Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: hD1Lki7+Nh121daJdBZgC2qLqFTnX8bcTl7hWWFqAMw=
Subject key identifier: 89:76:FF:96:29:9C:88:7C:79:6C:05:AE:5B:3F:82:43:AF:49:11:76
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019FAA19801875B51FAFB81D4274CBFF566F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 19:00:25 +0000
Manifest this update: Tue 28 Jul 2026 19:00:25 +0000
Manifest next update: Wed 29 Jul 2026 19:00:25 +0000
Files and hashes: 1: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (hash: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs=)
2: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: 5IKycFO2SvnvIGP1mSH6PpL2mWoSZQfFIO68vD5lKMg=)
3: kHScl5Ibz629FSHvZmCUNM5bVMc.roa (hash: 7czMzsVRqlDw8LwOhs7NR54XvbzvMnmeYfTf1rgt4PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:80:18:75:b5:1f:af:b8:1d:42:74:cb:ff:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jul 28 19:00:25 2026 GMT
Not After : Jul 29 19:00:25 2026 GMT
Subject: CN=8976ff96299c887c796c05ae5b3f8243af491176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:dd:4a:e1:9d:64:8b:99:ad:9f:b0:0e:d7:
92:c5:aa:04:df:a8:b6:ec:c5:00:3e:1a:06:63:d2:
7c:1f:c0:1f:b6:e9:f3:f5:a4:f8:92:6e:0e:25:be:
86:22:b3:8e:54:10:28:8b:80:32:1e:24:09:e6:4c:
d1:88:25:46:2b:a0:e3:60:4b:db:06:ec:5f:3b:6c:
fc:43:dd:1e:bb:a7:8f:2c:39:51:a3:ae:f7:9c:d8:
83:fc:7c:76:fd:22:f8:9a:55:09:fc:38:ab:e6:da:
e0:3e:b1:0f:6d:ee:35:7d:f5:e1:4c:ff:e7:29:89:
7c:c2:31:36:05:45:52:ea:4c:ea:8d:12:9f:a1:4b:
b0:b2:d0:7b:0c:b2:b0:f7:f0:57:72:bf:19:4b:3e:
2e:c2:a5:5b:34:08:58:94:74:10:d3:1b:08:69:2d:
87:b7:d7:ff:87:e2:27:da:74:92:27:f1:d2:bc:f1:
4a:d3:09:f3:f8:7e:36:bd:5c:b9:e2:54:fe:30:04:
be:a5:a3:2e:1e:86:06:99:f3:17:b5:09:a9:f0:0c:
b8:06:29:d3:de:e2:f0:e2:04:cc:6f:7e:9f:30:ce:
79:e4:85:cc:1e:33:ff:44:5c:39:a4:c7:80:be:db:
6f:34:fa:75:c7:71:7e:7b:d7:01:ae:f3:7b:c3:62:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:76:FF:96:29:9C:88:7C:79:6C:05:AE:5B:3F:82:43:AF:49:11:76
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:97:a7:64:fe:e4:7c:f3:d6:82:61:44:69:8b:b3:dc:bb:
33:84:29:51:9e:bf:e1:ab:f6:98:fa:1e:f3:85:a9:24:2b:c2:
e3:5a:97:4c:75:f5:c9:93:33:bf:92:77:68:4e:cd:2e:45:4b:
0f:54:8b:09:1d:38:b3:fd:70:86:82:e7:88:54:14:ad:3d:6e:
67:46:59:77:13:38:02:3d:49:f1:e8:1e:1d:2b:1d:b0:cb:9a:
ed:4e:38:24:c4:ca:0b:e4:09:07:b9:dd:3c:0f:36:0c:60:1f:
f3:6c:8a:1e:0d:a8:3b:32:fe:c2:f7:44:28:dd:7d:12:ff:42:
1e:c1:50:ad:f7:c7:c8:31:f6:fd:ed:da:b5:0c:a2:d1:44:c5:
96:58:b0:71:45:d1:48:5e:bc:96:55:19:45:02:10:91:72:d5:
f9:9c:bb:c1:b5:ca:15:9a:6c:1b:65:52:ef:05:f9:84:58:d3:
cc:a3:fa:1d:3e:0a:3e:28:69:ec:96:23:8e:49:33:78:0f:0c:
f0:aa:31:f4:51:22:a0:9c:ee:a3:62:dd:87:79:ca:0b:a4:fe:
6e:00:77:fd:ec:df:9c:3c:5f:0d:de:7b:bb:34:ee:0b:30:9a:
88:f9:58:b8:b8:a0:3d:1a:78:70:cd:f2:9e:c8:9d:38:8a:aa:
0a:af:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:10 2026 by rpki-client