Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: HxAvW8Qi2LKRAi6cBAVgqg5Snqx9ns6+L0MBn1xZsho=
Subject key identifier: BF:8D:26:65:C6:8F:01:86:A4:B5:D0:AF:17:89:F0:8E:86:24:74:9B
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019FA9E26CEDA881FED5252C18E0680DAC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 1687
Signing time: Tue 28 Jul 2026 18:00:16 +0000
Manifest this update: Tue 28 Jul 2026 18:00:16 +0000
Manifest next update: Wed 29 Jul 2026 18:00:16 +0000
Files and hashes: 1: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (hash: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0=)
2: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: Q6pnXY0/LMrKzt7HHarekXYDbqx0sSCnBL5aFsga/co=)
3: 9bk9FzgprAvBVf1LHM_MSueKaME.roa (hash: 5s6z7jYIqXhvgLEPSXHpNe6iemihHCdMHDOjiBCuX/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:6c:ed:a8:81:fe:d5:25:2c:18:e0:68:0d:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jul 28 18:00:16 2026 GMT
Not After : Jul 29 18:00:16 2026 GMT
Subject: CN=bf8d2665c68f0186a4b5d0af1789f08e8624749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:f3:1c:a8:f0:23:aa:10:83:98:39:0e:85:
c7:ca:d1:cd:81:0e:47:e3:e3:0e:85:8c:61:5f:33:
c6:ea:b2:f1:2e:05:90:2b:d9:af:9b:8a:83:96:71:
41:5f:e1:a5:db:76:34:f2:7f:87:d4:8f:39:1b:41:
68:c4:75:15:10:a4:f5:dd:37:01:e1:db:a2:b8:a8:
c7:c9:5b:cd:52:a3:db:f0:93:a0:f9:a9:8a:40:44:
90:11:ff:f1:b9:9d:25:45:ce:d5:ae:c7:44:c5:84:
02:8c:aa:f6:3d:d0:70:43:30:fa:4f:94:f5:9d:4c:
46:04:d1:dc:24:36:d0:aa:70:8e:57:df:10:d8:19:
92:cd:f7:3b:45:ec:51:dc:ca:41:e9:69:58:b7:3e:
c4:62:b1:ae:9a:6b:ff:ec:4c:c7:77:cf:54:09:0e:
fd:f3:32:04:ca:94:12:bb:30:73:e5:dc:a0:e3:40:
1c:93:37:20:61:d0:58:5a:d0:02:c5:2f:df:97:6a:
f4:a7:a8:35:cc:ea:23:3a:0b:20:11:9f:e7:f5:56:
76:db:d4:ef:f0:cc:74:2f:06:d2:3c:19:cf:b7:a5:
8d:1d:49:34:43:80:68:90:ab:45:f5:c0:a3:91:96:
a6:08:1d:d6:99:73:95:5b:71:39:2f:88:33:9c:7c:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:26:65:C6:8F:01:86:A4:B5:D0:AF:17:89:F0:8E:86:24:74:9B
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:1b:59:10:58:9c:6d:80:5a:b0:02:5a:e9:2e:0a:0e:31:
b3:c9:b0:61:92:cd:9a:a5:c4:eb:a4:21:b5:2a:59:c7:db:95:
83:c0:6a:d7:99:20:22:3f:a0:6a:fa:5f:8a:aa:94:07:99:6f:
67:84:9d:e7:ec:d7:09:68:44:04:96:7b:59:24:2e:ec:cd:1a:
a4:a8:45:f6:18:11:16:d4:39:93:07:70:f5:31:20:e3:31:72:
90:15:41:bd:ca:93:d8:97:81:e0:47:ac:e2:a4:0b:00:a4:a8:
3f:5c:2a:60:b1:38:d3:31:06:50:48:e0:7f:ed:78:ac:0f:23:
ec:d3:20:8a:c6:79:32:9f:cd:8d:0d:6c:a5:45:1b:c4:51:9e:
b8:f8:29:47:c6:b2:ef:a6:5c:06:f5:39:3e:cf:de:91:6a:cc:
53:59:43:27:78:2a:46:64:ae:8e:9f:70:4b:84:d8:4f:04:ff:
7b:96:36:85:b6:ec:53:92:cd:c9:36:d0:18:e4:be:17:9b:4e:
b4:0e:14:b2:fc:14:18:10:06:7b:08:bb:5a:2c:f2:8c:b2:bd:
20:af:85:55:af:a5:bb:55:c5:80:5b:99:93:04:50:89:dc:d2:
21:72:0f:14:28:68:bd:80:04:1b:14:a1:4c:29:a4:49:08:e8:
d1:6c:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:50 2026 by rpki-client