Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: HVYlo+9HpmQZVK6bdX0J2vg0f0rA+Cv9ubO2IItj/mo=
Subject key identifier: D6:64:17:B3:76:DA:B6:FB:E7:A2:62:69:F1:72:8C:76:2A:E5:1E:29
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019FAA1A6EDAD848804DEA9FC454B11FD643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:01:26 +0000
Manifest this update: Tue 28 Jul 2026 19:01:26 +0000
Manifest next update: Wed 29 Jul 2026 19:01:26 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 7j86K9uc7WyJ7gBj2nwE4qeQELy1zAvd/plzOsKat1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:6e:da:d8:48:80:4d:ea:9f:c4:54:b1:1f:d6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Jul 28 19:01:26 2026 GMT
Not After : Jul 29 19:01:26 2026 GMT
Subject: CN=d66417b376dab6fbe7a26269f1728c762ae51e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:0e:13:b5:1f:c6:c5:eb:c4:e6:77:df:5d:
f9:6b:e3:c9:a4:c6:73:e1:a2:3d:24:e6:88:36:68:
93:b0:98:3b:0b:a5:49:e3:2b:bc:04:26:5b:7d:3b:
ec:d6:7b:0e:03:c3:27:ef:20:5d:24:29:9c:77:fb:
01:9a:28:5c:8e:ea:b5:df:bd:24:2c:4a:47:df:c3:
70:a9:23:36:a9:69:b5:9c:dd:6b:eb:92:96:de:39:
3f:5e:a3:b3:b2:0b:c3:81:be:ce:d7:7a:ff:4e:d9:
d0:b4:87:a2:43:b0:2d:ee:b5:1f:42:4a:f2:31:20:
d8:e7:e2:71:05:c8:13:e5:1c:e3:de:a3:93:99:af:
97:d9:ad:19:a0:7e:2e:4d:e7:6f:72:e5:62:79:8f:
ab:d7:b2:1d:05:fd:d3:bb:9d:af:68:74:57:24:17:
1b:6e:20:0b:d2:2b:eb:eb:6c:9c:71:cd:30:36:4c:
f4:29:6b:df:41:4e:4a:e5:08:ec:7f:96:7b:6c:b7:
e5:a2:f0:57:a7:83:db:71:b7:19:77:c0:cf:be:32:
c7:fe:d8:30:ea:a2:1b:4b:7a:46:51:0d:3f:d7:a6:
99:2c:4a:d7:43:11:3c:83:d5:a3:1b:81:aa:f0:62:
90:10:39:35:89:9c:4a:2e:73:ea:e5:94:2a:de:a9:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:64:17:B3:76:DA:B6:FB:E7:A2:62:69:F1:72:8C:76:2A:E5:1E:29
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f1:45:dc:8c:96:fc:d2:49:9c:8c:45:fe:67:34:26:a4:88:
6e:0b:c3:46:5c:f7:34:12:6b:52:5a:81:b9:6a:df:9c:47:f1:
06:eb:e0:c0:da:d3:cd:35:cd:6e:28:cd:5f:54:db:07:a2:17:
5b:69:5c:85:75:2d:6a:52:ce:9d:77:a6:6c:85:81:7b:79:91:
aa:a5:fa:ea:0a:7d:61:6e:ef:0b:18:88:1f:5c:2d:63:93:f6:
94:45:92:11:94:e0:8f:5e:ab:72:02:f6:ee:ed:ac:8b:80:57:
2c:f9:26:5d:24:a9:5c:5a:30:f5:93:d9:60:37:3b:00:a6:60:
db:00:48:56:5c:16:b0:f8:92:a8:20:ce:2d:ce:a0:fc:f8:bf:
1c:86:83:d9:8a:25:9c:31:90:f8:81:66:0c:c7:32:eb:e1:6a:
0f:e5:bd:22:6d:79:32:e6:e0:1c:f2:b8:58:73:52:01:49:eb:
94:ae:d7:d6:f2:21:22:22:30:7a:dc:f4:49:68:af:ab:ac:42:
94:e2:d3:7d:43:41:db:f3:55:20:25:4c:61:0e:86:4e:dc:42:
45:20:87:d1:b7:6c:e5:8a:0a:02:e6:7d:df:f1:4a:fc:26:1b:
81:40:ca:be:06:bc:79:4a:c4:c6:74:c4:ee:64:32:61:d0:0f:
f8:da:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:58 2026 by rpki-client