Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: rxcvdu7OAa1HKacHxIJCocV7NJ8s3HiZSN6qJUpq6A0=
Subject key identifier: F2:44:71:C0:B6:E5:91:CF:13:CD:50:66:E1:80:A7:A7:F6:5A:81:0C
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019FA9ABAAC085643BDF0E34C27067BF3CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 17:00:27 +0000
Manifest this update: Tue 28 Jul 2026 17:00:27 +0000
Manifest next update: Wed 29 Jul 2026 17:00:27 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: 9rQ5z1pLyvvS0g+wsVo51qt1+oApiKApcOXNGGF2A7U=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:aa:c0:85:64:3b:df:0e:34:c2:70:67:bf:3c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Jul 28 17:00:27 2026 GMT
Not After : Jul 29 17:00:27 2026 GMT
Subject: CN=f24471c0b6e591cf13cd5066e180a7a7f65a810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:d3:44:c6:55:b4:6e:6f:64:d0:bc:50:2d:
ce:64:20:4a:fe:dc:3b:08:51:db:09:7d:a0:3c:ad:
ff:7a:16:59:b5:43:c1:a7:71:10:24:08:9b:e9:86:
5f:52:ba:d3:db:17:42:4f:7e:75:07:03:77:75:89:
7a:3c:4e:21:b4:a8:5b:ed:d0:41:78:05:4d:53:08:
06:2d:8e:ab:db:63:1b:50:c7:4e:50:48:36:2d:7e:
f8:24:1b:eb:71:d6:47:95:e1:3b:87:c7:53:71:33:
7f:de:a8:da:89:c4:72:0c:8e:5f:e4:cf:fd:84:43:
86:68:29:28:46:ba:72:55:bd:3f:27:8e:b9:36:5b:
4f:e7:c4:36:82:64:6c:72:b1:41:19:d9:83:0c:a2:
db:e1:3f:7d:a5:7d:7c:b4:97:b6:4d:55:39:f1:e7:
83:a7:0e:32:b9:53:dd:3e:df:06:fd:7a:da:f9:9b:
89:3c:21:e4:47:22:05:1d:7f:65:9b:45:4d:19:9d:
96:f2:c5:52:62:df:c1:a2:18:0e:79:ca:e0:2b:2d:
4f:df:3e:5b:8f:d5:03:83:fc:24:13:63:80:7e:5d:
5f:53:8b:3f:57:b4:88:6a:02:e7:7f:05:42:11:bc:
22:7a:7c:88:3d:f5:f4:f4:30:86:74:24:1a:2a:57:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:71:C0:B6:E5:91:CF:13:CD:50:66:E1:80:A7:A7:F6:5A:81:0C
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:c7:a2:0d:f5:24:e6:7b:be:88:3b:a5:6e:ef:9e:9d:9d:
4a:da:75:90:da:d6:37:89:8c:2f:ac:d8:05:22:53:f7:55:e3:
6f:3c:44:d5:b8:1a:e4:88:ff:6b:6d:7f:ab:4c:30:9c:1b:25:
41:a9:50:df:c1:31:26:a0:e5:45:ed:f5:78:de:d5:fa:fd:7d:
bc:d8:62:c4:29:57:9f:04:02:f7:79:42:15:69:16:99:b6:a3:
c4:35:72:f8:27:43:f0:63:30:42:db:32:70:5a:09:40:13:7f:
9e:df:a3:42:9e:53:45:30:4c:f8:5c:7a:ca:41:7a:f7:c6:da:
0a:6e:e4:7d:88:89:4f:4e:5e:fb:a5:d8:d4:86:e6:21:d1:56:
62:02:a2:21:97:3c:e6:0a:f4:c4:14:d0:0b:e3:5c:92:9c:f0:
4d:b5:7f:d1:c4:49:81:46:73:27:1e:8b:ab:14:2e:76:d2:a3:
20:64:9f:fb:df:e8:1b:b6:12:5e:a9:1f:da:be:c9:0f:ea:45:
71:34:41:e9:05:16:4e:cc:e3:b4:9f:f2:fe:05:f7:ec:db:e3:
8a:94:61:9f:ac:c7:90:9b:7c:c1:ad:16:63:0c:52:00:c3:26:
ba:45:d6:43:a7:c2:3e:9b:99:8e:e1:f9:9e:c1:5b:d6:db:82:
70:da:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:01 2026 by rpki-client