Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: ujTFc66N0JVdmDZ0kqXcQYTONceE8YcNjeT1RHZcraE=
Subject key identifier: 5D:4B:31:96:BF:55:52:14:16:6C:1B:C3:F9:8C:39:96:CA:CC:C0:DF
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019FA898F9E5A998CC8C704B60C89804B237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 12:00:25 +0000
Manifest this update: Tue 28 Jul 2026 12:00:25 +0000
Manifest next update: Wed 29 Jul 2026 12:00:25 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: aNbNXFqaNPWzS2To2mfSIJTk1ch9RDgJkvA4OJVNkuk=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f9:e5:a9:98:cc:8c:70:4b:60:c8:98:04:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jul 28 12:00:25 2026 GMT
Not After : Jul 29 12:00:25 2026 GMT
Subject: CN=5d4b3196bf555214166c1bc3f98c3996caccc0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:3e:c4:39:cd:e3:fc:38:d4:41:19:f6:a2:
a6:5c:90:f8:ee:09:02:e9:1a:22:f2:87:7e:92:50:
93:65:5e:24:ff:42:95:2d:c1:1b:8c:ad:d9:b6:23:
a0:f2:81:47:24:45:2b:d4:42:4e:13:2b:ab:5d:93:
4c:e4:b3:e0:bf:f8:c0:ee:88:50:f6:a9:35:6a:8e:
dd:c6:04:b8:7c:21:1a:93:53:20:ad:8f:f5:b7:db:
49:b2:5b:02:d3:e1:31:f3:0f:f4:de:05:ca:bf:22:
c5:9f:8a:49:3b:7a:ce:54:71:94:dd:72:02:15:2b:
d9:ed:45:36:0e:73:cc:12:55:5b:16:4c:78:42:9f:
1e:e8:2a:cf:f6:fe:1f:0b:41:c3:79:bd:d7:46:7d:
db:17:3d:7c:e0:9e:32:56:ab:37:00:6b:39:6b:dd:
3e:43:85:63:77:ca:52:ba:1f:df:a7:bb:fe:09:6c:
4b:f1:b4:d4:2e:41:63:07:7a:23:8a:40:8c:f8:15:
c3:65:4d:2f:7c:9a:73:9d:3d:fe:52:52:6d:27:80:
e6:88:6c:26:96:26:25:20:05:33:c6:6b:da:58:23:
3e:d1:c0:2b:80:cf:cc:38:25:5e:7a:34:42:d7:52:
c2:4e:07:4f:49:84:9f:dc:cf:a1:1c:bd:70:d4:7d:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:31:96:BF:55:52:14:16:6C:1B:C3:F9:8C:39:96:CA:CC:C0:DF
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:f0:8a:2c:4a:1b:23:fd:ec:5c:08:08:92:1b:85:cd:8e:
54:e4:af:77:54:a7:c2:cc:33:b0:e5:07:31:d1:d0:5f:0c:92:
7f:7b:88:08:68:1f:2e:1c:82:07:b9:ee:6f:10:00:be:6e:54:
1b:f1:a5:0c:16:eb:dd:c8:31:f0:3e:20:45:bf:cd:bf:c8:a8:
ba:79:48:d4:a7:92:29:19:b5:07:c2:f2:81:8c:68:d5:07:c9:
d6:10:48:2e:47:55:78:32:e3:76:cd:87:63:f2:a4:ce:06:fb:
76:36:5a:81:79:0d:eb:dc:49:fb:94:5a:22:c5:38:9f:02:c5:
29:ce:79:45:64:59:4c:f2:bb:6c:44:35:fb:28:e7:15:d1:2f:
3e:13:04:23:f0:b4:43:9c:71:22:92:73:97:5b:68:ac:18:ab:
b2:2e:9c:d9:c0:80:c4:81:dd:36:e2:c7:e9:85:27:d0:d3:ee:
9c:fd:84:b4:b4:fc:e9:8e:b3:4d:80:0d:d4:d7:28:f3:c7:9e:
7a:bb:07:92:e2:88:97:c6:07:d6:f3:03:43:81:26:f0:03:8d:
41:5c:95:6e:7d:b1:d6:c9:ad:d1:27:f9:ee:1c:cc:74:20:52:
05:0a:21:89:24:ce:c3:2b:19:1f:62:89:cc:70:d5:ce:b7:78:
62:fe:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:02:08 2026 by rpki-client