Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: nAHBTqdd65v5reb+vaQ1WVcK1oVjxr3X3n06cT5RFoo=
Subject key identifier: 3E:70:CF:4B:AB:6C:02:60:D1:6B:94:3C:06:6B:E0:58:D4:71:60:C4
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 019F8FEC2F16D8EBB8ACAA5CD5BBE85A0BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 0669
Signing time: Thu 23 Jul 2026 17:00:48 +0000
Manifest this update: Thu 23 Jul 2026 17:00:48 +0000
Manifest next update: Fri 24 Jul 2026 17:00:48 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: Oe0OoAPdY0TgBvflxC0JNJthiOluH0ONYgvzLn8sdac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2f:16:d8:eb:b8:ac:aa:5c:d5:bb:e8:5a:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Jul 23 17:00:48 2026 GMT
Not After : Jul 24 17:00:48 2026 GMT
Subject: CN=3e70cf4bab6c0260d16b943c066be058d47160c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:bc:f2:46:35:39:3f:64:32:16:0f:51:f2:
e1:12:8e:b5:0f:af:88:84:1e:72:de:77:a2:94:6f:
67:bb:c7:ee:56:4f:05:12:77:3b:3b:db:80:1e:4f:
72:40:0f:74:77:70:0e:47:87:13:fe:60:45:7c:f8:
55:5b:25:55:6a:05:e7:28:5c:70:ef:ac:48:8c:57:
d0:9c:64:69:ec:c5:bc:27:33:fc:25:af:f1:b0:0f:
e6:ac:be:94:bd:3b:55:cf:dd:14:a7:2f:d2:72:61:
84:0b:1e:33:c0:f6:bc:61:93:d1:96:9e:c5:bc:7e:
05:4b:01:0f:2b:ea:36:91:90:b8:0d:49:68:ea:6d:
f1:b6:fd:b7:4b:72:e6:d2:5e:5b:40:52:e5:27:92:
2f:07:96:fa:d4:1a:ee:0b:06:b8:a3:c5:3f:3a:45:
fd:6b:a7:2e:21:b3:a0:cb:6d:f6:28:ac:e2:0e:d4:
d6:fb:2f:a9:9a:ee:77:c3:26:51:d7:a5:79:7e:30:
a5:3a:17:62:0d:5f:b6:e3:a4:f0:cd:f6:d9:68:7f:
c1:1d:cd:09:85:3f:4f:0f:5b:55:77:60:19:3e:86:
43:42:20:53:9c:7d:96:96:c9:88:21:db:a5:56:20:
20:e0:12:1e:d5:61:19:04:08:17:6b:36:66:4a:4a:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:CF:4B:AB:6C:02:60:D1:6B:94:3C:06:6B:E0:58:D4:71:60:C4
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:31:55:b3:1f:7d:2e:8b:af:1b:4e:97:c2:94:5c:a6:f7:
56:e0:8b:05:16:a9:56:86:29:a0:e9:fe:1a:dd:fe:ab:35:ec:
59:d7:e9:bd:d4:7d:00:c0:28:d9:e4:3d:25:60:9b:ad:9a:c9:
82:64:09:d9:45:fe:29:78:ea:17:0f:9d:30:54:e9:26:e5:f0:
fd:68:67:44:fd:ac:0b:88:d3:c8:54:01:0a:0c:5d:64:91:7d:
78:f2:8f:92:21:28:e3:e5:6b:6f:e2:36:37:92:73:fc:c2:17:
4d:87:31:39:f8:81:94:9d:a5:f6:a8:bf:5f:0e:85:3f:d7:df:
75:83:26:a8:8e:5c:fc:16:e8:d1:f5:81:a4:45:5e:1b:c6:72:
e4:d0:a7:1a:b1:5e:1a:13:e3:d0:11:ed:a8:2b:3d:91:0b:7e:
4c:89:49:4e:95:3b:4b:10:d2:06:92:04:9d:88:c2:1d:47:65:
2b:95:ba:93:20:db:86:85:a5:5d:a5:4f:b7:5d:6a:88:00:58:
bb:08:cd:8b:ff:46:b3:ef:29:08:e1:8f:c1:7f:eb:2a:64:7f:
73:07:8f:a8:d2:9c:65:8e:ec:84:c5:c5:58:b1:ba:61:ab:c8:
24:00:a6:dc:cf:bf:bd:25:ec:dc:48:d6:bc:da:e0:26:e4:3d:
73:9e:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:32 2026 by rpki-client