Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: 2Tp5jHFYz+1O0SPcZ5TIfSy2HuES0AgJGzIGC5Nc3Nk=
Subject key identifier: 4B:A9:76:61:37:8F:EB:BC:6E:CE:15:5D:79:2F:FF:5F:2B:93:B7:B8
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019F91DACBEEE937239D256266AC27EFA11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0695
Signing time: Fri 24 Jul 2026 02:01:02 +0000
Manifest this update: Fri 24 Jul 2026 02:01:02 +0000
Manifest next update: Sat 25 Jul 2026 02:01:02 +0000
Files and hashes: 1: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (hash: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ=)
2: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: p9uoksinEdlkBxgSWZ7lAW2ATTQ29ZzfylZaYDiJTFU=)
3: Uz71caARu_XJuPpplyjW4XbtH-g.roa (hash: RlsKWNdrrUUbHvw1YedMbug/yEWME3WBPDVS/CI+ee8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:cb:ee:e9:37:23:9d:25:62:66:ac:27:ef:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jul 24 02:01:02 2026 GMT
Not After : Jul 25 02:01:02 2026 GMT
Subject: CN=4ba97661378febbc6ece155d792fff5f2b93b7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:1a:5f:5a:e4:8c:6d:0f:22:4c:d4:4e:a1:
17:bb:fc:84:9a:9e:e6:21:05:75:0e:4c:99:b5:1a:
84:ed:ee:a1:c2:f6:de:02:b0:f3:54:cf:66:65:97:
1c:0f:3a:0d:3b:05:f1:98:b4:62:7a:6c:f2:eb:ec:
8e:af:44:19:65:fb:6c:17:87:fe:6b:df:f1:49:a5:
7a:65:de:d6:c0:49:41:79:0d:97:f7:9d:14:dc:00:
a3:40:57:f2:7d:98:af:fa:a3:3d:38:1f:db:9e:bb:
94:19:5f:bf:2e:0b:65:55:c3:d4:eb:2c:ce:37:bb:
49:5f:98:6a:09:83:94:ae:2e:ac:92:75:c1:34:5a:
88:ae:83:41:c5:33:88:4b:05:5b:17:8a:0d:0d:ed:
46:7f:d6:06:cc:55:51:4a:f9:8f:a0:97:3a:45:4a:
d8:b6:b1:32:5b:2e:f1:4f:34:3c:9e:1b:5b:c5:49:
86:03:ff:46:5d:72:7e:ee:85:d9:ed:24:35:08:dc:
a5:64:24:50:08:34:53:a6:09:8a:95:03:fa:74:1d:
fe:40:ac:83:de:00:38:10:a7:ab:92:51:cd:ab:65:
3c:d3:74:6d:37:da:69:4d:28:d9:11:a9:c3:5f:85:
58:9c:e9:b4:99:25:13:8d:c7:3a:34:ee:06:27:a4:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:76:61:37:8F:EB:BC:6E:CE:15:5D:79:2F:FF:5F:2B:93:B7:B8
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:03:65:b5:6a:be:b5:86:68:d2:eb:cf:54:10:e5:26:94:
4b:cc:38:b6:de:13:32:fe:68:e8:3a:64:32:d2:b5:f6:a1:2b:
67:a5:76:d3:d6:31:05:3a:32:05:90:d7:9a:e4:a8:e8:b3:56:
f1:be:c2:64:84:a1:dc:fa:25:83:f2:d6:be:8e:f6:60:8a:9d:
41:54:11:67:ee:0f:87:a0:a0:d5:96:70:89:cb:d0:82:2e:4f:
17:bf:dd:33:f2:30:14:53:81:9f:16:03:ab:f4:69:d4:39:a7:
7d:d9:bb:c5:4f:be:c7:87:a9:fb:50:0a:c7:5a:09:27:47:e1:
31:0a:a1:1b:f7:2c:bc:02:5f:b0:a5:c9:9c:fd:f1:99:07:5e:
60:0c:1e:c6:80:cf:60:e6:5c:cf:1f:3e:aa:1e:56:3d:67:67:
0d:19:f8:98:5d:4b:4b:1b:e7:37:03:c2:38:c1:df:f6:73:29:
6f:4a:15:62:8d:09:bc:ba:0e:15:3e:a8:09:4b:56:4b:28:5b:
b2:91:45:6f:18:87:8d:59:80:50:e0:b5:93:c3:ef:84:d8:46:
54:65:d2:4b:26:a9:cc:de:d6:5d:e1:5b:85:b6:00:9d:bc:d1:
b3:fa:2c:ac:a1:2e:8b:9f:cd:44:e4:c7:6a:29:08:9d:17:39:
7f:18:ad:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:47 2026 by rpki-client