Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: iyYhoDe1uyxqFCXrqcmovU+9C3XSQ5Nr1L2zm4ODeWc=
Subject key identifier: AC:02:7E:5E:AA:73:64:15:0D:49:E7:BB:A1:9C:D5:65:84:C1:8F:DF
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019FA974AF81DF773BBFEED411A9E016D5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 09E6
Signing time: Tue 28 Jul 2026 16:00:24 +0000
Manifest this update: Tue 28 Jul 2026 16:00:24 +0000
Manifest next update: Wed 29 Jul 2026 16:00:24 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: jhGZXe4w7RW7Rn3doc2IzT8NS26Z2kHTq7uZ0mBnRZ4=)
2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:af:81:df:77:3b:bf:ee:d4:11:a9:e0:16:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Jul 28 16:00:24 2026 GMT
Not After : Jul 29 16:00:24 2026 GMT
Subject: CN=ac027e5eaa7364150d49e7bba19cd56584c18fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:bb:b9:0a:6b:ea:e8:86:e3:87:94:13:71:
24:3c:c1:12:13:a0:b1:6e:7f:57:a1:36:51:04:4b:
86:69:11:f6:75:1e:ec:f2:db:bc:4c:f8:e1:53:4c:
f0:20:cf:40:d8:01:60:d3:c6:7b:b5:0b:3c:69:af:
c9:05:9b:35:33:64:4e:d3:bc:f7:5c:90:12:0d:62:
c6:54:e0:bf:24:4d:a6:19:15:f2:8c:60:f5:db:c7:
4a:21:59:3f:64:99:87:0d:46:20:44:8a:97:fd:fb:
3b:85:7f:41:70:54:f3:26:e7:1b:d8:51:a9:7d:d5:
cf:d3:6a:c3:e7:87:b8:13:fd:8c:6e:ba:b1:38:71:
86:a6:05:e3:ba:6b:33:84:7d:b8:ce:65:a6:ee:5f:
f2:a6:c8:86:2b:3c:58:1e:a8:f1:ba:9c:40:8e:ea:
dd:ed:bf:0a:00:f1:ec:f7:ed:37:3d:57:4d:8e:6f:
e2:5e:fe:8f:95:d0:69:23:c9:6f:3d:c6:95:12:33:
83:ab:d4:ec:e1:ed:26:79:9b:c1:73:bb:cf:df:3d:
e7:f2:c7:8f:42:77:fd:5e:e6:be:c4:ee:26:94:f3:
e1:40:04:54:9c:48:60:e7:88:d0:7a:bc:53:cf:6c:
aa:67:25:c7:b6:0b:30:5b:6c:52:69:26:47:fa:f7:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:7E:5E:AA:73:64:15:0D:49:E7:BB:A1:9C:D5:65:84:C1:8F:DF
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:d0:69:c0:96:7a:82:6c:14:99:a7:05:17:32:15:15:b2:
3d:12:a1:5d:17:22:3d:75:77:28:33:fd:48:92:f2:f1:7f:d0:
92:14:70:7b:31:db:76:68:a2:d4:29:e7:c0:0e:c6:86:d7:f5:
39:54:67:9a:19:4a:67:63:32:8f:8a:f1:46:b4:f5:d4:9c:d9:
ae:bd:96:0f:49:c0:45:7a:f0:69:61:40:7b:6c:5f:33:09:e4:
cf:1c:95:6d:7c:2b:6c:8e:94:2f:74:4d:85:74:4e:7f:34:2c:
29:fb:3b:a0:eb:13:1d:f6:dd:60:51:4f:e6:ac:5d:6d:de:c1:
17:f3:ef:30:f9:0d:35:d5:8a:23:23:e9:36:61:37:ef:11:d1:
e4:34:c3:97:cd:c7:12:76:a1:82:17:37:41:12:dd:bb:dc:99:
71:5c:91:00:5a:41:77:fa:4d:c8:27:ec:a9:2f:0e:18:74:63:
8b:00:ef:4b:eb:02:be:80:7b:8b:3c:d7:37:e9:68:a7:4e:08:
70:47:9f:53:04:07:ac:20:7b:d1:27:e5:a1:7f:e7:4e:2e:17:
f7:3e:b7:97:ce:12:6c:6e:72:8e:af:89:e4:0c:2b:76:e6:46:
bf:7b:7c:7e:73:ce:04:79:fa:17:9f:73:8b:49:0d:30:1a:ea:
ae:a9:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:10 2026 by rpki-client