Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
File: s5LSHrz27URUxP9GgyS97dSbqhM.mft (raw, json)
Hash identifier: IQcKVufPybhQqYEQf0jKF9mEqeHNVfNrbUexbVkwN2s=
Subject key identifier: 13:6A:EF:C0:FB:1F:C8:1F:EA:DA:B7:E6:AA:11:EB:06:B9:33:31:0B
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Certificate issuer: /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial: 019FA8D0288CFB87C6D4A28CB9B16DA13FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
Manifest number: 01F5
Signing time: Tue 28 Jul 2026 13:00:41 +0000
Manifest this update: Tue 28 Jul 2026 13:00:41 +0000
Manifest next update: Wed 29 Jul 2026 13:00:41 +0000
Files and hashes: 1: 0mX3Kr0b0UFBMsJtVZn5yf2lhTM.asa (hash: t3G1NkXWHK4wGViktIA9e/IpeSePFuwm4DhV5QXwwUE=)
2: s5LSHrz27URUxP9GgyS97dSbqhM.crl (hash: dcDWk1y5la1sfATohe61qNhWPNqc3aDEfOcrW5qa7ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:28:8c:fb:87:c6:d4:a2:8c:b9:b1:6d:a1:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Validity
Not Before: Jul 28 13:00:41 2026 GMT
Not After : Jul 29 13:00:41 2026 GMT
Subject: CN=136aefc0fb1fc81feadab7e6aa11eb06b933310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:f3:c7:90:a5:28:62:7f:89:a0:94:c5:84:
a3:ce:6e:24:80:8e:9c:e8:a5:6f:5f:eb:29:0f:93:
07:c7:f1:94:62:e2:74:7a:8a:0d:a6:6f:ab:39:ba:
6b:90:10:0d:aa:80:f8:0a:8a:49:1d:d1:8a:27:03:
3a:78:db:b5:70:0c:66:d1:4c:15:7f:4f:2b:c2:76:
36:a9:6d:c9:c0:b0:fd:c1:9d:18:93:ab:bf:5d:bf:
a8:79:31:34:bb:ce:4f:1f:da:eb:6e:01:9b:bc:1d:
78:46:6f:d0:55:94:e3:1c:4c:04:38:ae:a3:9a:8c:
eb:d8:b9:b1:17:ec:54:30:51:59:72:dd:ab:13:65:
6b:dc:71:f7:4e:9b:82:95:8c:e9:7d:dd:74:50:d2:
ae:77:a0:82:f4:08:ff:b2:b0:94:00:28:ba:80:39:
6c:e2:9c:d2:3a:9a:53:ef:0a:a8:f7:b2:78:02:af:
88:b0:97:31:b5:b7:73:f4:7e:99:ed:71:98:91:90:
20:6e:2b:b6:c0:6f:0c:6b:9e:14:3e:87:74:32:cd:
cf:98:40:75:6a:68:03:86:b4:15:ec:8f:11:5b:2b:
87:25:d9:98:71:d2:ea:dc:ae:4f:31:a8:c0:96:7a:
d1:a5:e7:41:cf:1c:4c:79:5a:07:25:fd:13:a1:2d:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:EF:C0:FB:1F:C8:1F:EA:DA:B7:E6:AA:11:EB:06:B9:33:31:0B
X509v3 Authority Key Identifier:
keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:03:66:02:b2:ed:bb:35:3e:db:a0:04:c3:a5:99:3d:60:d2:
65:fc:f3:0a:ea:d5:63:bd:67:3e:85:f5:eb:39:58:ec:bf:98:
d2:20:74:7a:d0:b0:9b:f0:0e:c2:9c:6a:17:c8:53:43:53:4f:
23:a9:87:76:23:38:d6:32:a7:a1:91:88:12:ff:0f:e7:cb:96:
98:90:88:b6:7b:a8:cc:50:5a:5c:b8:7b:e4:14:10:51:61:3d:
72:d9:ae:2c:ca:a5:32:e4:0d:6c:30:1f:95:17:b5:33:ef:59:
7b:4e:fa:29:ec:29:38:53:07:20:e0:13:d2:14:a3:4b:1f:2e:
0e:a1:43:44:2e:2b:06:34:2e:35:af:ea:4f:b8:61:56:ed:fc:
b1:ae:b5:57:f5:cb:4c:04:4b:c5:ee:43:46:07:4b:35:ce:bd:
4c:96:3a:1d:7e:d4:d8:49:dc:89:3d:8c:ad:bd:2c:a7:40:66:
3c:a0:6a:7c:33:01:6e:39:f6:50:0d:54:17:0a:f1:a4:0b:26:
da:c7:b4:79:48:17:39:b1:08:a4:6f:dd:ca:79:e5:ac:25:a7:
7f:a2:5b:c2:e6:2a:06:08:cf:a2:32:c9:ea:35:52:43:63:07:
fd:ef:fa:98:f1:08:7a:e7:79:db:7d:d8:55:7c:91:6e:69:96:
6e:ea:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:46 2026 by rpki-client