Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: oxun1DdqiRhs2Cl8Su9uZAMskpZCSVsOn58zRPlB2aQ=
Subject key identifier: FC:71:83:EF:AD:F1:D4:92:01:93:51:08:3B:EA:31:7D:94:8F:1F:25
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 019FAD1A9F3F2C667DA4C9A6356465667C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 0485
Signing time: Wed 29 Jul 2026 09:00:30 +0000
Manifest this update: Wed 29 Jul 2026 09:00:30 +0000
Manifest next update: Thu 30 Jul 2026 09:00:30 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: aGnFBLrM+C9YooC5f2e8l00M6ETxdTGbXrq+BYHSKnM=)
2: mcBFodUS0CwQmUkGW0FYxCXI2Ow.roa (hash: jkf/rJLpDQOpzEiYaZvjFupL9lXgwt7xQFwFKnS2W7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:9f:3f:2c:66:7d:a4:c9:a6:35:64:65:66:7c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Jul 29 09:00:30 2026 GMT
Not After : Jul 30 09:00:30 2026 GMT
Subject: CN=fc7183efadf1d492019351083bea317d948f1f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:29:5a:6b:a3:d8:cd:29:07:20:1b:92:1e:
bd:29:3f:ab:18:3c:9e:06:3f:2e:60:98:15:7b:e4:
cc:0a:50:6b:42:c6:20:fe:20:73:4a:4c:7d:06:c9:
33:72:f4:79:5e:59:16:6e:79:8e:de:be:3a:ac:e1:
92:5d:ff:b3:db:f2:77:7e:45:44:a0:60:71:05:38:
4e:30:da:f8:f8:b8:6f:ad:ab:e1:b7:47:22:91:46:
69:d7:54:7a:28:b6:90:91:87:aa:f6:d1:2d:4e:37:
3b:7c:0a:d7:48:cc:e3:bb:04:5b:6b:19:ca:34:e6:
19:8e:bc:c0:39:73:7c:86:0b:65:46:4d:ed:66:18:
42:ac:60:f2:6d:92:86:21:e2:9f:1e:cc:58:73:e3:
2b:92:d4:7a:e6:4d:b3:4a:42:4f:ac:aa:f2:7a:14:
bf:e3:96:5c:05:ae:35:58:b8:4a:20:13:17:9c:72:
71:7f:dc:2d:29:d3:26:c4:b8:27:07:27:f9:d9:64:
ed:83:5f:ff:1b:88:49:5d:f6:2b:80:4e:9f:f4:1c:
26:5d:3f:f5:2d:a9:d0:a6:e6:2b:29:8d:26:44:c9:
1c:59:db:69:be:05:6d:ca:f1:ef:f0:37:92:14:6c:
1a:8d:e6:11:4d:86:6f:04:47:31:73:bb:7a:c9:82:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:83:EF:AD:F1:D4:92:01:93:51:08:3B:EA:31:7D:94:8F:1F:25
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cc:3a:c7:d0:c7:ca:5a:46:e3:1c:d9:7e:83:56:a4:37:9d:
02:5d:4f:0f:c7:56:60:0b:d9:a8:ea:f4:08:37:86:ff:d5:ba:
91:96:a3:5d:13:a0:a0:c9:a0:ab:e3:d5:a6:c7:10:47:01:a2:
34:10:3e:df:60:cd:cb:b0:35:b8:92:65:ec:d7:1c:62:0b:9e:
67:40:50:19:6c:f9:20:53:c8:86:92:5c:64:02:41:f1:48:e1:
84:31:1c:9d:79:ba:24:85:1b:b3:59:90:e4:40:4b:a3:e9:d7:
c0:14:ba:7d:43:81:3a:9f:a5:41:01:66:33:13:07:14:ac:89:
eb:d1:d9:cc:9a:14:ea:f6:18:aa:a1:d0:6f:e3:fd:fb:1d:7f:
8f:93:6c:93:d8:02:0c:64:d7:6b:20:a9:0a:41:5c:75:47:1d:
76:89:09:45:b3:32:b6:f0:d3:5c:1f:5d:04:6d:f7:7d:b4:ee:
fe:2a:1f:83:ef:60:81:0e:3a:2b:e1:c6:82:e6:72:de:63:3d:
be:db:07:2c:04:54:ba:1f:dd:de:a7:e4:33:7a:85:99:4d:89:
44:d2:c8:f3:31:3d:a8:b5:0f:ad:fa:e0:28:cc:d9:db:f3:d2:
0e:2f:6b:71:2e:b9:8f:39:16:1d:a7:40:ff:30:fd:18:b3:b8:
73:24:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:10 2026 by rpki-client