Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: vW9s6pvWuCrQ9ebGjb44eop4JZVALfeMhxv3PNqLGOs=
Subject key identifier: AA:95:F6:76:77:35:D9:90:35:A9:11:69:D1:F6:FC:A0:C8:B5:C5:06
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 019FA9E3255626952A3D9B91F44FCF536914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0F48
Signing time: Tue 28 Jul 2026 18:01:03 +0000
Manifest this update: Tue 28 Jul 2026 18:01:03 +0000
Manifest next update: Wed 29 Jul 2026 18:01:03 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: yVRBHDeI1wTNuLCk1AXBcZYHwV7HX3U7CWeAoxF+UTw=)
2: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (hash: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:25:56:26:95:2a:3d:9b:91:f4:4f:cf:53:69:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Jul 28 18:01:03 2026 GMT
Not After : Jul 29 18:01:03 2026 GMT
Subject: CN=aa95f6767735d99035a91169d1f6fca0c8b5c506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:47:f1:cb:4d:07:cb:b7:a0:d3:95:4b:aa:
9b:ad:fd:e3:e9:ac:56:37:6f:e4:3d:56:86:dd:4a:
26:f3:e9:8f:61:ab:82:03:61:03:6c:bd:44:79:db:
b0:ea:46:b9:86:7f:da:6e:db:1f:81:e5:26:6e:0b:
52:0d:68:cb:f7:66:cc:4a:d0:fc:2a:f1:01:57:63:
a8:30:35:01:b5:28:d2:29:71:fd:35:87:64:7b:d3:
fa:9d:91:b4:e9:72:25:6f:33:7e:84:b6:0d:6b:ca:
8f:fb:88:1b:db:22:1f:26:d8:74:cc:ea:4b:0b:82:
c1:ff:d7:ae:b7:2d:48:28:de:d6:03:85:b3:b0:32:
83:17:72:19:a0:87:8d:de:15:e8:25:cb:2a:2a:7b:
16:11:7a:d9:6f:68:78:94:a9:02:5b:d5:29:f0:16:
63:59:83:f3:a9:43:c3:a5:c6:7c:72:e0:f4:ac:46:
39:b0:10:9d:a1:a7:e1:9b:91:55:09:3c:a5:81:cf:
f3:e1:91:3a:f6:71:9e:c7:af:54:c1:c9:76:82:0a:
a1:e2:7a:47:24:ca:79:14:08:bd:7e:cb:21:d6:d4:
9b:c4:05:97:a1:7b:e3:ae:d2:a4:0d:4b:c7:b1:b4:
ce:d2:87:ac:43:88:52:44:f6:46:67:07:66:06:da:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:F6:76:77:35:D9:90:35:A9:11:69:D1:F6:FC:A0:C8:B5:C5:06
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:c6:fa:6b:b5:8b:ab:65:33:f2:64:0f:04:a0:39:b1:f9:
92:71:2b:b6:85:4f:47:96:6c:ee:9c:01:b4:32:e0:52:71:72:
ae:57:f9:48:ad:ef:83:10:ce:05:cd:cb:a0:db:a6:36:39:89:
6c:23:34:56:bc:33:e4:0a:29:8d:89:11:1e:32:cd:60:52:2b:
59:65:64:6a:ef:27:ca:cc:67:90:b4:62:27:41:d4:22:6d:df:
ad:f8:37:5f:ef:97:2a:0d:ea:78:61:c1:f1:7c:5a:6e:4a:3f:
74:6c:f1:f0:df:df:9c:cb:45:df:7d:a7:ce:13:77:c5:59:7b:
de:c6:96:bc:36:c1:2d:03:92:a1:b9:6d:80:07:4d:65:f3:dd:
3c:a6:c1:fc:47:31:cd:06:ec:1c:71:87:c7:f3:a8:02:14:6b:
e0:91:87:68:c1:0e:32:e2:ac:a7:96:f4:e2:36:ef:be:d3:fe:
6d:ee:5a:39:6e:0b:80:47:67:c4:25:28:55:ad:27:52:10:8b:
1d:84:81:3d:b7:48:22:29:77:bd:e2:db:10:7d:79:60:92:5f:
57:aa:10:fa:ea:67:55:72:b2:ad:d9:75:22:ba:1e:08:16:ac:
6e:43:58:9a:89:db:49:a4:b0:e5:93:00:cd:6c:31:fa:52:ca:
58:74:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:50 2026 by rpki-client