Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier: Vpl9bM+CQZ2tssHisrQxibwGHtXCbeRjtibjLhNgz48=
Subject key identifier: 85:DE:25:C0:94:EE:5D:C9:05:5A:A2:B7:EE:6E:A1:46:B5:25:20:C6
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial: 019FAA50E54648F5F76F01FDF80F0DC2235F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number: 0C8D
Signing time: Tue 28 Jul 2026 20:00:56 +0000
Manifest this update: Tue 28 Jul 2026 20:00:56 +0000
Manifest next update: Wed 29 Jul 2026 20:00:56 +0000
Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: DbG+Z0h3UBrPG3JaRH5Ihq6qth0Kp9R+pPzf2ahlujs=)
2: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (hash: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:e5:46:48:f5:f7:6f:01:fd:f8:0f:0d:c2:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Validity
Not Before: Jul 28 20:00:56 2026 GMT
Not After : Jul 29 20:00:56 2026 GMT
Subject: CN=85de25c094ee5dc9055aa2b7ee6ea146b52520c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b9:8b:65:4c:31:5d:52:5e:ff:d5:ca:17:a4:
12:ea:9b:5f:a7:cd:dd:9b:49:cd:5e:fa:91:a8:bc:
57:f5:c6:34:1b:a5:18:a4:32:02:2b:0e:89:72:e0:
4b:37:14:bd:3f:6d:a2:c2:c1:89:b4:3b:dd:d2:2f:
d1:54:9a:e4:a0:6a:4c:c4:14:3c:4d:c4:fa:4b:66:
40:6e:5f:b5:4c:14:93:00:7d:bc:b9:3e:c7:c2:1a:
92:8f:04:9f:6f:59:3b:9b:5b:69:35:7f:3d:5c:89:
d7:85:19:36:0a:07:7c:66:24:99:8d:7f:19:bf:11:
ac:f1:bd:35:3b:7b:41:87:70:f2:75:85:8b:d8:6a:
4f:2e:f8:df:5a:c2:70:73:c5:7c:0b:e8:95:92:7a:
25:29:fa:2c:80:13:e5:3a:20:bd:46:b5:7a:c7:45:
5f:07:f9:25:b4:4e:b4:ce:77:27:e7:36:ac:0f:43:
9d:c5:aa:c3:17:56:4e:f6:f2:32:12:14:c8:88:9e:
44:23:db:36:1a:fc:39:56:c0:de:65:32:22:59:73:
40:51:fd:f5:67:58:e8:2c:7c:d6:4c:ba:7d:2d:f8:
72:a8:c5:ad:9d:12:28:bc:24:57:0f:ad:9b:fe:cd:
c3:fb:3a:0a:e3:c3:1c:dd:5b:c7:7c:0f:33:ff:d8:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:25:C0:94:EE:5D:C9:05:5A:A2:B7:EE:6E:A1:46:B5:25:20:C6
X509v3 Authority Key Identifier:
keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:76:bd:9c:2a:02:75:b5:e0:f0:4d:b4:3d:e9:5d:ac:41:
8d:b3:71:e6:de:2f:4d:cf:9f:d9:9d:5d:d6:a5:df:a2:b3:0a:
c3:8c:30:ea:9e:00:3f:48:50:e9:d3:63:37:fe:7b:21:a4:97:
8b:dd:26:55:e8:f0:95:99:c6:64:c3:66:3d:5c:db:a8:43:51:
90:40:00:02:06:5f:c1:16:5a:02:ac:39:3c:b0:a0:ea:98:55:
96:83:72:67:63:29:36:73:64:38:f9:42:a7:aa:86:60:99:59:
4d:9b:9a:9d:2d:66:f0:40:28:cf:a4:0d:64:0f:8d:ff:8c:9b:
ea:c6:56:8b:d2:a1:5a:f9:ff:46:30:93:51:89:16:36:5c:f4:
0d:06:7f:c6:e0:42:22:fa:66:bc:ed:72:dc:4e:d7:87:97:39:
15:37:28:b7:86:74:46:06:b9:46:8e:34:f5:6c:15:0a:9b:67:
44:42:4c:f8:ad:81:66:f6:be:0d:f0:c0:9b:37:5c:84:84:66:
ab:e6:d8:04:af:a9:f5:da:4f:83:ee:02:dc:b8:ad:98:c1:e5:
01:01:13:41:f0:28:e4:f1:39:38:25:69:ae:38:ad:c6:fb:f3:
4d:e2:db:c2:04:0e:26:a3:01:df:db:5b:c0:38:21:09:b3:25:
7d:b1:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:29:50 2026 by rpki-client