Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: 4/t8uEHw03J4q6gWHxyxOnDDCkYbaDV9+dff5wxpV+g=
Subject key identifier: DC:22:E9:A1:4C:0E:25:5B:7E:4E:D3:D9:95:76:D4:2A:64:FA:11:84
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019FA89A2347414ED50B1A3CAE7D62C92004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:41 +0000
Manifest this update: Tue 28 Jul 2026 12:01:41 +0000
Manifest next update: Wed 29 Jul 2026 12:01:41 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: yEGv6bCwPKywFbjEp3pzShTEAF3UfZ2Tx8P4hSC5BqM=)
2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:23:47:41:4e:d5:0b:1a:3c:ae:7d:62:c9:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jul 28 12:01:41 2026 GMT
Not After : Jul 29 12:01:41 2026 GMT
Subject: CN=dc22e9a14c0e255b7e4ed3d99576d42a64fa1184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:90:dd:a6:0a:b3:e9:ad:af:3e:6d:0d:b1:
50:79:6b:0e:06:0f:d6:01:0c:a7:82:dc:91:72:ec:
d7:f5:99:e3:4a:44:7a:62:23:c6:43:b2:70:1b:0d:
81:02:3b:19:24:57:3c:09:7b:0f:af:27:5a:b6:99:
b5:a2:d7:f6:4e:6e:53:ed:8a:2f:d7:42:71:3b:ed:
d1:e5:70:39:b9:4d:ea:d7:13:7f:09:8f:2c:15:fc:
9d:b4:8a:24:71:82:31:41:ce:22:15:51:b7:04:07:
e4:39:0b:7c:37:1b:cf:19:e9:ff:0f:6d:c3:30:1f:
e7:71:32:b8:a3:37:dc:c5:8d:a9:ce:5b:46:e5:1c:
6c:1c:65:39:13:c1:c2:1b:0a:f2:8b:dc:e5:f2:77:
ad:de:5d:95:ee:ee:90:aa:55:98:0f:b6:ee:9d:b9:
d3:87:ca:70:87:64:de:cb:e2:41:a0:5b:5d:ba:1a:
e1:5d:c1:e0:31:31:9a:a6:1f:c8:6f:8c:48:02:9a:
02:0f:9e:87:5a:99:10:bc:b9:10:c3:eb:2f:0d:cf:
a2:d0:9f:63:b4:80:6e:f5:5c:e6:d9:cf:7d:1d:64:
d7:dd:5f:16:56:72:1d:ff:0b:2a:c5:aa:f7:73:43:
cd:9b:11:67:08:99:7d:5b:a7:d0:bd:ff:83:ca:cb:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:E9:A1:4C:0E:25:5B:7E:4E:D3:D9:95:76:D4:2A:64:FA:11:84
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f9:75:ff:ac:ed:92:bb:e9:ed:76:6b:9c:21:b8:13:de:b2:
04:28:c9:4a:34:6c:4c:fd:60:24:8e:a3:0a:c6:85:5c:73:8c:
68:7e:4d:23:e3:6c:4e:dc:0f:53:5a:4e:9e:95:00:c9:97:d8:
c1:e4:ee:d0:40:77:5d:5f:12:2c:d7:a4:9d:a5:e6:83:fc:8a:
fa:02:f7:0b:84:6b:22:8c:3a:39:0b:87:9b:7b:9d:aa:99:ba:
83:21:6e:a5:61:31:38:7f:3f:07:15:b4:dd:a8:9a:9a:a2:22:
65:b8:c7:3e:a7:b1:14:5d:10:e2:f3:d6:a5:06:e6:98:72:30:
ac:2f:eb:ec:bc:9d:b9:3f:41:8b:0b:82:45:8e:4f:52:37:0d:
b0:76:8c:68:8c:6d:34:dd:1e:92:d9:8f:32:e6:9b:10:6b:86:
b2:c6:9b:9e:d6:33:45:05:0d:73:0a:ae:ae:42:ec:dd:20:6e:
59:81:b7:28:80:64:7b:d7:db:3c:09:b2:53:77:b5:d5:2d:36:
71:a7:30:0d:96:82:ec:db:04:68:86:9c:c2:c1:83:9b:04:08:
d1:3d:43:dc:7f:c9:17:a4:99:4a:d1:b4:b9:66:19:ea:52:14:
83:8e:5b:1a:bd:82:62:b9:4a:92:0b:0b:97:4a:b9:da:51:27:
d1:2b:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:24 2026 by rpki-client