Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: 7IF+YFjT90NkD/6/VMApChJrztQOyKys2HpLk3ShAYg=
Subject key identifier: F6:23:43:E1:2B:B4:5F:AD:2B:EF:33:F7:DA:B7:39:6F:32:52:BA:4E
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 019F8FB52BCA0A013A34F3AD4ADEB99F3E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 06E3
Signing time: Thu 23 Jul 2026 16:00:42 +0000
Manifest this update: Thu 23 Jul 2026 16:00:42 +0000
Manifest next update: Fri 24 Jul 2026 16:00:42 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: K0GusQHuZCM/zYEp2r5bJi7qr3aarMRkKLu4Ck/boZk=)
2: 7nDTBpJtA6TLPMoPs4MSzkiJ0QU.roa (hash: PkhpqveqXdmcBclNcQ/UeHObmG1C5glRWKTIYCRgTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:2b:ca:0a:01:3a:34:f3:ad:4a:de:b9:9f:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Jul 23 16:00:42 2026 GMT
Not After : Jul 24 16:00:42 2026 GMT
Subject: CN=f62343e12bb45fad2bef33f7dab7396f3252ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:41:1d:b6:87:1e:9b:a3:01:35:7d:40:32:
60:d6:ae:09:7a:ee:02:b0:8b:6c:c0:01:fd:7b:3f:
9e:20:33:d3:83:de:86:a3:06:fc:aa:60:b7:65:b0:
3d:73:b5:f6:92:9a:46:23:0c:cc:ae:40:7b:52:87:
53:20:00:00:ae:93:4c:f1:20:0f:5f:16:f1:c9:af:
a2:9c:a9:e2:e0:0b:83:6e:65:ce:14:84:7f:1f:16:
e9:91:1e:cc:72:f4:da:40:2f:a6:de:74:75:46:a7:
71:60:98:b0:c4:22:d6:00:59:ad:3f:52:be:ce:94:
ff:31:71:5c:2d:b4:6e:bd:1f:96:b2:da:fa:91:f4:
74:54:23:25:d0:55:7f:5f:cc:ec:ee:3b:db:e4:dd:
9e:79:2e:62:0d:47:74:0a:83:77:1e:8e:a8:b5:65:
25:81:4c:4c:60:2f:7f:73:ac:70:55:5f:a3:f6:91:
8a:ca:44:19:d7:a0:d9:6a:74:45:04:98:33:6e:6f:
56:4d:27:b6:e5:17:6c:bd:ae:60:da:0c:43:45:9a:
81:fa:c6:9b:7a:62:a1:12:81:f7:1d:43:19:25:9f:
ac:58:02:0a:f5:30:5b:06:2f:12:dd:2e:30:f6:e4:
47:3e:8d:26:2c:c9:e1:c7:4c:0e:26:1d:cf:81:4a:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:43:E1:2B:B4:5F:AD:2B:EF:33:F7:DA:B7:39:6F:32:52:BA:4E
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:e8:d8:e8:c0:4d:36:a3:22:0b:01:3e:fa:12:0c:45:3e:
d2:6b:12:c9:d5:a5:ad:e2:97:6e:28:15:a2:7e:9d:96:2a:4e:
03:4a:8e:1a:5e:6a:ee:01:3c:0d:76:8a:15:42:2c:1e:46:a2:
83:49:42:92:55:97:02:a2:a2:d5:b4:0e:59:67:1d:89:1d:e6:
86:fa:f0:51:ac:c9:0c:18:88:cb:c2:83:73:2c:4d:66:71:1a:
02:b5:d1:44:15:46:e4:ec:38:88:06:7d:74:2a:36:28:e4:aa:
3b:90:e1:b4:8b:90:8b:bc:46:f3:f0:26:b0:f9:cc:39:ff:57:
58:1e:5e:e5:ac:12:e5:36:3c:19:37:9f:a4:96:82:94:7a:90:
36:52:fc:2f:eb:af:7e:9d:92:b8:be:48:58:aa:c8:8a:4e:be:
9a:1a:e6:a2:e9:96:b1:75:e4:f2:20:9c:5e:c5:ed:a6:8d:68:
56:b7:d9:2d:60:21:e2:cf:32:b5:fa:f2:54:d8:5e:d3:38:8b:
48:d1:53:1e:0e:1e:d1:4c:16:0b:15:c9:5d:e6:f4:e4:0c:fc:
32:ad:d5:5c:fc:d0:bc:cb:a3:50:e5:e8:39:d3:92:89:b2:1c:
9d:29:e0:db:11:6b:8c:25:03:07:b9:15:23:fe:98:56:8d:7c:
b6:ba:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:49 2026 by rpki-client