Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: jN47xRH2s+661wncDftVCPtaZkKFqdXBGgxUE4i4Yns=
Subject key identifier: 8B:98:9D:1F:72:C5:A4:65:67:09:51:F1:3D:24:40:C0:AB:73:FB:89
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019FAA505513D27F6EBAFCF80F4025F30495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 20:00:19 +0000
Manifest this update: Tue 28 Jul 2026 20:00:19 +0000
Manifest next update: Wed 29 Jul 2026 20:00:19 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: k3a2sA5UptARVedc7vNXUzxNtf+2tYSpVWu1fFWCJu0=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:55:13:d2:7f:6e:ba:fc:f8:0f:40:25:f3:04:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jul 28 20:00:19 2026 GMT
Not After : Jul 29 20:00:19 2026 GMT
Subject: CN=8b989d1f72c5a465670951f13d2440c0ab73fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:24:e5:25:f6:c2:3a:e7:bb:db:44:6c:39:
5d:5c:56:06:d9:b4:2b:46:2b:29:c6:1c:10:86:4b:
6e:b3:be:b8:1b:30:59:81:b0:f9:b3:46:8e:d3:eb:
05:9d:47:8f:85:6d:92:24:e1:d2:54:9b:9b:bd:ab:
de:85:a4:14:ef:19:65:8a:92:f9:72:cc:29:d6:b1:
7e:15:9b:1b:5a:07:f3:6d:26:ca:ab:e4:17:0c:ab:
57:25:fb:37:b9:9c:c5:34:73:f2:59:e6:38:81:59:
f1:ff:41:3a:2e:e1:09:18:90:2c:7f:c8:6d:d0:bb:
1f:3d:e1:04:0d:e0:e0:4e:73:88:68:87:9a:70:0e:
ba:3f:6b:24:5f:7e:4b:a7:17:a9:a5:42:d4:86:67:
6a:75:4c:30:11:69:cb:e1:e5:44:05:5d:bb:67:df:
26:37:9b:c7:58:7f:4a:2d:a8:89:9a:f3:53:7f:ed:
58:f9:14:dc:7d:9b:bf:45:66:e4:ae:62:63:fc:dd:
32:14:8c:95:b9:e2:9e:07:af:55:26:f3:96:83:83:
bf:d5:00:6c:57:3c:26:0e:ad:36:b3:6e:a9:44:f7:
33:85:ef:74:c4:4c:c9:26:31:d0:7c:a7:41:45:5d:
c0:b6:91:33:35:b6:67:f9:51:08:b3:b6:e0:22:46:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:98:9D:1F:72:C5:A4:65:67:09:51:F1:3D:24:40:C0:AB:73:FB:89
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ac:2d:ef:0c:ae:6e:01:9a:10:23:7f:0e:6e:a1:49:d6:39:
a1:24:28:c9:70:50:58:0b:b4:8a:59:d4:c1:2c:6d:80:dc:d0:
2d:10:b4:b3:30:df:9b:97:85:a2:b0:bc:79:9a:3a:66:99:fc:
6e:14:36:89:96:4d:87:b6:30:25:58:33:39:cd:f6:26:84:ec:
06:43:9f:0b:d2:2b:6c:46:28:49:08:9f:0c:cf:34:38:f5:9d:
09:15:4c:1b:79:07:fd:e7:e9:e4:24:06:99:54:37:60:19:24:
c0:d7:49:fd:6f:ab:84:35:0a:1c:af:87:1c:6f:97:ac:d9:73:
2c:51:fc:62:14:76:b9:84:ce:2a:60:df:54:42:21:e1:0c:9d:
64:4b:e6:ab:34:25:09:12:a7:0b:67:bb:32:ec:cb:95:a2:88:
cc:d4:f2:54:39:be:f1:55:b2:f9:02:96:b1:23:e3:99:b2:e0:
4f:47:82:c9:0d:6f:dc:cb:ac:cb:20:b2:db:b1:c9:fd:72:70:
ff:a1:1b:cf:5d:10:00:86:75:8c:d7:c8:9e:bc:77:2d:7f:de:
ec:70:1a:76:8b:d3:95:cf:c8:bb:c7:b7:7d:5d:52:42:96:97:
14:ec:73:34:fd:bc:51:4e:e0:04:82:bf:22:0c:d0:78:50:6c:
76:4c:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:44 2026 by rpki-client