Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File: 5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier: tCAaV5KN2KxUvK6jDgdIeQuOoQT7aJcxnEAo14Q3M3M=
Subject key identifier: F1:73:C6:FB:91:06:01:A0:DE:2B:06:C2:02:37:B7:E7:E5:5B:9E:71
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer: /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial: 019FA8998C78208FA23447F88BC0C2864AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number: 05A5
Signing time: Tue 28 Jul 2026 12:01:02 +0000
Manifest this update: Tue 28 Jul 2026 12:01:02 +0000
Manifest next update: Wed 29 Jul 2026 12:01:02 +0000
Files and hashes: 1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: tAxFgjvZnE8sqbNwzShQbiHKwrDC3JuPpRa0ptEZ2a0=)
2: P-9Kjz1UfHMjTGFeahDrOs1ver0.asa (hash: W3pSYzCFr5OFf1TZYGacRWXPYdcekLj5JmITjzZJXho=)
3: vldYV3LWOW9tys3pjIJKZGnUQ1c.roa (hash: iuNVM1moJTBXO3h20HhJjEBtsYGf3s4iabPV9C2WSgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:8c:78:20:8f:a2:34:47:f8:8b:c0:c2:86:4a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f985a94025448914deaa1742207304392513dd
Validity
Not Before: Jul 28 12:01:02 2026 GMT
Not After : Jul 29 12:01:02 2026 GMT
Subject: CN=f173c6fb910601a0de2b06c20237b7e7e55b9e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:c7:52:45:fe:bb:e3:84:63:13:d2:e7:41:
50:1b:c7:46:e9:1c:ee:9c:34:14:3c:95:7f:e3:5c:
97:ff:a6:24:23:e6:11:cb:bd:41:1c:68:d8:f3:3a:
0d:2a:0f:cb:9f:fb:11:a2:c4:04:00:f0:fa:53:ae:
e2:b4:4b:7c:a2:54:4d:31:8a:47:30:95:bd:a4:eb:
e1:79:19:cf:f7:01:25:d6:a3:09:c1:1b:96:d3:84:
17:1a:53:a0:55:0f:f7:44:4d:42:68:e9:e3:8c:8d:
74:48:45:dd:9d:7f:fc:c2:87:09:37:34:4a:07:4a:
9e:81:3c:d4:c6:fe:9b:9f:c5:bb:24:45:3a:fb:65:
fc:50:95:72:20:72:f6:89:7e:97:a2:77:c5:31:e0:
45:2e:ff:1d:2a:0a:b5:80:0c:ea:4e:e4:09:1c:c2:
7f:53:0a:16:7f:da:3b:b9:94:56:6d:39:54:79:83:
3c:50:58:b5:c8:72:4e:92:45:c6:99:c2:a9:aa:1c:
e2:2f:1f:51:6c:5a:96:6f:79:dd:df:8c:a5:c6:a0:
eb:b1:3c:35:62:a1:b6:f3:e5:78:b5:6b:e4:80:6a:
e0:0b:62:8c:d5:ef:a5:de:5e:4a:23:60:05:32:7c:
e1:1c:e5:9c:a4:91:b9:75:35:c8:98:6c:5b:50:01:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:C6:FB:91:06:01:A0:DE:2B:06:C2:02:37:B7:E7:E5:5B:9E:71
X509v3 Authority Key Identifier:
keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:15:a8:26:69:3d:01:0a:d8:aa:c7:d3:47:9c:38:a7:fa:00:
3a:4e:32:ca:76:1a:ff:03:31:a7:68:61:49:6f:45:57:64:34:
69:ee:44:16:fa:e2:81:fe:f0:b7:2a:4c:d0:04:a8:09:04:bf:
51:e9:90:7e:a3:88:d1:ee:e4:e9:fc:9d:31:fd:6b:80:cb:75:
81:2c:c3:59:d0:8b:06:7d:28:d0:d3:88:3e:fb:0a:fa:96:a0:
07:fb:d2:08:70:7f:55:07:6a:a2:eb:3f:4b:0f:29:81:67:ae:
cf:6e:1a:95:fe:4a:94:62:e5:00:76:c6:85:ad:d1:cc:d2:83:
70:a4:fe:c1:a0:48:78:e2:41:54:41:3a:5a:fe:04:f8:84:38:
c8:68:86:28:a1:22:03:77:ed:1e:88:db:83:d1:c1:80:87:07:
e9:22:6a:5c:d9:43:b6:08:20:a4:2d:ae:60:76:1c:4d:18:d8:
65:a7:fa:05:a3:2f:cb:ba:58:97:74:a3:c0:72:30:24:8a:7c:
99:27:e8:a5:3a:e7:51:24:07:2e:62:fb:56:8a:cf:df:a9:6f:
23:d9:3f:a6:07:24:f7:ab:43:e5:3e:4b:33:e0:09:d4:f9:a6:
df:22:68:bc:7e:a6:05:93:e1:94:5e:37:ba:46:4f:db:70:80:
5d:17:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:18 2026 by rpki-client