Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: sUcSEiTTiBmCIk3nbfZHmKT8la9t4a6hm2VOBBIXCZc=
Subject key identifier: 9C:CA:7D:C8:93:FC:8B:FA:0C:53:44:E7:2C:C1:61:DD:F0:A3:AD:55
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019FAA1A5348B3E78166FF4EADB8358AACF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1154
Signing time: Tue 28 Jul 2026 19:01:19 +0000
Manifest this update: Tue 28 Jul 2026 19:01:19 +0000
Manifest next update: Wed 29 Jul 2026 19:01:19 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: iGFEoSIVYgJTDLXmKXRarRvhX7UGQGmAeSp9ro1bXfo=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:53:48:b3:e7:81:66:ff:4e:ad:b8:35:8a:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jul 28 19:01:19 2026 GMT
Not After : Jul 29 19:01:19 2026 GMT
Subject: CN=9cca7dc893fc8bfa0c5344e72cc161ddf0a3ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:d2:fe:72:80:0a:a3:d0:3d:80:93:65:5a:
68:12:f9:93:da:7b:21:3c:eb:9b:ad:96:a7:97:c1:
7a:c9:27:48:34:98:ce:b3:32:57:20:9b:f5:8e:b3:
dc:4f:db:06:7d:86:61:04:f3:09:99:57:6b:05:c8:
8e:1a:bc:2e:6e:ec:24:6e:39:60:36:83:42:cb:b9:
41:7f:7d:9a:66:65:a7:28:aa:09:70:18:48:a0:dd:
41:bb:76:ba:c6:f0:86:fa:fa:56:fc:05:55:a8:6b:
81:0a:79:cf:17:f4:36:ef:5b:10:dd:3b:db:91:dc:
fc:e8:24:ab:68:2a:db:45:04:c1:79:ee:55:63:34:
e7:f0:61:93:aa:a5:af:65:8c:72:cf:3f:e4:01:92:
ab:d5:4e:43:2f:94:33:59:de:43:91:a0:d7:b4:85:
79:95:63:a2:26:1e:ac:9c:88:b4:10:a9:64:ab:b0:
76:6d:7c:18:a9:a6:77:3b:51:bf:e5:9c:8c:d2:e0:
bc:3b:23:57:f0:7d:d6:b2:db:1d:ff:90:35:9b:74:
d8:fa:7f:91:7f:7d:2d:b2:b2:0e:7a:43:0a:b6:ab:
c8:27:e0:4d:2f:6c:3e:eb:29:60:48:61:98:8c:53:
13:36:49:ce:c4:1d:2b:dc:a5:84:ce:4f:dd:f1:bf:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:7D:C8:93:FC:8B:FA:0C:53:44:E7:2C:C1:61:DD:F0:A3:AD:55
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:ad:b2:87:c4:16:d9:d1:5a:13:d1:12:8f:98:ef:b5:39:
93:9a:19:e9:f1:40:42:e7:19:0b:b5:fe:e2:87:54:64:cb:32:
47:44:29:18:46:ea:b0:c7:ef:f5:76:bb:b2:1d:1c:4b:d1:aa:
ad:3e:ff:1b:52:18:79:b7:79:25:d5:89:19:bb:d2:7b:ab:53:
49:95:c6:23:be:41:c9:c3:d9:4a:1a:43:c1:66:83:2a:2f:40:
27:07:e0:b8:b3:a0:dd:66:81:8c:6a:be:5f:4d:1c:f1:f1:04:
cf:02:72:c4:d3:bc:57:e1:e1:d6:95:6b:a1:ac:ba:af:7a:3b:
6b:aa:e7:f1:0a:e9:40:f8:6c:91:61:b6:6b:d4:60:e8:98:63:
5d:2d:be:9c:34:c4:07:3b:9d:99:63:3f:ab:8c:a1:c4:cc:54:
47:3b:d1:ec:34:0e:f0:59:e8:8b:94:28:d2:ae:63:53:ba:51:
6e:48:37:05:30:5d:07:b7:b8:e7:bc:25:86:89:3e:48:4d:1d:
f5:21:cd:51:92:4c:f3:e6:3f:f4:4c:b0:ad:bf:28:03:8c:80:
d3:6a:f0:b8:bc:13:85:2c:c0:e0:94:c3:6f:4e:48:09:91:64:
66:44:30:bf:fb:92:a8:e5:d9:58:39:9d:dc:f4:6f:4e:7f:b8:
52:44:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:37 2026 by rpki-client