Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: tKa24KoJGiogGjAR7uxEmDLSRuLUWBSyz5tPL/RpMoo=
Subject key identifier: 66:D2:D9:AA:ED:01:5D:52:57:F8:02:3E:1E:6C:34:09:85:FC:0C:63
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 019F92481EAB4E5E5EFAB3BE8D2A3FB1F7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 04:00:27 +0000
Manifest this update: Fri 24 Jul 2026 04:00:27 +0000
Manifest next update: Sat 25 Jul 2026 04:00:27 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: HBkyy+3hy3rlmAJzohMsMNIZO7MInWSK4klNi2q7aBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1e:ab:4e:5e:5e:fa:b3:be:8d:2a:3f:b1:f7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Jul 24 04:00:27 2026 GMT
Not After : Jul 25 04:00:27 2026 GMT
Subject: CN=66d2d9aaed015d5257f8023e1e6c340985fc0c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:b1:67:7f:14:f0:51:6f:b5:42:3f:51:7b:
82:1c:da:2d:56:7d:ae:cd:32:a3:0a:1c:7f:42:49:
09:60:09:35:55:2e:a9:45:d9:7c:5e:7c:85:78:a3:
b1:9a:e1:9d:49:ef:39:6a:63:a9:a0:f2:96:e8:8c:
6f:fb:79:6f:1e:04:e9:8a:d2:b3:5f:1d:8c:67:65:
b7:f2:98:cd:d3:f8:fa:67:9e:11:af:c2:9b:fe:b1:
5c:ab:c6:60:11:e3:01:30:da:9b:cc:0a:b3:bf:e5:
ab:18:ff:cd:7d:3d:bb:d6:f0:76:3d:e2:dc:f4:40:
64:ec:28:b8:e0:b3:b3:fc:57:a6:1d:76:84:08:94:
98:8a:5f:8d:02:7b:bc:09:d1:8a:2c:b5:df:75:a1:
bd:c6:16:a6:a7:bc:2c:8b:b5:1e:a2:e6:43:88:0c:
dd:4e:24:b6:7b:23:61:68:66:5f:d7:f2:80:13:65:
3e:fa:40:a3:bb:73:62:90:09:69:ea:0d:2e:6f:32:
e3:42:b1:a7:80:92:e6:8e:f7:24:21:40:07:c6:12:
38:97:32:8a:dd:be:23:5a:2c:ac:7b:65:67:14:e8:
62:e1:d2:17:14:0b:36:6e:45:d3:2c:45:1f:65:ae:
96:e7:59:38:11:64:77:d0:12:36:2d:d8:f7:79:9b:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:D9:AA:ED:01:5D:52:57:F8:02:3E:1E:6C:34:09:85:FC:0C:63
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:d9:64:98:73:72:46:57:b3:ce:87:bf:c0:09:3e:8d:58:
ee:de:7f:dc:af:44:69:7e:19:b0:2f:c5:37:01:b8:66:92:ae:
85:f0:b0:4a:4a:8d:e2:03:02:a3:6e:3f:a6:47:bc:f7:0a:be:
e1:88:61:c5:bf:4d:2c:f5:fc:16:d4:ec:78:c6:1c:ee:4b:91:
c4:ae:f3:8b:a7:22:98:d0:05:82:60:26:c6:ae:a9:fb:c3:74:
cf:61:ff:55:f5:30:98:8e:ff:98:9a:01:02:41:5b:53:18:91:
d5:09:e4:19:d8:78:17:51:d3:6a:e1:d4:a0:5a:a0:c1:b5:fb:
ca:1a:99:1c:8c:e6:9b:f2:ec:e2:19:d8:f9:7e:cc:bb:2b:8b:
38:b0:fb:8d:4f:e7:80:4d:22:ac:0f:3b:55:68:02:30:84:97:
69:68:88:fa:23:38:60:42:2b:bb:24:41:f8:7f:1f:ec:33:b2:
b5:da:3b:19:af:f7:98:de:76:c3:60:51:2b:d3:41:d7:4c:d5:
d2:de:69:7d:7a:41:c2:ec:15:07:42:21:40:10:44:40:f8:fa:
75:02:5e:d1:14:e5:e9:f2:ea:3e:32:d4:24:a9:19:a6:1b:fa:
ae:a9:58:b8:f8:7c:cd:52:bb:4d:9b:9d:3e:95:90:a8:43:f0:
b8:d0:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:11 2026 by rpki-client