Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier: kM3lZYeWY+oWU4GTKDdbvkEEeE/B/Z6WkTYv078xPv0=
Subject key identifier: 91:A2:D1:4E:CA:24:93:5E:34:22:1F:8F:C8:E2:44:E8:02:E5:B7:75
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 019F8F7EEE1F8034068314692E37C11EDC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number: 1677
Signing time: Thu 23 Jul 2026 15:01:28 +0000
Manifest this update: Thu 23 Jul 2026 15:01:28 +0000
Manifest next update: Fri 24 Jul 2026 15:01:28 +0000
Files and hashes: 1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: UnTSHz35Ts69waL6kKO5kubCiV+CJgksfbYucsgjw5U=)
2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ee:1f:80:34:06:83:14:69:2e:37:c1:1e:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jul 23 15:01:28 2026 GMT
Not After : Jul 24 15:01:28 2026 GMT
Subject: CN=91a2d14eca24935e34221f8fc8e244e802e5b775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:1d:74:79:36:e6:54:50:52:62:9a:bf:85:
2b:dd:23:2f:6a:d7:72:51:69:b1:4e:44:28:ce:4f:
de:36:68:d5:79:bc:82:dc:0b:04:f4:ce:f9:03:0a:
f0:01:45:d3:40:25:e6:40:48:a3:ee:43:79:dc:e7:
9e:d2:89:e5:2c:53:ab:a5:bf:d6:9d:8c:84:d1:a9:
25:9b:cd:c4:0c:20:cb:28:6b:c2:75:54:07:70:7c:
8d:af:88:b1:fd:59:04:04:16:a8:c6:b0:76:b0:b3:
3c:1a:f0:a8:73:9c:96:dd:76:12:b6:e9:dc:27:4a:
49:4c:ed:b2:b4:e6:d0:bf:7f:89:ce:29:8a:7a:e2:
91:23:d3:ab:a4:1f:b7:8c:de:a8:6c:37:6a:d3:6d:
ab:74:71:4f:03:1c:a9:28:8f:05:6d:e4:26:cb:69:
aa:6b:c0:30:15:16:23:24:ec:d6:47:9b:d8:46:8b:
b6:bf:9f:05:f1:48:99:44:21:90:31:48:a7:15:eb:
a9:4c:83:6a:0a:c0:da:d1:5e:33:e0:f7:a8:10:39:
8d:18:42:d9:b7:cc:f9:6d:22:33:c6:e3:aa:f3:51:
7b:5f:35:47:1c:81:59:21:c5:5c:55:ef:03:70:be:
d7:00:0d:b4:28:9d:32:3a:68:c0:47:8f:46:9c:4d:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A2:D1:4E:CA:24:93:5E:34:22:1F:8F:C8:E2:44:E8:02:E5:B7:75
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:c2:c3:ef:eb:f9:63:c2:7f:56:49:30:c3:d0:55:3f:1f:
73:68:73:2e:5c:92:18:9c:0e:8a:28:1a:bb:0c:11:12:e1:86:
e3:f4:99:e8:f0:62:55:68:04:37:ce:7a:ee:9d:4c:4b:c6:c1:
30:f9:7b:67:fb:1d:00:0a:37:41:1f:97:3f:6d:4b:4f:2d:43:
e2:9e:5f:bb:65:d1:66:da:90:2b:6d:fc:c8:a1:23:68:10:fa:
26:59:08:97:85:7c:f0:2a:7e:8a:97:a0:83:16:12:c7:a3:b7:
f3:b9:f2:8d:dc:4b:71:70:cc:ea:1f:bf:37:75:98:d8:3c:1b:
2f:6f:2e:59:99:37:81:63:82:e4:58:1a:00:e1:58:1e:6e:49:
74:54:cf:01:ac:90:4c:ff:f1:24:76:94:ab:dc:66:4b:15:73:
02:d1:10:d8:38:9f:58:30:fe:96:7c:09:9d:21:d8:5b:13:1e:
dd:68:2a:7f:a8:85:47:7c:cf:d1:60:c8:37:19:2f:06:b6:db:
54:06:4d:c1:c7:86:19:35:00:c7:2f:bd:51:e2:48:a2:7d:a0:
5b:42:ad:98:7e:ce:30:dc:1b:e1:f3:ac:36:57:8d:11:b7:89:
dc:d5:23:18:9f:50:8a:df:fe:ea:6a:67:da:ce:42:a6:d1:60:
54:8f:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:36 2026 by rpki-client