Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier: uXWWQ+hbuHaCO5fp6OpPk/nWJuNlzDYrKYb9cHRxgX0=
Subject key identifier: 2A:71:B7:7E:1F:AE:EF:D0:73:2A:F3:30:8C:AF:2B:31:25:3C:30:90
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 019FAA51117C195CC89B79C0E297A8FDD6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number: 0DC3
Signing time: Tue 28 Jul 2026 20:01:07 +0000
Manifest this update: Tue 28 Jul 2026 20:01:07 +0000
Manifest next update: Wed 29 Jul 2026 20:01:07 +0000
Files and hashes: 1: 4GxbIuH661wSAuRQff8xB62kOr8.roa (hash: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI=)
2: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: kImvNGMSNjMpu1Dy2JPPN458ZyJ+j6cWEWoAKd93XXQ=)
3: LB1iluIm_5YolIXGM1SSD3ekV9E.roa (hash: cqW0TcvZRqAF5iPp1DQLv1tr7B8xMD8GEmBQO/JGsBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:11:7c:19:5c:c8:9b:79:c0:e2:97:a8:fd:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Jul 28 20:01:07 2026 GMT
Not After : Jul 29 20:01:07 2026 GMT
Subject: CN=2a71b77e1faeefd0732af3308caf2b31253c3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:2b:c2:2d:db:22:23:73:33:bd:78:df:bc:
20:9e:02:ef:71:d4:b2:ae:7d:d7:2f:b3:81:b6:3d:
24:2a:4a:8f:64:44:30:63:b1:8e:39:4e:df:0c:58:
98:d5:57:08:e1:cb:7b:2e:74:d6:0a:ad:c6:2b:58:
67:77:99:f3:08:99:35:f8:7f:9f:73:4e:18:d3:7d:
f0:23:ea:06:8a:82:d4:5a:a0:db:75:c0:03:31:42:
e7:f9:9b:04:a9:2d:95:93:f1:ff:cf:07:30:2d:25:
39:19:92:57:50:29:88:71:2b:ff:13:fc:3c:06:88:
be:21:21:83:df:ed:d7:bc:9c:8f:e9:97:08:99:16:
dd:e6:02:f0:0a:19:44:aa:b9:af:69:b5:61:c5:af:
0b:8b:32:c1:0b:75:3b:0e:c9:60:a4:ee:58:dd:c1:
67:38:5a:f7:1e:35:8d:46:99:80:cd:4a:37:2e:5f:
08:67:18:f5:b1:21:87:7a:7a:90:9e:96:d9:30:8a:
55:84:ad:65:cc:24:f5:e0:65:89:a3:5b:91:91:1e:
1d:07:3b:66:db:4c:f8:12:07:25:36:de:24:8c:09:
0f:4a:5e:69:a2:62:0a:b8:72:1e:22:5c:dd:c9:00:
11:2e:3c:9e:6a:be:c9:bc:0e:dc:41:79:6e:be:41:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:B7:7E:1F:AE:EF:D0:73:2A:F3:30:8C:AF:2B:31:25:3C:30:90
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0e:77:4f:f8:aa:11:50:10:fb:50:65:8c:d8:f8:38:f8:8c:
ea:22:25:2a:ac:8e:a8:b9:59:df:56:99:48:fa:cc:54:af:1b:
02:58:37:ab:5e:72:e8:a7:f6:94:f6:65:7c:9a:0f:47:b7:ab:
c0:bd:a6:c5:99:e1:95:d5:43:38:15:90:75:a7:26:f2:00:ec:
bf:7d:66:f7:97:fe:82:99:63:bf:26:a8:9e:12:98:b9:b8:5c:
2d:b9:89:14:b4:7c:c2:71:1a:b8:a3:4b:bb:ca:7f:b3:2d:b2:
b4:8e:ec:03:3b:e5:a8:88:87:1c:1d:33:cb:48:00:c3:90:71:
11:28:ed:12:7a:53:dc:28:f6:34:8b:31:d5:46:1a:81:16:e0:
4c:37:82:eb:50:c5:65:27:a3:32:43:9a:68:9b:06:56:38:3b:
34:8a:77:23:b2:45:95:c0:85:95:4c:a8:fb:4d:a6:b0:05:e8:
a4:c4:e5:ea:c5:8e:3d:bc:23:43:f8:a9:3b:76:90:49:db:61:
26:f4:10:d3:16:9d:3f:3f:f7:17:5d:08:62:0e:ee:55:4f:e0:
eb:e6:24:31:0d:d9:80:ed:00:86:aa:20:69:98:1c:7e:22:21:
57:0d:cf:f1:03:ac:aa:21:e3:8f:17:34:96:44:cc:4c:59:34:
a3:32:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:53 2026 by rpki-client