Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: X41+UQEZoeigJNCKdFPM768yRT0yn7XcrWQdx28989Y=
Subject key identifier: A0:A9:A7:63:C8:85:54:31:FD:A3:E4:09:2F:90:2C:F8:D7:12:39:34
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019FAABE6FDF0BD1235792F8E791117806CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 1963
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: kBXEGe+d2gwqkIT8J6WDiILEIYE48JBGpko6IFAtGiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6f:df:0b:d1:23:57:92:f8:e7:91:11:78:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=a0a9a763c8855431fda3e4092f902cf8d7123934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:0c:dd:e8:76:92:f1:5c:81:8e:6b:1e:37:
9f:ca:6c:85:35:0a:d1:56:06:50:9a:34:5f:82:26:
e1:9c:61:dd:d4:5c:e6:5b:78:d2:33:3a:55:d3:c3:
6b:a2:d9:9e:6c:05:77:66:a6:cd:ee:51:d1:5c:90:
df:5f:0f:13:b3:67:8d:26:82:8f:a8:45:3a:55:cf:
e8:ae:5f:46:7d:71:37:0a:35:76:a2:5f:ff:98:1b:
01:50:62:00:f6:05:75:74:95:7f:ec:5e:4e:59:de:
27:5c:d6:8f:46:15:0e:39:8a:6c:d9:24:1e:d8:77:
df:d4:18:51:a1:b1:06:db:c6:ad:c5:d9:dd:cc:21:
77:7c:56:cf:2d:6f:bd:22:c1:a5:aa:60:b7:d8:41:
f1:2a:1f:58:4b:e4:ab:e8:c9:ec:08:cd:aa:31:f8:
3a:70:2b:11:e4:35:34:d0:30:5a:28:c7:38:71:4f:
a4:23:56:9e:d6:58:45:50:f7:4c:fc:1d:01:dd:15:
da:97:62:da:9d:89:71:fd:90:b2:e3:a1:5e:72:0f:
76:14:03:16:06:91:be:66:d7:19:70:24:85:60:fe:
4b:dc:90:5e:a8:ee:ac:d0:87:f2:71:96:2e:0d:9d:
58:d1:02:cc:73:5f:32:34:5a:57:ae:43:d8:d8:3c:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:A7:63:C8:85:54:31:FD:A3:E4:09:2F:90:2C:F8:D7:12:39:34
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:15:28:e6:75:90:3f:ad:35:e6:b2:7e:11:29:e6:da:e7:
2d:4c:ca:2b:a7:8a:c5:73:de:90:85:6f:a1:a2:c1:dc:f7:19:
a5:36:80:44:d7:10:fd:34:66:09:b3:04:98:1b:7e:f2:67:f9:
12:e4:d3:13:39:99:1a:46:57:a3:5e:ec:03:98:57:0e:38:42:
c9:09:69:ed:3a:53:d5:20:26:5c:62:fa:07:ae:e1:1a:f7:64:
ca:66:5f:ac:55:af:f5:9b:f4:08:bd:ee:b6:f2:d2:c5:c8:42:
f7:98:2f:b4:4b:6c:ac:d2:4a:31:ac:c4:4e:83:18:bc:9b:e7:
06:37:af:c1:a7:11:7b:2d:cd:8e:75:c4:34:c9:30:3f:d9:e8:
bb:8a:0e:8b:fe:da:38:e5:20:fa:42:75:b0:53:8d:53:49:0d:
12:91:04:02:30:86:8b:da:27:51:61:55:75:be:57:77:39:4b:
1b:29:b5:7d:f1:47:58:4a:39:d8:d6:b7:4e:23:6c:c7:84:75:
68:d2:f0:ea:57:25:38:50:d6:d2:f5:c1:98:d2:2b:bc:78:87:
58:6c:a9:6b:f0:b3:c6:f4:3c:b8:01:7f:02:39:4f:db:e3:77:
a3:53:a5:68:80:73:14:54:92:bd:15:20:8f:86:e3:05:27:e3:
f5:39:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:48 2026 by rpki-client