
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier: cxypQwR64Rc7omSUp8NHLfLJXIAd6RkSxEhyfiveQ/8=
Subject key identifier: 8F:AA:9D:7A:CB:AD:E2:C0:27:BE:97:82:03:B2:0B:01:61:D7:33:C6
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 019FA8CFDB8BF99BB5CACD50A94254A4D9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number: 0D82
Signing time: Tue 28 Jul 2026 13:00:22 +0000
Manifest this update: Tue 28 Jul 2026 13:00:22 +0000
Manifest next update: Wed 29 Jul 2026 13:00:22 +0000
Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: qWYrP1LIv4GJ29STBhfvfdjci2Righc19qFMzqvqfAQ=)
2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:db:8b:f9:9b:b5:ca:cd:50:a9:42:54:a4:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Jul 28 13:00:22 2026 GMT
Not After : Jul 29 13:00:22 2026 GMT
Subject: CN=8faa9d7acbade2c027be978203b20b0161d733c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:65:1a:ff:de:04:de:4a:65:b5:62:91:41:
28:d8:29:a3:2b:b6:56:f0:59:7e:7e:8b:16:58:16:
6e:fc:29:29:46:75:6a:9e:ab:6e:e2:5d:86:b9:c3:
89:61:8c:e1:91:a0:0a:c6:66:75:06:16:5d:6d:5b:
dd:a8:82:8a:d4:f0:72:aa:13:78:fa:0c:f8:2f:ac:
eb:35:5b:80:da:b1:2e:99:92:b1:2a:ac:c0:1e:4b:
5a:2b:f1:f0:35:26:0b:08:44:2d:dc:5b:88:f1:47:
9b:2c:f9:f6:07:4c:a9:d1:c8:1b:ae:ae:ff:ec:75:
3a:60:d1:e3:fd:d0:66:84:df:71:aa:d0:31:cf:4f:
b9:99:c8:3d:49:fa:2f:c5:57:3d:84:46:9a:8a:43:
b4:cf:c6:59:73:4c:48:c7:8e:48:a2:60:af:8a:45:
81:81:c4:4b:df:48:2c:88:ee:18:35:a4:53:81:ca:
53:49:81:69:c7:dd:f0:59:f9:22:13:52:55:9e:b7:
b1:8a:45:dd:8e:0e:af:81:55:64:24:d8:e4:3e:53:
7b:c6:47:6c:66:79:e4:0a:2d:89:44:99:1d:2f:50:
a5:80:52:55:e9:c4:72:50:57:ef:8e:e9:ee:d1:17:
5d:67:7a:ca:6c:2d:39:45:21:62:ca:f0:f6:fa:b6:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:9D:7A:CB:AD:E2:C0:27:BE:97:82:03:B2:0B:01:61:D7:33:C6
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:52:ad:c3:69:0d:ac:5c:fd:5d:2d:0f:52:17:f3:70:63:
64:f3:68:74:b4:df:c3:f9:84:33:32:17:5b:79:cc:ad:fa:92:
86:91:90:0c:79:c5:f5:21:9e:18:cc:4a:dc:43:38:8c:6d:ba:
5e:dd:78:b3:d4:e3:52:2b:d8:6b:33:75:14:b7:c1:05:71:b6:
4e:ce:bd:0c:9e:06:8a:64:de:eb:b9:b4:d9:ff:60:db:b9:62:
fd:e7:42:8d:41:1b:f1:a5:82:02:ad:78:8f:86:33:a0:4c:cb:
ee:79:83:0e:1a:8c:75:1f:b2:20:9d:78:2f:94:0a:53:e0:a9:
59:68:19:6f:56:38:a2:10:06:13:51:a3:fb:6e:d9:57:ed:9f:
61:c7:57:d3:8e:b9:cb:da:64:72:8d:ca:f4:0a:68:ea:a1:c7:
5f:79:51:13:84:53:21:b3:d1:73:d7:92:6a:dd:f2:b5:55:bf:
68:a9:f7:e9:6d:63:6d:d6:8b:c7:18:20:5d:bc:68:b2:64:c6:
ed:fe:8d:64:b8:99:98:6e:b9:0d:97:e3:78:69:94:d3:b1:97:
ed:37:c8:6e:1a:71:b5:b4:e9:1d:ff:a9:05:76:c3:c6:fc:28:
35:5d:e9:41:bb:d8:48:b3:34:52:2e:99:14:ee:21:04:fb:25:
34:22:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:14 2026 by rpki-client