
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
File: s5V9y_9QghTcodun9TIXIFs-Tqo.mft (raw, json)
Hash identifier: dPjmXc0IsSUqFdgBAV4yXeZ4va+vNIQ7iTEvrt40Heg=
Subject key identifier: 06:76:2F:EA:F1:B5:3E:48:A3:B7:98:97:DF:DD:90:5D:00:80:A2:4F
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Certificate issuer: /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial: 019FAC76BF40BD5C99BCB9FAE2853E840A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:30 +0000
Manifest this update: Wed 29 Jul 2026 06:01:30 +0000
Manifest next update: Thu 30 Jul 2026 06:01:30 +0000
Files and hashes: 1: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (hash: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=)
2: s5V9y_9QghTcodun9TIXIFs-Tqo.crl (hash: ac7ENNDsHgn3iRv+Bj5h03zMGCBGhKumxs7Cd+2MOI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:bf:40:bd:5c:99:bc:b9:fa:e2:85:3e:84:0a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Validity
Not Before: Jul 29 06:01:30 2026 GMT
Not After : Jul 30 06:01:30 2026 GMT
Subject: CN=06762feaf1b53e48a3b79897dfdd905d0080a24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:d4:5d:01:d3:1c:9e:6e:73:ec:ac:00:e6:
bf:bd:66:46:1d:b8:aa:6d:80:74:4f:7a:b1:be:a1:
d2:a2:d5:93:e7:8d:96:b4:0b:0d:24:5c:fd:3e:18:
05:c7:dc:41:a1:b7:4f:8b:80:d7:95:ef:26:01:20:
12:13:2a:d6:de:c2:8f:b0:40:82:79:bf:85:da:11:
35:29:c4:70:62:9c:dc:e6:c3:db:62:61:d2:78:a9:
b6:23:b6:31:0d:69:d2:ed:9b:84:a2:cb:51:de:29:
65:54:29:6f:3a:f5:4f:9f:1e:9d:c6:f3:a1:cc:ae:
98:f1:5c:c8:17:41:96:c7:47:72:a1:7c:ca:0d:27:
c0:53:cb:74:a8:cc:fe:01:7e:dc:50:48:a8:e9:a2:
66:7e:2c:c4:08:8a:60:f8:56:af:4f:e8:b1:2c:83:
a6:94:2e:40:de:2c:c9:a6:fb:27:2e:92:d8:bb:24:
43:d8:3a:fc:67:17:a7:a2:e2:75:49:96:96:bf:04:
47:9f:63:fe:0d:03:ea:83:3d:c0:cd:79:e0:62:46:
72:d7:8f:5a:95:31:cf:52:96:d7:4f:83:9f:05:e8:
c2:08:15:5a:78:b7:e6:be:b8:6c:f7:85:e9:34:84:
bc:e2:f0:4b:02:41:ee:e6:67:fc:e0:ff:3d:84:b0:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:2F:EA:F1:B5:3E:48:A3:B7:98:97:DF:DD:90:5D:00:80:A2:4F
X509v3 Authority Key Identifier:
keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:12:84:86:b4:a9:8c:a4:14:e8:89:5f:7f:31:fa:db:f1:74:
81:92:84:84:7a:d2:41:a6:f9:6a:a2:03:62:e5:ba:64:37:6a:
55:f3:6c:e4:d4:6e:8e:3b:e9:5a:9f:6b:90:bf:b8:f4:94:50:
58:ef:3a:50:ee:87:37:fb:1b:1c:0d:82:4f:b3:3b:b0:93:f3:
8b:6b:a4:e6:db:49:74:24:1f:f3:f7:ee:0e:38:43:fc:3b:b4:
8c:83:28:a2:c1:92:2d:bd:80:b9:5f:fb:2b:a0:77:2b:6d:db:
b1:3c:ba:65:39:f1:7a:ef:8c:3d:85:5b:70:0c:df:c0:bd:3c:
54:a9:9a:53:e7:a2:83:c7:84:1f:f6:81:83:e5:3a:d7:1d:92:
08:ce:23:26:7d:b8:f0:d8:40:1d:0e:43:12:42:a9:25:90:5c:
60:93:d1:c5:0a:eb:bd:02:a4:f6:da:fa:89:07:f8:a3:8f:1d:
f7:01:d7:3c:51:e7:86:11:d7:67:dc:52:b7:8c:56:01:75:86:
86:77:89:e6:40:8f:b6:6f:be:24:e0:c1:87:04:c2:2e:19:90:
4a:b6:75:75:93:1c:89:34:b8:b9:ce:54:67:8c:66:7e:b4:c8:
94:e9:f0:57:09:80:7b:2d:9e:6d:65:63:84:40:e1:56:e0:f1:
0b:c4:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:10 2026 by rpki-client