Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
File: _kTUEsldodkpQxr8aSuUnlnZcFc.mft (raw, json)
Hash identifier: +c5HtqBUC3QcmohkibmBCHO8oEuGsYtIOio6yIm5KVg=
Subject key identifier: 54:62:54:C5:2F:28:C3:0C:E8:08:EA:18:EA:0C:3E:39:BA:BE:F8:6C
Authority key identifier: FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
Certificate issuer: /CN=fe44d412c95da1d929431afc692b949e59d97057
Certificate serial: 019FAC3EF44CF7B6C1CF790F040C37952F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 05:00:34 +0000
Manifest this update: Wed 29 Jul 2026 05:00:34 +0000
Manifest next update: Thu 30 Jul 2026 05:00:34 +0000
Files and hashes: 1: TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa (hash: D3hZNlRBwUcocdYaP+buhwXKanIL4lhbGESYtXOauJE=)
2: _kTUEsldodkpQxr8aSuUnlnZcFc.crl (hash: c2/Xy6VrsYCVV8R5OGwivglOEZaCZaKJFbqEZneO54s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f4:4c:f7:b6:c1:cf:79:0f:04:0c:37:95:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe44d412c95da1d929431afc692b949e59d97057
Validity
Not Before: Jul 29 05:00:34 2026 GMT
Not After : Jul 30 05:00:34 2026 GMT
Subject: CN=546254c52f28c30ce808ea18ea0c3e39babef86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:77:c2:0c:1e:98:34:a8:58:da:2a:02:9c:
48:ac:99:45:af:b2:b7:b8:32:de:b9:3f:56:8d:88:
47:c5:be:9b:86:a8:63:ac:29:af:40:50:f5:43:87:
b5:cc:f0:7e:3f:65:a6:be:7f:c5:39:bd:a2:12:20:
1a:3a:50:c0:25:86:74:41:2f:e3:5c:9e:99:e5:28:
37:40:4c:dd:96:bd:97:06:3a:ef:6d:f1:9e:f4:e1:
01:3d:bb:26:e8:1c:98:3d:19:eb:bc:e0:43:af:95:
de:9f:a7:45:4d:cf:c7:56:cd:f3:0d:43:3e:54:78:
f4:a3:75:bb:b4:59:8d:1a:54:ef:0e:5f:7d:3c:78:
88:b2:1b:ba:17:12:d0:70:1a:16:97:52:74:28:5b:
bd:03:39:e6:0c:29:05:e3:8d:87:41:ac:04:3e:d2:
40:4b:8e:4a:ca:a1:b8:28:8e:3a:c9:12:6e:26:ef:
42:65:a8:fd:52:80:80:36:e3:16:3a:a1:56:86:25:
71:ee:35:3c:91:0e:8b:55:5d:49:d7:dd:de:5d:d6:
f0:31:0a:50:f1:61:cd:45:83:75:15:e7:5e:2f:42:
b9:17:25:42:59:c8:49:f6:af:f9:2f:1b:c6:ea:a3:
7e:ca:a8:6e:75:f2:9f:5a:4f:23:24:22:76:b1:2b:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:62:54:C5:2F:28:C3:0C:E8:08:EA:18:EA:0C:3E:39:BA:BE:F8:6C
X509v3 Authority Key Identifier:
keyid:FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:26:81:1d:5e:cd:64:8c:4c:1a:a6:e4:e8:95:2a:da:cb:
15:8c:99:25:39:9d:f9:a9:81:e3:01:5f:78:16:b3:d9:43:b3:
ed:cf:6c:44:32:eb:58:d0:fe:f6:f1:30:a7:b5:7c:1a:3a:da:
49:03:d8:ef:97:f1:2f:69:6c:54:23:80:71:27:d9:cf:41:e7:
b9:0e:62:52:ec:ef:bb:fd:29:93:3d:e9:b2:bd:a9:f1:0b:3b:
24:4c:80:ed:6c:51:23:5f:3e:fb:b1:4a:e4:95:c3:d0:67:7f:
9b:61:a4:5b:00:e7:e4:3f:20:c9:da:16:d0:ac:ea:81:cf:ee:
33:db:99:08:43:1b:03:e8:a2:7b:b0:fe:c9:32:c5:ef:fd:84:
1a:c0:1a:01:25:a8:2e:88:67:93:c5:35:5d:18:a6:b9:af:55:
ee:58:d3:4d:32:b3:c3:1f:4c:b1:8e:3c:cd:17:e1:a5:be:d7:
27:71:3b:fc:e6:c4:17:33:97:2d:56:02:83:1d:f2:36:bc:d1:
5a:c9:a0:4c:98:fe:7d:e8:d1:c9:f8:19:84:46:4b:34:10:ef:
f7:e2:3e:94:47:6c:b1:21:ff:73:fa:ea:1e:4f:14:ac:ef:ba:
d2:4b:f4:0e:39:3c:ae:a5:6e:1e:62:43:95:23:ed:51:94:8e:
cd:6f:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:25 2026 by rpki-client