Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: wuDxQYJYUP9lWx3BFnX+yvoVlmZU7y4vKqA2tsIw5x8=
Subject key identifier: 65:19:00:6B:8A:A9:4F:72:4E:F0:BD:8C:33:B0:02:3D:B9:AD:97:39
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019FA89917268913CAD82B403C3D01846DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 12:00:32 +0000
Manifest this update: Tue 28 Jul 2026 12:00:32 +0000
Manifest next update: Wed 29 Jul 2026 12:00:32 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: tsMY0ZTsNmpPvd9dBfgltpee6TlGxx1ueamu1czXcw0=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:17:26:89:13:ca:d8:2b:40:3c:3d:01:84:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jul 28 12:00:32 2026 GMT
Not After : Jul 29 12:00:32 2026 GMT
Subject: CN=6519006b8aa94f724ef0bd8c33b0023db9ad9739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:87:90:95:f6:c1:f8:8e:f2:0e:94:f2:71:
11:03:0f:7d:1d:6c:22:f5:3e:e9:0e:aa:47:b2:15:
f1:ad:33:24:0e:e7:08:82:b9:64:40:2f:c1:05:7d:
45:48:dd:29:7c:24:b0:8f:0a:2e:08:e9:3c:9a:6a:
dd:44:e9:ff:2e:15:37:59:43:47:8a:c7:6d:6d:2d:
e6:03:4e:1b:e1:d5:2e:a6:44:e0:33:aa:93:a5:64:
a5:fd:40:6c:f6:5a:2f:47:6d:63:5a:a4:76:18:77:
0c:8c:f3:ff:37:24:ee:2b:f7:9c:48:7c:46:d4:8b:
29:30:3a:ee:93:b9:6e:28:24:c0:dc:a0:97:32:42:
bc:92:d9:e0:ee:e4:56:60:f4:b7:f5:21:a8:cf:9e:
80:6c:e2:3c:64:5c:0b:49:97:0f:e1:28:75:af:f9:
cb:4f:c9:d2:29:56:08:b5:c6:20:e7:d7:bb:c6:2f:
e4:55:db:f1:fa:59:cd:57:69:00:5f:d1:8e:70:19:
a0:7c:05:74:77:ee:0b:95:04:8d:84:38:34:11:36:
0c:13:f0:ff:e3:6c:96:0f:77:90:dd:9b:2d:9f:73:
99:0a:da:ab:28:fb:20:3d:b0:ae:82:6d:03:ca:d9:
cb:5a:7f:95:1d:10:d8:ac:a1:1f:2c:63:f4:fe:45:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:00:6B:8A:A9:4F:72:4E:F0:BD:8C:33:B0:02:3D:B9:AD:97:39
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:a5:b2:ab:e6:e9:b9:5c:4b:3d:40:c7:61:e5:fe:19:a3:
dd:e6:2d:51:da:0e:b6:b3:6b:04:25:5a:8e:08:4a:e8:05:4d:
af:b9:57:ba:67:bc:61:41:0d:0c:fe:02:bb:1e:cb:8d:a6:b3:
72:d5:2f:37:fd:a6:59:bb:b7:6c:95:70:39:d9:8e:b8:e4:15:
41:b4:c3:aa:66:27:4c:f9:dc:7e:b6:f1:c4:12:16:09:2b:3a:
da:46:1b:9b:4f:ce:17:f2:13:d6:f0:0d:f1:43:d6:5a:c5:57:
9f:40:d3:e8:58:47:f8:18:33:5c:20:2a:3f:e0:73:af:9e:b5:
1c:fd:d6:58:11:41:a4:65:ae:66:a8:a2:9c:f5:79:33:28:b6:
2e:b4:3c:77:2f:8c:92:c1:fe:8e:c2:ff:2b:e8:50:5c:97:f8:
25:6e:54:13:8d:4e:6f:86:ab:a6:a8:21:d1:e6:ea:d9:86:79:
83:a1:19:8d:86:fb:00:3d:cd:d3:b9:8d:dc:ee:eb:ee:2d:f4:
31:66:0f:f7:1c:5e:6d:e0:9d:cc:0f:2f:e2:6d:93:4a:86:f2:
62:9e:15:0d:db:04:e8:ad:74:15:aa:29:82:58:8d:51:59:ea:
22:29:90:ed:64:02:91:26:b5:c0:00:72:0f:37:2d:8e:22:51:
14:ec:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:37 2026 by rpki-client