Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: j3uVM65ZcuLZxkOb4MkTXFRXvh7609H37FEqZzJg/5s=
Subject key identifier: 25:D3:6C:3B:4C:04:DA:01:70:A2:8A:FA:68:82:83:54:0B:52:7B:B4
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 019FA906C143CB67E1D0A74AAC57D4CEE4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 14:00:19 +0000
Manifest this update: Tue 28 Jul 2026 14:00:19 +0000
Manifest next update: Wed 29 Jul 2026 14:00:19 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: rhN26yuJAPUEeE96+cAMQhNOHt1Y/wdYm+7nlpaHU5E=)
2: l26a7R_zJZToxzZfQDSNdGwONXo.roa (hash: f6mXkllCRchDTdmRlgeark5dgGsFI7jH1YE/DCr29Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c1:43:cb:67:e1:d0:a7:4a:ac:57:d4:ce:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jul 28 14:00:19 2026 GMT
Not After : Jul 29 14:00:19 2026 GMT
Subject: CN=25d36c3b4c04da0170a28afa688283540b527bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:87:a7:48:e7:85:b2:fc:7c:18:4c:66:00:
d0:82:9f:b8:fd:91:f0:6c:f9:b0:ba:f7:b8:08:47:
5f:ff:40:ee:2d:8e:ec:df:ee:e1:f1:85:f2:06:3f:
47:e1:73:92:fd:44:66:23:d1:2e:eb:d2:90:86:a1:
e8:48:08:10:ba:95:36:05:f9:af:a4:ad:81:24:25:
71:25:02:26:7a:f6:9d:f5:13:9b:13:ef:80:87:d1:
35:17:78:f4:83:58:51:21:29:3b:3f:8a:f5:62:a2:
5f:85:54:2d:2d:ea:43:98:fd:94:de:f8:96:b1:82:
99:41:c8:ce:b5:03:a9:c2:f1:db:6f:72:50:06:bb:
f6:a3:a6:3e:af:63:42:b8:18:17:bc:0d:e1:13:d2:
ac:4a:29:d2:8b:0c:19:1b:32:0f:6a:77:19:97:a4:
d1:e7:72:05:37:bb:81:f7:52:4c:f7:b7:23:d8:8f:
0d:ec:c8:d8:07:d0:e6:e9:33:8d:88:09:06:a8:dc:
eb:55:13:0a:3f:ba:54:b5:bc:25:f8:4c:83:ad:37:
c3:1e:b8:d4:78:70:e5:dd:08:89:2e:d9:16:e1:88:
fe:72:15:d6:8a:24:33:6c:5a:32:a4:37:c0:19:17:
4e:fb:36:42:18:dd:86:a9:ad:3b:04:36:d9:75:ba:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D3:6C:3B:4C:04:DA:01:70:A2:8A:FA:68:82:83:54:0B:52:7B:B4
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:45:46:e1:38:e8:a6:5f:d0:92:ac:55:19:4c:04:f8:18:0d:
93:19:e8:9d:3e:26:d1:31:28:7b:69:2a:81:70:2f:3e:a1:63:
bc:79:89:a2:79:66:7d:b5:24:13:9b:b4:be:1e:23:b0:b7:e5:
a4:76:7d:38:ca:c7:50:10:5b:75:9a:79:48:c1:61:e3:38:dd:
b3:d9:7a:2c:80:61:0c:a7:66:3e:85:23:06:9d:34:85:60:8e:
63:49:53:09:81:7f:51:94:d5:fb:22:79:72:42:fb:46:5e:3e:
98:f2:f7:83:7c:89:5c:1f:6d:e5:25:c4:44:75:c9:a3:2a:c2:
32:0a:77:25:93:dd:54:47:31:ec:41:ca:8a:6f:d2:58:45:bd:
3c:bb:84:9c:87:47:09:f0:0d:70:d3:a1:90:f8:00:a0:e8:56:
56:83:49:6e:be:de:bf:2b:ce:55:b5:fc:b3:75:8d:25:92:99:
d1:c4:41:73:e7:c4:7d:11:82:49:8a:40:cd:cc:ee:c7:5e:66:
6c:9d:06:51:1d:ba:9c:66:03:b1:b9:99:0d:9f:b8:3f:16:ed:
8c:cb:61:d9:15:d9:dc:71:09:da:8f:83:b4:6e:89:1f:e2:0f:
22:c9:5b:69:53:c0:ef:06:e8:c4:23:73:bf:48:47:10:9c:50:
09:6f:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:12 2026 by rpki-client