Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File: 5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier: GHs0gPkc+fwbAGymr+HAAy9AE0ihj98jIbbwapXFoSw=
Subject key identifier: A8:05:1F:AF:94:CE:47:61:4E:5B:DB:C2:B2:DB:F8:71:B2:DA:9A:3C
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer: /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial: 019FAA87715EEE1D67BEF0D5B91BF0E3BADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number: 01EC
Signing time: Tue 28 Jul 2026 21:00:30 +0000
Manifest this update: Tue 28 Jul 2026 21:00:30 +0000
Manifest next update: Wed 29 Jul 2026 21:00:30 +0000
Files and hashes: 1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: KBRJm4JA8Xr+cpFf7zxkf43e+l1vEfgBoJX5qw+G0TY=)
2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:71:5e:ee:1d:67:be:f0:d5:b9:1b:f0:e3:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
Validity
Not Before: Jul 28 21:00:30 2026 GMT
Not After : Jul 29 21:00:30 2026 GMT
Subject: CN=a8051faf94ce47614e5bdbc2b2dbf871b2da9a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:52:c8:21:f9:fa:ac:76:5e:f0:c3:97:0a:
de:5e:06:d9:bb:5a:e6:a6:77:53:6d:45:55:ff:28:
89:91:41:e8:fc:0c:2d:1b:ef:e4:7e:54:fa:a8:84:
67:53:5c:5c:77:13:19:75:a9:ee:c9:dc:95:50:4e:
c4:a3:3f:5b:6b:94:45:28:e9:53:00:c7:f2:6b:5e:
ec:8b:ba:d8:68:4d:d4:06:35:d2:fa:0a:4e:56:78:
21:0b:ec:5f:ed:23:3b:23:08:34:c5:6d:45:f6:9f:
11:d3:6a:9e:ae:75:1d:04:4d:94:91:a8:61:a2:cf:
47:94:e3:a5:e8:2a:70:07:ec:c2:ce:ba:ec:d9:de:
94:33:a8:c4:75:c5:00:33:db:2f:6b:0d:c5:d5:80:
51:6d:4b:0a:12:d9:54:23:c5:d7:71:cf:fe:83:7f:
ea:65:ec:da:60:42:d7:8d:9b:4e:3b:f5:fd:6d:f8:
a9:2d:e8:aa:a0:59:f1:b1:9d:4e:42:24:6d:2b:3a:
a5:dd:7f:a3:58:62:50:2d:a1:f3:62:f6:68:b1:7b:
3d:98:3c:d8:e1:aa:66:48:50:4a:11:f1:80:5c:b1:
c7:19:dc:68:90:54:13:b6:dc:ba:19:13:a1:5d:72:
1c:ab:9c:d1:f2:aa:3d:d7:ea:12:78:2e:20:48:8d:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:1F:AF:94:CE:47:61:4E:5B:DB:C2:B2:DB:F8:71:B2:DA:9A:3C
X509v3 Authority Key Identifier:
keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:06:bd:c8:4f:38:03:16:92:ae:9c:80:d8:5a:5f:4f:a6:07:
de:70:65:6c:27:9f:36:b0:c7:21:61:4e:f4:c3:6b:6b:87:b9:
4e:59:78:b8:ed:c5:76:a8:cd:52:b9:c7:41:2f:e0:b4:2c:6b:
47:e0:b9:2f:92:74:43:12:2c:2a:52:af:5c:98:98:64:d5:68:
76:a3:17:1e:68:e3:38:f8:cb:f5:e8:3c:1c:36:1f:8c:2c:a1:
62:01:e6:cb:98:08:a1:7b:cc:c5:cd:1b:31:2f:a1:fb:d4:bb:
90:a4:16:e9:d7:32:32:37:e2:0f:23:42:b3:c1:07:c6:80:4a:
81:e7:83:05:e8:86:c3:77:c6:5e:61:02:e9:d7:c1:a2:af:a6:
93:1e:f0:45:89:ff:18:ec:92:20:0a:eb:6f:05:7c:3b:cd:fe:
9f:e6:38:86:6a:7d:c5:9f:af:08:3c:79:ae:62:df:a3:c7:47:
ca:ff:f6:1d:04:55:f6:99:00:f5:b0:93:ea:d4:8b:a5:1e:5b:
94:f8:86:4c:80:e5:43:05:a9:16:31:ee:ea:83:91:1d:95:81:
57:a5:ec:fb:23:f0:6c:42:26:69:c5:94:2a:0a:27:5d:c2:9b:
24:45:91:ab:08:75:5f:46:40:0c:0b:bf:f8:f6:cd:d2:50:8a:
75:ee:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:14 2026 by rpki-client