:05:0a:32:dd:9b:ce:d4:35:64:66:93:
3d:10:3b:09:81:78:41:b3:97:54:27:ca:66:c5:5a:
12:83:92:6e:27:4c:28:49:ac:77:90:42:b3:3c:3e:
62:51:9f:16:3a:da:f9:9a:42:c3:37:65:1b:02:a3:
14:66:46:32:57:0e:f1:89:94:bc:fd:e8:4b:ef:10:
0e:2a:66:8e:bc:21:f0:43:fb:c7:9b:e5:87:4f:91:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:76:A6:74:68:46:F4:19:FE:28:8E:B0:A9:2B:DA:D1:7B:2D:AF
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a1:e5:70:b4:47:79:51:b7:22:05:15:ab:b3:0b:8c:88:15:
53:4a:c5:8a:34:7e:19:7d:14:db:85:cc:e9:3d:e4:1e:4b:9b:
db:f5:60:4c:62:8f:bb:a5:7c:56:d0:c3:32:52:72:cc:cc:ad:
77:93:7b:18:c3:c6:cb:b4:26:ed:16:50:a9:32:a1:06:32:ff:
af:38:da:16:0c:87:a5:0b:51:9e:5b:a1:c8:b5:a0:ef:f3:a8:
73:32:1f:ed:6c:2b:bc:a5:1d:d0:11:2e:5b:0e:78:3d:6d:c7:
48:64:fb:37:24:29:01:28:28:0d:c3:c1:c3:2d:65:ab:6a:55:
38:df:c3:45:b8:f1:bc:a0:bd:e4:6c:09:b2:50:a7:3a:2f:72:
20:aa:85:32:33:7a:be:97:99:fc:f9:2d:74:36:1f:35:b0:ad:
57:b3:ad:f4:1e:0e:8c:11:b0:f8:ca:6e:ba:16:c8:0e:08:b2:
75:f8:2a:36:7e:87:dd:09:79:71:ca:d6:e5:4e:60:ac:f1:9b:
4d:0e:1b:46:8b:f5:aa:ef:48:96:3d:da:36:ac:a0:14:d3:69:
ef:0d:37:7f:ee:22:15:d1:69:e9:ec:cf:f2:be:50:86:60:01:
44:a0:bf:b1:53:4d:f1:bc:79:c3:21:84:bd:cc:d1:82:9f:c4:
ce:25:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:20:55 2026 by rpki-client