Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File: 5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier: E0z6Z+3GzoDHnz7R0L+cnAByZzQScjClNF2PWazO3Xw=
Subject key identifier: 60:D5:AA:55:AE:08:7C:67:6C:93:C5:48:33:67:33:34:CC:21:34:D1
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer: /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial: 019F8F10D6C3901D431EA54B3444714EB4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number: 0309
Signing time: Thu 23 Jul 2026 13:01:13 +0000
Manifest this update: Thu 23 Jul 2026 13:01:13 +0000
Manifest next update: Fri 24 Jul 2026 13:01:13 +0000
Files and hashes: 1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: h+QF8EGFfe0qMsbQji2ViKAdnCk8V+F946CQ5ycFnqs=)
2: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (hash: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw=)
3: tjprewfipgbi2VkjPO3arRc-3cs.asa (hash: 6WFMJ/QA4RHzwHp7zyMKTAL+OYliyrWyqQs9rXBT3nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:d6:c3:90:1d:43:1e:a5:4b:34:44:71:4e:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Validity
Not Before: Jul 23 13:01:13 2026 GMT
Not After : Jul 24 13:01:13 2026 GMT
Subject: CN=60d5aa55ae087c676c93c54833673334cc2134d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:9c:96:91:8b:c7:9d:20:39:75:a8:f3:02:
19:fd:77:90:1c:fc:e7:28:14:81:6e:e1:04:94:d6:
be:a1:b8:f4:88:55:be:c5:30:c0:88:4d:cd:62:b9:
9c:ca:f8:2d:87:ca:2e:17:ce:7f:2e:fe:9f:6e:3c:
bb:6d:34:2b:cf:05:a8:c4:34:22:55:84:ad:aa:88:
38:4a:4c:2c:d2:31:8d:63:6e:da:c8:a1:cf:6e:b1:
00:09:84:b7:cd:38:06:75:83:1b:27:e2:e1:9c:c7:
4d:87:99:96:ad:94:0d:c5:0c:5b:f8:80:ec:1b:d3:
86:34:39:21:a0:c1:8c:b1:f7:9f:7a:bc:b3:5f:aa:
ee:23:47:63:8e:a7:00:fe:b1:21:c7:93:90:ed:ff:
a0:8c:29:47:4f:bb:4f:d6:84:eb:0d:a1:1d:8b:3e:
9c:50:0e:c4:bd:d1:9c:4e:7d:c3:6b:2d:8d:64:47:
8c:d0:38:03:e1:88:a7:83:6a:b3:60:0c:0b:7e:ab:
93:82:31:a3:ce:2a:28:a2:76:14:e5:e0:04:ed:98:
26:92:a4:2c:87:0e:9d:0e:75:d3:c8:21:0c:e6:0b:
d1:60:81:d7:7c:d5:39:40:5a:e4:4d:13:23:4e:67:
e0:1d:96:fc:ac:e3:5b:0b:cb:dc:7f:c1:de:81:c2:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D5:AA:55:AE:08:7C:67:6C:93:C5:48:33:67:33:34:CC:21:34:D1
X509v3 Authority Key Identifier:
keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:a9:79:1c:c4:be:bc:53:3f:ef:41:d9:44:02:ad:55:6e:
e4:1c:fd:7e:79:dd:f8:9e:aa:ba:4a:91:d1:ee:e1:de:52:7a:
9c:83:e7:86:dd:67:70:c2:f8:5b:6e:c7:f7:d3:9d:22:62:94:
a6:31:78:67:a7:0d:b6:39:a0:ac:c4:93:b2:82:36:82:3e:07:
13:ce:13:3d:da:e1:6b:37:49:d3:48:91:24:ba:28:62:51:6b:
5e:d9:c4:9a:0d:de:10:bb:1a:98:06:4b:09:16:87:14:f4:15:
e4:5b:92:8a:bf:38:e8:d6:92:f3:ee:f7:a6:00:09:2e:64:27:
e1:4a:fd:4b:74:40:fd:31:23:d5:6a:8b:8f:44:67:28:d2:74:
8b:f7:60:07:dc:ef:24:85:39:b6:8a:97:13:72:87:e7:75:ab:
2b:79:b9:ca:5e:16:f7:ca:9a:00:58:89:c3:c9:cb:6f:c4:89:
5c:e4:2f:c5:02:10:f3:29:41:e6:34:99:a0:b1:65:09:d1:64:
25:d8:eb:43:6e:d6:06:f1:d3:d1:d9:0c:9e:be:ea:17:71:5e:
d6:ce:ae:bb:d6:63:26:8a:40:09:f7:d1:84:5d:c7:ba:b6:bc:
2a:f0:67:94:e9:de:57:04:04:49:5d:7e:e1:07:2b:47:25:46:
44:9d:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:03 2026 by rpki-client