Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: B5PA0YxR2RehhQwpt5YrY44Mai7tfxrakyuO+BbAZak=
Subject key identifier: 20:06:14:B3:50:FA:E1:A7:01:52:27:CC:FB:9D:C8:89:30:59:E9:4E
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 019F91A3F573FDF244CB28A423F99F1B9ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 06AA
Signing time: Fri 24 Jul 2026 01:01:09 +0000
Manifest this update: Fri 24 Jul 2026 01:01:09 +0000
Manifest next update: Sat 25 Jul 2026 01:01:09 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: na72pB5aZkgMPMzC6V2dr91xjB6T7XQ3adDUjBUQBSg=)
2: wksghwYAvyyuquujhn16YlPDo6w.roa (hash: mUJnqqbbR94LX0rZEF/1N+dbXfhWkX3EPaMGmoUlRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:f5:73:fd:f2:44:cb:28:a4:23:f9:9f:1b:9e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Jul 24 01:01:09 2026 GMT
Not After : Jul 25 01:01:09 2026 GMT
Subject: CN=200614b350fae1a7015227ccfb9dc8893059e94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:b4:be:e2:21:81:32:85:ca:38:1b:1a:8f:
c4:4a:00:f5:e6:d3:91:74:35:90:d1:e4:f2:03:2f:
20:5b:15:71:a9:63:68:63:fb:fd:70:e5:fe:dd:40:
e7:4a:99:d2:9a:9d:fd:ea:82:f8:91:d7:32:d2:b4:
ec:c3:95:ce:6a:6f:64:ee:56:14:39:36:09:f5:fe:
19:4b:4d:e6:b1:7f:0f:d2:87:44:a8:4a:84:f3:99:
bf:a2:16:8c:d3:26:72:00:4a:3d:e3:a4:8e:99:18:
17:ca:07:e8:32:05:1c:66:3c:ad:21:e0:6c:31:cf:
78:73:3a:6d:8b:d4:27:d4:f6:1e:fa:ef:41:2a:a3:
58:71:a2:43:f0:be:58:b4:b4:62:62:a4:4f:83:e5:
7d:8b:2e:f9:54:b2:da:4b:69:3a:ef:9b:15:31:33:
6d:c9:3b:12:3b:28:e1:04:57:a1:f8:ba:71:f6:1e:
e6:40:7d:fc:d6:72:57:cf:be:1c:84:02:60:e2:c0:
c0:80:81:39:88:fb:b4:06:d2:aa:11:ea:b1:c2:69:
1b:2e:b6:52:28:f4:ee:03:69:2e:2c:5e:d5:e5:9a:
a4:cc:0c:44:8d:d8:01:88:d5:2a:4e:85:43:dd:c1:
fa:6f:ac:f2:d7:3e:7c:7e:21:99:2d:dc:e2:a6:46:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:14:B3:50:FA:E1:A7:01:52:27:CC:FB:9D:C8:89:30:59:E9:4E
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:96:62:d3:72:fd:0c:a3:1d:5c:1a:e1:da:f0:9a:ab:ab:18:
3a:e5:80:e5:a7:ed:b8:40:52:6b:f7:bb:0e:54:28:a5:59:5f:
07:51:6b:70:5d:55:82:fe:ad:a7:80:8e:2a:47:cd:ae:a9:28:
d1:67:e6:8a:0f:d0:08:15:3c:57:6c:4b:ea:39:10:44:ea:e3:
59:10:f0:88:dd:fb:0e:b8:17:1f:67:75:f6:05:64:2d:f3:f2:
5d:c2:3f:04:2b:5f:60:2a:e3:41:75:07:e6:07:d8:47:f3:a3:
7c:bb:33:8e:df:10:f1:c1:fb:a1:a3:0a:aa:8b:3d:74:06:ab:
be:03:ee:d6:e7:30:fc:6c:a1:40:9c:f3:45:63:62:54:08:79:
33:9f:57:d0:f2:9f:83:87:b7:d1:08:ee:a8:e8:9a:bc:02:a7:
dc:f0:f6:88:1c:28:09:af:57:c2:18:f5:1a:09:fe:29:fd:d7:
3d:b0:5a:68:30:02:ff:5b:5c:24:d7:47:6a:6c:e3:8e:84:f8:
3e:56:89:a6:e7:bf:40:b3:47:ae:85:27:32:92:7d:28:11:5f:
46:2d:cd:18:10:17:7f:51:9b:39:d1:ae:19:25:08:3f:be:75:
c9:39:bd:14:6b:f3:0b:36:ea:f3:c2:a9:4a:b7:2f:62:e1:d6:
af:2c:e5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro/Vz/fJEyyikI/mfG57NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5
YmQ3MTAwHhcNMjYwNzI0MDEwMTA5WhcNMjYwNzI1MDEwMTA5WjAzMTEwLwYDVQQD
EygyMDA2MTRiMzUwZmFlMWE3MDE1MjI3Y2NmYjlkYzg4OTMwNTllOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCK0vuIhgTKFyjgbGo/ESgD15tOR
dDWQ0eTyAy8gWxVxqWNoY/v9cOX+3UDnSpnSmp396oL4kdcy0rTsw5XOam9k7lYU
OTYJ9f4ZS03msX8P0odEqEqE85m/ohaM0yZyAEo946SOmRgXygfoMgUcZjytIeBs
Mc94czpti9Qn1PYe+u9BKqNYcaJD8L5YtLRiYqRPg+V9iy75VLLaS2k675sVMTNt
yTsSOyjhBFeh+Lpx9h7mQH381nJXz74chAJg4sDAgIE5iPu0BtKqEeqxwmkbLrZS
KPTuA2kuLF7V5ZqkzAxEjdgBiNUqToVD3cH6b6zy1z58fiGZLdzipkYeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAGFLNQ+uGnAVInzPudyIkwWelOMB8GA1UdIwQY
MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct
YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1
LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpZi03L9
DKMdXBrh2vCaq6sYOuWA5aftuEBSa/e7DlQopVlfB1FrcF1Vgv6tp4COKkfNrqko
0Wfmig/QCBU8V2xL6jkQROrjWRDwiN37DrgXH2d19gVkLfPyXcI/BCtfYCrjQXUH
5gfYR/OjfLszjt8Q8cH7oaMKqos9dAarvgPu1ucw/GyhQJzzRWNiVAh5M59X0PKf
g4e30QjuqOiavAKn3PD2iBwoCa9Xwhj1Ggn+Kf3XPbBaaDAC/1tcJNdHamzjjoT4
PlaJpue/QLNHroUnMpJ9KBFfRi3NGBAXf1GbOdGuGSUIP751yTm9FGvzCzbq88Kp
SrcvYuHWryzlPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:10:46 2026 by rpki-client