Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: +MnGV+yCBCz1pIy6m2LqgD3LP/tgwdOm57E6FtickgA=
Subject key identifier: 20:D2:5A:3C:43:E1:B5:F4:85:9B:22:36:AB:C1:97:73:F4:84:92:C8
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019FA9755F0384334F61BFC38E299A3A0A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 19DD
Signing time: Tue 28 Jul 2026 16:01:09 +0000
Manifest this update: Tue 28 Jul 2026 16:01:09 +0000
Manifest next update: Wed 29 Jul 2026 16:01:09 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: 7zy9EsZRK5fwOoCaNb8MWxxN74IYfF7idDzxs3iK4AE=)
2: Vp9zMJZ7cHH8T-q0YimFmb3cs6c.roa (hash: buD9UiHiGplAujptNaXrQomuCm+Wtm0wjSMGQqSvFks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:5f:03:84:33:4f:61:bf:c3:8e:29:9a:3a:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Jul 28 16:01:09 2026 GMT
Not After : Jul 29 16:01:09 2026 GMT
Subject: CN=20d25a3c43e1b5f4859b2236abc19773f48492c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:b4:f1:61:70:8b:f6:f4:6d:65:56:68:c6:
6f:c7:2f:7f:c7:52:41:b2:83:16:c5:82:37:49:b2:
cb:dc:2d:d2:07:6f:31:18:53:bb:8c:55:49:09:56:
f9:1c:0a:79:80:72:e3:18:af:4d:c8:de:22:75:bb:
d7:2e:66:2d:0e:bb:c1:54:97:93:dc:96:60:94:41:
af:bd:6d:30:9c:ef:5d:96:7d:39:21:c1:a4:ad:3f:
ff:51:1a:10:f6:33:5c:66:9f:7b:02:7c:5e:8e:80:
cb:48:ca:d9:d3:95:9e:09:3d:dc:fb:60:7c:f2:6f:
65:37:f9:d9:d1:99:63:13:41:9e:f5:58:e8:a3:38:
e0:74:5b:70:74:3c:8c:1b:da:76:76:f1:b3:30:2f:
7c:44:2a:fc:5b:c5:d9:ce:7d:1b:f2:48:59:af:48:
11:f4:e7:77:cc:44:c4:3b:4f:34:3d:0d:15:2d:9d:
05:97:2f:1d:67:12:c6:14:46:99:0e:ee:40:69:df:
7c:c9:68:ee:24:18:ad:2e:41:5f:2b:a1:76:db:e0:
03:dc:62:32:14:b6:87:bf:1d:d9:a4:e6:c5:a9:a6:
23:78:e9:3d:87:04:b5:1a:76:4d:b3:cb:d4:ac:94:
3e:b2:24:04:41:35:48:b4:9a:e1:80:55:34:1a:66:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:5A:3C:43:E1:B5:F4:85:9B:22:36:AB:C1:97:73:F4:84:92:C8
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:84:92:6c:b3:1b:79:d0:77:eb:8a:56:d0:fa:46:7a:ec:
3f:ab:ea:bd:cb:e9:67:d4:47:3a:8f:a2:2c:3b:bc:6f:6a:bf:
23:14:ea:e6:57:ed:20:04:e6:a9:00:13:dc:af:26:34:2b:97:
ba:2a:37:08:55:b6:ca:f5:f4:a9:82:2c:b4:3a:cd:21:52:e2:
23:b8:84:6d:95:35:e9:c6:36:b3:89:4a:ee:e8:38:0f:f0:b3:
6a:b1:19:7a:95:f3:1f:0e:c5:b5:b9:82:d1:e3:fb:80:c4:17:
2b:4c:ad:66:3d:3e:21:67:8f:7d:49:3c:95:20:aa:5c:ea:67:
00:a7:b3:b5:70:98:6a:f0:75:c8:ee:37:35:fb:20:47:e5:88:
5b:08:e3:54:bb:54:90:ef:99:d5:7a:73:3a:91:2e:3b:9d:3a:
96:d6:d5:42:a4:6a:3e:58:25:e3:d8:db:76:96:66:33:55:fd:
2a:d8:9f:4b:a7:26:6f:ff:4a:5a:55:8d:15:09:8a:8e:e6:a8:
3d:6c:48:f1:f8:15:78:bc:ea:80:0b:fe:8e:cf:17:9a:11:75:
63:d8:0b:e6:79:b4:10:d7:0e:cb:28:27:4b:56:0f:51:0a:5f:
9f:14:85:7f:2e:e6:9a:ad:51:9e:f7:ef:98:b0:5c:6a:35:ff:
bb:00:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:24 2026 by rpki-client