Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: lXIx/59XLKUOgJurJHSyHKGhHOxfu58tk4E8Mxt6WO0=
Subject key identifier: 7C:07:6C:66:96:CE:37:45:6D:1D:03:DC:EA:06:15:F7:60:52:B7:17
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019FA97520DC25DB3214F147267452FDBD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 0A05
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: Nn4lk8M/5AXUKJCHBrfzvIr7StC1/+kg5JXMLSwAgAM=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:20:dc:25:db:32:14:f1:47:26:74:52:fd:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=7c076c6696ce37456d1d03dcea0615f76052b717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:55:72:47:77:5d:ab:01:53:88:15:1e:64:
1e:01:66:4d:ab:22:5c:b8:5a:00:c1:d3:31:01:21:
33:f8:74:f4:9b:17:8f:d0:da:5c:f1:9f:4a:4e:9c:
58:61:7b:2a:9d:c4:01:23:37:e6:c4:c3:f7:85:cb:
fc:2b:51:c8:fd:2c:5e:be:af:10:5e:f3:1b:49:f8:
93:d4:c2:b0:d0:98:67:c7:0f:03:d1:f2:3f:7a:cd:
8e:25:54:ca:f0:6e:3b:d3:ef:5d:ac:a2:16:08:47:
18:e1:cc:9e:95:18:9c:2c:2a:ed:0f:74:80:f6:7c:
cb:17:6a:f7:28:b8:ad:e5:4c:cc:ec:e3:a7:ce:8a:
3e:d4:a8:a5:d8:63:b2:c6:d9:8f:17:08:11:c2:08:
a5:76:7c:0a:3d:52:12:73:20:54:06:f4:b3:58:cc:
59:62:ef:f0:f6:25:65:b6:ff:9c:a6:e4:b7:5d:e4:
c6:83:3e:2b:9d:55:cb:4d:cf:0d:4e:e5:65:c8:63:
c8:2a:78:bb:d2:66:dd:81:48:95:cf:3c:67:94:e4:
be:be:6d:aa:a7:d8:08:0e:d8:55:ec:af:33:76:36:
1a:e7:15:5e:37:c2:d3:29:d1:da:68:bd:da:4b:e0:
28:bf:2b:40:16:fe:dd:ae:11:1a:45:85:31:5c:9b:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:6C:66:96:CE:37:45:6D:1D:03:DC:EA:06:15:F7:60:52:B7:17
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:2b:93:0e:07:92:36:5e:e3:86:cb:f8:cc:3c:20:b9:f2:
4d:a6:ad:28:38:d3:2d:53:ce:60:58:41:46:c6:e4:fb:60:5b:
4a:9f:ec:69:11:d9:3c:2f:00:8f:7c:65:5b:37:0b:e3:01:08:
ad:8d:ae:d8:b9:4e:46:7c:be:40:2a:94:fb:15:04:18:f8:1e:
5d:1b:51:19:b7:91:f5:38:05:b1:22:66:29:bf:3b:96:89:90:
66:98:d1:af:c4:85:58:f4:9b:46:b1:bb:bf:a6:78:68:3f:5c:
21:e5:8f:57:9c:d0:43:30:68:1b:62:fd:e4:aa:5a:51:e3:42:
95:08:2f:4c:9d:35:d6:9a:39:88:3e:d3:55:55:dc:95:56:86:
76:b5:c1:4c:6b:b3:66:a7:87:56:ef:02:5f:67:c9:ed:7c:32:
2d:e9:e7:32:ee:ed:69:e0:58:ff:8a:93:6b:58:52:c3:08:df:
b2:eb:27:63:f1:87:11:0c:78:c4:7f:e2:cd:cb:53:59:01:35:
bc:14:84:d0:1c:d0:56:64:bc:bb:f0:f7:1b:22:84:0a:ab:aa:
66:9f:8f:84:34:04:84:84:d7:6d:26:78:06:51:9b:ed:e1:f6:
25:7b:35:39:90:70:5f:83:22:ce:27:e3:d9:ec:28:80:77:c3:
ab:13:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:36 2026 by rpki-client