Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: 5ThnL9NIZ1/b0NmyrA0RpB9s0pE1kDUdK85g79ScHm0=
Subject key identifier: 89:BC:62:5D:BF:F9:E2:3F:0A:4F:23:EA:82:23:AE:19:01:65:06:9C
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 019FAA876A463DC631F024DB587B0ABA1D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:00:28 +0000
Manifest this update: Tue 28 Jul 2026 21:00:28 +0000
Manifest next update: Wed 29 Jul 2026 21:00:28 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: lLrZLzYa/PfCStnJIFVR/JQzDDSo4en/iB80WkiS/v0=)
2: Y53-K6eCcM2LGOvi8Fn2PE_O8Hs.roa (hash: epaNlilaUn33+8n2mw835ikIL/eJJhBznXtCVWydLWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:6a:46:3d:c6:31:f0:24:db:58:7b:0a:ba:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jul 28 21:00:28 2026 GMT
Not After : Jul 29 21:00:28 2026 GMT
Subject: CN=89bc625dbff9e23f0a4f23ea8223ae190165069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:1f:f7:3b:99:6a:5b:2a:a5:14:19:cd:58:
1d:a7:ce:2d:a7:dd:69:77:d8:30:45:2a:f9:a7:06:
89:05:32:1b:11:c8:0d:2f:0d:33:63:70:14:8b:49:
78:4c:b3:1e:67:de:18:3f:e8:80:6f:6a:43:15:d1:
a0:63:20:e2:ec:80:dd:d0:58:71:3e:33:b2:eb:8e:
00:9a:0b:25:d1:d2:f5:a7:c2:04:ea:a5:5a:47:b8:
ee:39:3f:54:05:9f:41:c5:86:ef:80:b6:74:8e:f8:
8d:f5:0a:c9:ab:0c:ec:ec:6d:e9:2e:03:d2:1f:6d:
ef:22:de:31:24:dd:ac:a5:e3:12:30:21:e9:28:e9:
6d:27:ce:76:15:53:b6:50:3e:07:31:cc:99:22:1b:
67:c2:48:73:2c:32:88:ef:48:f1:03:d2:36:bb:9c:
82:cc:7e:ed:fa:72:8c:3c:6f:c0:1b:ec:6f:8e:a8:
6d:22:06:87:6b:53:fa:af:d2:00:1f:b6:82:d0:7a:
b9:04:d2:d7:8b:e9:54:26:ea:71:91:d5:e0:65:6e:
f2:34:74:d9:bf:19:33:18:2b:c0:df:b0:48:11:48:
ce:86:4d:5b:f0:d0:15:d8:3a:75:b9:93:2c:66:58:
9e:e0:f6:1e:42:e3:7a:04:0c:2b:64:5f:d7:5d:55:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:62:5D:BF:F9:E2:3F:0A:4F:23:EA:82:23:AE:19:01:65:06:9C
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:15:73:13:16:ee:69:f3:0b:da:9a:dd:ef:07:3c:6c:f4:
7d:51:ba:a4:be:a6:77:5e:90:01:93:59:1b:2b:1c:77:bb:13:
30:77:cc:29:e4:23:60:2b:63:bb:fd:15:66:ef:ad:8d:3b:1f:
3d:b8:74:5e:a7:6f:60:0e:1c:e5:61:18:eb:d0:16:17:49:f0:
71:a6:4d:dd:42:0f:c8:73:da:41:cc:07:b4:5b:43:09:1b:88:
63:71:8b:a0:bf:83:90:fe:2a:04:ab:e3:b2:85:dd:2b:1d:c9:
f7:45:c2:57:69:cd:e5:9a:91:2d:ab:bc:db:7b:e3:98:c3:4c:
11:9c:85:75:c8:dd:44:2f:fa:a2:14:33:76:48:4b:e4:af:e6:
f7:69:30:87:d8:9c:0b:af:e0:5b:bc:ac:81:70:98:06:56:e2:
25:6e:40:bb:bf:95:5d:df:8d:6f:8a:72:a8:4d:c1:f2:35:25:
44:12:11:58:6c:95:1d:e6:4c:a5:71:1b:9a:92:b6:26:d6:f1:
9a:b0:58:8f:07:3d:9b:50:42:ae:6c:b8:be:d3:a8:cf:2d:90:
e7:14:a0:56:a2:41:d2:a3:c8:bc:f5:51:9f:dd:75:7a:55:4b:
24:d3:61:f5:7c:6e:22:87:70:2f:15:22:52:1b:12:c6:e5:a5:
ee:c5:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:09 2026 by rpki-client