Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier: klK1MzJTFhHvZOXZPo4PP4UtDjyBs6FdEqs70C/c6Gc=
Subject key identifier: 43:EB:DB:BC:68:72:3F:0D:61:95:A6:C8:5E:ED:75:C2:FC:04:5A:E7
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 019FA9072BCA8D1FBB79288C314AC1C330DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 14:00:47 +0000
Manifest this update: Tue 28 Jul 2026 14:00:47 +0000
Manifest next update: Wed 29 Jul 2026 14:00:47 +0000
Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: tmb5ZFvsor2cQAVqSRma6OxfB8HdQMhZR/jGDvWutpo=)
2: WG7wAcXOQAIG2_4E3zJbWmoA3W0.roa (hash: 7hBSMbb3+udDNajYBSGLEQiPuq6VzstQJyrB9xeEhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2b:ca:8d:1f:bb:79:28:8c:31:4a:c1:c3:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Jul 28 14:00:47 2026 GMT
Not After : Jul 29 14:00:47 2026 GMT
Subject: CN=43ebdbbc68723f0d6195a6c85eed75c2fc045ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:71:db:13:46:ee:2c:88:f4:74:d8:0c:d2:
cc:99:d6:ad:b3:99:9d:6a:24:c9:f5:6d:48:ee:6c:
76:da:c7:13:82:46:a8:ff:06:5d:e8:0e:86:bf:25:
50:99:c3:17:05:25:9b:e6:26:24:d1:88:9e:03:30:
b4:63:ae:12:9a:95:63:33:cf:7b:2e:08:cf:6b:55:
3e:11:03:0d:c7:15:c1:fc:a9:99:7a:57:c5:31:5a:
14:08:3b:76:29:10:3b:da:63:c9:8e:3b:97:a8:7c:
f9:cd:10:df:bf:ee:58:96:d1:fd:0b:4e:f6:43:ce:
5e:ac:cc:de:4c:81:c7:02:7c:40:64:86:7a:6b:46:
42:e0:98:37:36:9c:d6:68:d2:d3:35:1d:95:00:c3:
75:27:e5:53:fd:3e:c9:cf:89:62:b2:dd:55:d7:5f:
62:95:2f:32:eb:0c:74:37:34:4e:d8:94:6e:6b:ea:
ee:c7:47:1a:9b:5a:f1:78:52:07:9c:ad:b3:7d:9d:
1b:4a:3f:f1:e2:0d:73:10:28:e7:43:81:bd:44:9a:
3b:94:f5:7b:a1:5b:e0:c6:97:77:8e:82:9c:d0:48:
63:de:dc:09:cc:a1:01:26:e9:1e:ca:0b:88:12:ac:
61:e3:1b:7b:23:8f:48:10:a6:07:64:a9:ad:25:51:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:DB:BC:68:72:3F:0D:61:95:A6:C8:5E:ED:75:C2:FC:04:5A:E7
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:38:82:be:c3:13:d3:3c:88:33:ad:a7:32:56:63:e4:63:
e6:1e:ba:40:22:0c:0a:f7:83:e8:de:4a:ee:2a:76:4a:63:11:
54:a9:c3:a4:b1:a8:46:e1:bb:4b:55:7c:3a:af:dc:70:69:9a:
86:3c:96:5a:e8:0e:e6:25:a5:8f:39:b9:d1:aa:a9:0e:7b:60:
63:61:d6:bf:f0:62:01:6d:3e:1f:ef:96:05:3a:4e:3f:6e:2f:
5a:30:20:00:33:1c:1a:2d:13:c7:a1:b4:59:94:f6:cb:15:43:
11:3c:76:34:c7:cc:1c:1d:3c:f7:33:a9:49:a4:a6:14:a6:16:
6c:ba:ea:36:96:0b:cb:15:49:4f:66:2a:a6:de:89:39:79:ea:
8e:30:c4:ef:b5:88:38:72:45:fd:66:4a:2d:b3:2f:0e:a7:9f:
5f:53:cd:a5:1b:34:41:6d:f8:1a:15:30:22:24:ed:27:3b:ee:
8a:7a:7e:4a:3c:41:ed:73:26:0e:04:96:a8:97:ce:00:07:c2:
70:16:f2:30:73:e8:f3:84:08:ad:26:4f:35:9d:37:8a:d0:80:
92:11:28:dc:22:83:bd:67:8a:f3:5a:ec:42:d3:b5:25:7a:c8:
ff:34:ba:a3:72:7b:c4:24:6a:72:b6:75:16:a8:09:13:4f:ae:
be:48:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:29 2026 by rpki-client