Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: OwvcjurWscWro47fMZnwvue4kRUyRiBABFMZ2dKc0DI=
Subject key identifier: 35:56:1F:D2:AE:F6:30:E8:FD:A1:BB:1D:54:D8:CE:4C:2A:A1:C2:D7
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 019FA9E2DCF1603D9538F5391BDA392AC28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:44 +0000
Manifest this update: Tue 28 Jul 2026 18:00:44 +0000
Manifest next update: Wed 29 Jul 2026 18:00:44 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: MXpkMzQCXBob5Kblm0F2QL5f4yfLmS8bpZhZED9+iJA=)
2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:dc:f1:60:3d:95:38:f5:39:1b:da:39:2a:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Jul 28 18:00:44 2026 GMT
Not After : Jul 29 18:00:44 2026 GMT
Subject: CN=35561fd2aef630e8fda1bb1d54d8ce4c2aa1c2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:be:6c:81:92:cc:23:51:70:60:f7:36:d5:
00:09:57:af:48:8d:c2:38:c1:de:ce:5f:d7:14:d8:
92:7f:3d:1b:d2:7a:93:c2:ec:c2:46:fd:68:ce:91:
52:10:21:82:7f:09:6e:9a:16:d6:b7:88:2e:05:d6:
6f:aa:3f:fb:57:9a:1a:dd:73:2f:ce:ab:91:d8:a8:
18:2f:1a:ff:a6:71:f8:e6:fa:85:56:6b:2f:20:51:
57:52:d6:fd:5b:e2:8a:11:ca:c2:1a:ea:7a:28:cf:
96:17:1d:6b:ed:cc:3d:d5:cb:97:4f:36:c2:4b:3a:
9b:a5:ba:11:47:1c:20:d9:c1:b2:82:bf:3d:00:24:
03:cc:1d:22:3a:f5:52:8f:72:78:d4:27:1b:4f:b4:
8d:c5:bb:d1:b7:b5:79:e2:96:66:1b:28:d6:8f:bb:
71:bb:71:36:c6:2f:cb:44:21:db:7b:05:98:88:4d:
91:89:ed:c8:5f:cd:65:a5:62:e6:7a:1e:4d:da:db:
99:c2:72:69:cd:b4:a0:20:a7:13:42:27:ef:79:26:
b1:ce:45:14:94:9f:e5:e3:4f:20:39:3c:e9:73:25:
0e:08:d7:56:55:3a:94:f7:14:8d:59:bf:ef:eb:d2:
25:93:b1:f4:7e:32:d0:8c:dc:73:c2:c3:b0:ad:66:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:56:1F:D2:AE:F6:30:E8:FD:A1:BB:1D:54:D8:CE:4C:2A:A1:C2:D7
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:34:04:8d:10:11:4c:be:b4:83:3b:e2:c2:b9:87:4c:a9:50:
1d:bb:53:f4:30:c4:c1:a9:a5:98:33:48:fd:c8:0b:e5:73:69:
68:cf:10:ce:13:04:4b:e0:ad:2c:07:10:bf:fb:da:7f:c1:6a:
4a:0d:4d:b8:95:bb:70:9d:c1:02:5c:fc:13:5b:7c:3b:32:2f:
f8:38:3d:a5:57:4a:d9:64:07:03:7f:3a:5d:b7:44:3e:ca:ef:
ae:61:62:d4:1d:a7:f9:42:8c:e3:5a:9f:b5:6a:fb:a7:1d:94:
33:d6:61:a0:32:72:6f:7e:17:15:b2:81:56:97:ff:84:71:c4:
4b:99:18:51:e6:06:0d:33:86:16:ee:98:5a:f0:7b:68:6a:8c:
82:34:1b:f4:6c:00:9e:bc:71:2e:e3:48:05:80:ce:77:04:8b:
7c:f8:c1:16:87:89:57:2f:30:ce:68:6e:d4:b1:d4:62:34:6e:
c5:d6:db:43:c3:98:b3:70:de:c3:14:5e:69:57:c4:51:7b:7d:
e3:38:8a:a4:ed:62:ba:c1:d8:6b:73:b4:06:fb:ed:e8:b2:e6:
32:09:e2:2f:e5:b4:8d:2e:03:71:7a:12:11:b3:5d:03:7e:9e:
0f:dc:86:94:9a:ab:5e:be:e1:2e:15:fb:e3:35:80:b3:de:af:
b9:7d:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:49 2026 by rpki-client