
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier: NT0BnROfxOLu7pNgNJf2E8eWls18Z7uJFzWYFaYYle0=
Subject key identifier: 2B:89:51:CC:F4:31:22:E2:95:8C:27:AD:09:26:01:9F:80:DA:D4:C1
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 019FAA50D16768081E6E7F74366C173FD14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number: 0886
Signing time: Tue 28 Jul 2026 20:00:50 +0000
Manifest this update: Tue 28 Jul 2026 20:00:50 +0000
Manifest next update: Wed 29 Jul 2026 20:00:50 +0000
Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: D4V0H/SFNkSFjFeKDXDtCDwiqVAdk7Q67Ot5vOZVuYs=)
2: vkNSQ_Tc3Bfe3joOVDGgbN6CQtk.roa (hash: Ft3k1GMH35DD813n5Ke6tEuRDCxpQCa27sS+PQPuKK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d1:67:68:08:1e:6e:7f:74:36:6c:17:3f:d1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Jul 28 20:00:50 2026 GMT
Not After : Jul 29 20:00:50 2026 GMT
Subject: CN=2b8951ccf43122e2958c27ad0926019f80dad4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:75:c7:5c:27:58:af:fb:8a:18:c3:80:ce:
9f:24:25:9e:a7:57:13:a7:cd:a5:64:ff:07:62:60:
1d:1d:22:33:e3:31:e0:cd:25:77:26:f5:9b:09:8a:
44:a3:98:35:12:1b:90:9f:73:80:b2:c4:98:99:0b:
c2:9b:27:88:eb:c8:78:49:4c:03:5a:93:4e:d2:d6:
2b:b1:09:4f:08:18:e4:18:c2:a2:de:d7:60:d0:df:
e9:44:ee:87:54:d1:41:d2:9b:0a:30:6e:2c:0d:cf:
86:d8:dd:45:4e:f8:e3:43:5e:4a:fe:f2:8f:92:5c:
2a:6e:e6:f1:73:f5:1a:21:bf:c4:ac:4a:07:f1:8b:
4e:68:ee:8b:33:61:a6:75:f6:a1:a7:d8:73:04:ed:
76:be:ab:dd:95:b2:1f:b7:06:5b:de:9a:7a:15:87:
95:a9:64:ec:55:0d:5e:6b:77:00:58:78:4c:1c:8a:
44:b7:52:b0:5d:a2:53:97:88:60:fc:de:8d:8f:4c:
a1:1f:b1:3f:e5:4c:0a:a5:99:81:fc:b2:ab:c1:a5:
ec:85:01:8b:26:55:aa:82:fc:cd:d9:98:8d:83:8f:
f6:f8:20:ba:db:27:fb:76:6f:de:09:dd:02:7f:fd:
28:81:d1:75:88:cd:06:c5:df:04:6f:28:ad:b3:39:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:51:CC:F4:31:22:E2:95:8C:27:AD:09:26:01:9F:80:DA:D4:C1
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:df:b2:ac:dc:c9:86:6f:7a:46:08:29:97:60:72:eb:f6:
67:d2:eb:7f:c2:06:07:97:9f:fd:70:35:7c:42:87:81:ff:bd:
2e:46:a1:41:a5:d6:9c:85:9a:e1:9f:16:ef:9a:c7:0f:4e:84:
08:19:c6:25:2b:8f:81:20:71:1c:24:ed:7b:1a:87:01:bc:89:
b0:cd:36:50:09:38:c5:01:24:f3:91:cc:ed:b3:f6:f3:ca:3e:
01:f8:61:cb:8c:c8:a2:8b:9b:fe:1f:54:22:92:ee:b2:08:97:
42:e4:93:a7:eb:b9:0a:9f:22:59:ca:40:28:4c:67:63:f1:1f:
c9:e4:25:4d:f2:39:5d:09:a4:5e:06:ae:3b:8f:aa:fa:5b:c0:
76:c8:30:d2:ee:22:fa:3f:b4:07:1a:45:74:6e:1f:2a:2a:3f:
6d:db:85:e4:38:1d:a7:44:a9:6d:71:2d:8f:e5:81:24:90:06:
f2:07:20:68:24:b9:06:3e:f2:bc:49:ca:ad:11:31:e8:1d:e1:
e0:87:ad:ee:19:54:ed:d9:1b:25:70:68:88:96:f1:df:ab:d5:
1d:c3:b9:de:ab:1a:8a:44:59:04:46:eb:db:c1:a9:a9:f1:28:
d4:92:97:e7:46:1b:5c:f1:59:20:b5:cd:37:c0:db:a5:16:4e:
2a:fe:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:52 2026 by rpki-client