Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: YUT/+LyjqCzgA/q/krnim/kS4YrQpJQDK86BTJy6aH8=
Subject key identifier: EC:96:F7:FE:B3:93:32:77:C4:3B:A5:97:5C:48:52:66:00:6E:C5:3E
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019FA9ABBFFC867262C270D72DE99500B6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 0BF9
Signing time: Tue 28 Jul 2026 17:00:33 +0000
Manifest this update: Tue 28 Jul 2026 17:00:33 +0000
Manifest next update: Wed 29 Jul 2026 17:00:33 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: L7vmHNXe1RdfSBJM5dNeJqgsbQJT/wuhwHpwVbGYUcU=)
2: 2TC861jK8VELUxYLqwLBwJEBDQA.roa (hash: oKo7gej4ajG4+SLdtnyEgBggOZ1BZWPfVe9QrL/7Aj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:bf:fc:86:72:62:c2:70:d7:2d:e9:95:00:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Jul 28 17:00:33 2026 GMT
Not After : Jul 29 17:00:33 2026 GMT
Subject: CN=ec96f7feb3933277c43ba5975c485266006ec53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:81:bf:6e:7b:2f:01:e8:82:f1:ee:e6:36:
2c:6d:67:ad:29:73:41:74:ea:6c:f9:da:5b:40:75:
e9:10:58:8b:fe:01:5b:15:ba:50:40:94:85:eb:bc:
47:f2:31:42:27:7d:6d:0f:ba:1d:18:0e:2d:40:af:
c6:11:8a:2a:a1:29:16:3a:4b:dd:d8:57:cc:b5:34:
1f:f2:74:5e:a6:67:c8:64:34:bc:13:a2:b9:52:20:
2a:c9:7f:cf:33:ef:77:ea:0d:17:ae:aa:42:b6:b1:
d8:62:96:9b:01:e3:65:42:b9:b0:83:7d:ef:54:2f:
04:ff:55:7f:27:f4:08:11:fc:b8:35:a9:f5:a8:92:
b6:3f:73:83:f7:46:bd:09:a8:7f:4c:ae:c7:7b:dc:
5f:0f:8c:bd:97:0c:bf:bf:57:6c:a3:90:71:69:f9:
17:c0:86:4b:28:7c:e6:48:b4:cc:d3:8f:38:56:09:
24:68:90:73:ee:19:80:68:6f:d5:90:51:18:f0:b3:
35:6c:a8:8e:44:56:37:bd:ca:d3:3c:24:0a:d5:b3:
de:9d:a6:6d:12:74:6b:d9:07:19:23:bb:a2:81:bb:
41:d7:8f:d4:33:8b:b6:f9:4c:f2:08:21:90:b8:77:
6f:8d:15:dc:2a:85:32:18:b4:ee:ac:b7:3a:9e:80:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:96:F7:FE:B3:93:32:77:C4:3B:A5:97:5C:48:52:66:00:6E:C5:3E
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:da:b6:8e:5e:62:d9:55:5b:a7:6e:5a:af:58:75:9e:86:
d6:83:05:c9:7d:2c:f4:b3:c9:1e:de:9e:ef:e3:ec:0f:e4:62:
8a:7d:2b:61:e8:e1:26:8e:bb:48:65:0a:82:2a:3b:b4:17:25:
9e:4f:5d:a0:97:6c:c2:e8:24:08:b6:4c:3a:12:25:31:d2:fe:
43:6c:9c:0b:23:9e:b6:5c:18:89:b5:cd:a1:00:1a:9b:50:d5:
f8:a3:ec:fe:54:70:77:a9:52:31:b2:b7:d3:f6:44:8a:29:ce:
c8:b9:53:b3:15:73:b2:0a:e1:5b:99:de:91:92:c6:27:d5:dc:
fb:a6:4e:63:3b:e8:6a:87:51:91:c3:17:d4:92:5c:e2:57:a6:
65:8a:18:29:43:c6:52:be:a5:8e:69:79:be:5a:23:9a:d0:3b:
d5:1a:f6:3b:10:c2:54:41:ec:d3:26:a8:53:3f:91:af:85:f4:
9a:a9:25:78:90:7f:9c:cd:09:54:8a:df:ec:60:2f:76:7f:b4:
8c:c3:83:c8:8f:b5:cd:34:90:58:14:c9:e0:f8:f4:d4:ed:f4:
0e:5a:0a:50:37:db:9f:d2:49:cd:9a:6c:cc:f2:62:d1:67:0f:
fd:38:ee:d4:bc:d1:81:fb:5c:4e:42:be:58:c0:e3:2a:d6:5c:
bd:51:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:33 2026 by rpki-client