Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: MytsoHm/H1UeetMqvJPaTVtN0VcfTfUypEzGtgpvZO4=
Subject key identifier: F8:21:0A:4A:DF:1A:7C:88:E2:1F:64:87:90:5D:8D:8B:99:11:81:04
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019FA9072AAF068A14AFEC705336BFEC38AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 14:00:46 +0000
Manifest this update: Tue 28 Jul 2026 14:00:46 +0000
Manifest next update: Wed 29 Jul 2026 14:00:46 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: sFC2zO/2JV8om1e2clvEbvQU6Oy81dcXXNV6Uca9rF4=)
2: d5q3dL4EASzGPAAwnOfen6UJAcQ.roa (hash: oReaCreAqHsbklAkWbsJ/hVAQpba2f3VOsepsQ+XqOY=)
3: jQS3BAFCaZyv5m7n_ta1OKPwfLc.roa (hash: 8n/5W0nrqR/v9ZeOf9vjjYt0hTJWq/lXvjj2LJI4kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2a:af:06:8a:14:af:ec:70:53:36:bf:ec:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jul 28 14:00:46 2026 GMT
Not After : Jul 29 14:00:46 2026 GMT
Subject: CN=f8210a4adf1a7c88e21f6487905d8d8b99118104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:ab:06:f9:e1:c8:54:48:27:3c:da:f5:b5:
33:6a:bc:ba:a1:37:04:e9:4f:2f:10:54:a5:e0:f5:
3d:1d:dc:ea:b5:0d:8b:af:4f:57:cb:3e:65:1c:99:
7e:6f:8d:3a:1a:eb:54:a0:cb:7c:bb:9e:52:1e:88:
e4:6d:48:db:0c:19:f8:d6:c0:b9:38:1b:4e:e7:56:
ec:0e:ba:a0:53:f3:e1:06:83:74:06:34:2a:83:ae:
0b:aa:49:12:3e:73:6b:6a:ca:07:2d:7f:a9:09:69:
5a:7e:fe:c1:ce:a9:32:6f:27:83:9e:bf:5a:cb:17:
6c:aa:f9:85:c5:84:01:e9:4c:48:d1:8d:10:2a:b6:
5f:33:90:d3:81:0f:1c:1d:b5:c4:29:6b:60:b0:79:
5c:01:0a:92:8f:a5:09:bf:4d:86:78:73:66:49:7c:
b5:d2:91:25:46:67:e2:0d:9a:24:f0:34:23:b8:8a:
00:33:36:e1:f1:e9:e0:fe:81:c5:f3:d2:6c:97:24:
c6:20:a3:5e:3c:35:b5:33:ce:8c:6f:05:f8:2c:59:
31:29:8e:ca:aa:c8:9e:a7:44:6f:cf:d9:8c:4f:9b:
17:80:9c:df:b2:fc:e7:29:03:cd:26:38:82:70:17:
01:ec:9e:da:90:79:8e:ff:62:f5:d1:8f:4d:c9:41:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:0A:4A:DF:1A:7C:88:E2:1F:64:87:90:5D:8D:8B:99:11:81:04
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:01:17:29:eb:b1:df:43:3e:f4:7e:56:4e:36:c8:c1:dc:
a3:c3:f1:c0:82:78:04:3e:d2:e9:9d:e1:55:5c:5a:a7:6b:eb:
50:63:60:22:65:0d:0b:c8:6a:c7:ca:7c:76:e1:75:20:1f:a0:
84:3d:f8:87:6f:19:e9:a2:56:83:5b:0c:6f:a5:05:cd:83:3c:
88:43:f7:73:4e:f2:36:99:71:b8:89:b5:43:c5:85:d9:e0:83:
47:05:af:6f:28:34:90:f3:f7:2d:13:1f:25:53:df:63:a3:b2:
2a:8d:bc:81:e6:ea:8c:00:78:6f:0b:2d:4b:41:e6:76:81:31:
ef:56:b1:08:16:02:82:7d:50:6c:a1:b4:42:a2:66:62:c1:3a:
a8:2f:f2:35:63:50:fb:0b:7e:cd:79:37:fe:ee:9b:f1:ed:11:
c4:48:2e:5a:16:7f:1d:43:89:f4:97:41:04:98:a0:e1:ee:48:
31:5b:b9:c5:3d:14:e6:07:39:7b:35:70:7a:fb:12:ab:66:d1:
20:1d:37:70:cb:d4:3d:6f:99:e2:7a:20:b1:89:04:13:fd:8f:
85:28:24:0c:4d:07:2b:09:66:8f:1a:c1:83:e3:47:db:d5:cf:
da:0f:1c:61:63:07:fd:ea:44:24:52:94:ea:63:43:b8:dc:fa:
9f:fa:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:06 2026 by rpki-client