Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: CvoGcSbAQEkDbu5iDzamU396Q5qL5mJD9tMjzcrlEtQ=
Subject key identifier: C9:5B:74:26:A3:F0:DD:30:A2:5A:74:5B:42:04:41:A6:EE:BC:96:0B
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 019F909123954CE12F85337B4118FA672BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: gbSKc+Gkcby1R35VHhq5EuK+L7w0Jx5sakB1uKre+y0=)
2: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (hash: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:23:95:4c:e1:2f:85:33:7b:41:18:fa:67:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=c95b7426a3f0dd30a25a745b420441a6eebc960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:07:c8:96:44:ac:f6:5f:bf:fd:37:81:db:
27:3e:72:e5:eb:15:81:1b:3e:ca:48:c6:80:10:b5:
05:ec:ae:0c:1b:7c:98:86:51:8e:b3:b5:8e:55:77:
3d:5a:18:db:a5:e8:92:3c:c6:a3:be:ed:6d:36:c9:
0a:d7:6f:d0:a3:40:2a:4d:08:52:5e:90:ca:03:e9:
e2:46:fb:89:91:65:3f:58:ed:c4:76:87:a3:b4:9e:
17:27:06:3e:d1:3b:92:41:7d:3d:4a:5d:7b:90:77:
1d:61:50:94:cc:1b:d6:6c:86:e9:cc:4e:b0:6d:8b:
b2:7a:62:77:6a:73:99:a5:4c:52:d3:90:1a:06:9a:
14:54:17:e7:06:a6:06:87:ed:69:c4:aa:08:5c:61:
7a:3d:dd:3a:63:4c:25:12:5b:cb:30:a5:7f:92:e5:
c5:a0:00:2f:90:13:c8:6e:1f:91:00:16:23:f0:fc:
f6:52:14:36:83:49:91:a3:0f:1c:02:15:ff:4a:4d:
86:52:11:bb:be:32:00:57:46:26:06:05:32:87:76:
dc:5f:30:5a:4a:a3:fe:50:36:63:cc:d7:f1:1a:71:
ab:ef:3f:b7:02:a2:c3:19:8e:4f:d3:1c:6b:34:74:
93:5d:e0:cc:9e:05:8a:28:a4:83:fa:66:cc:37:ab:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:74:26:A3:F0:DD:30:A2:5A:74:5B:42:04:41:A6:EE:BC:96:0B
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:0e:c3:bc:bf:d1:07:a2:f9:20:e1:13:00:f4:63:ef:cf:
da:90:1c:c3:68:13:bf:6f:d8:c8:38:35:7c:95:4b:25:3b:3a:
40:a5:be:4d:44:b4:fb:be:7a:15:50:34:09:b5:82:84:22:f5:
af:c5:49:2b:e2:96:0d:f4:f1:1b:ea:17:86:ae:e4:b9:ed:4a:
fc:14:68:4c:1b:d0:42:a9:c0:9e:54:b6:3b:ef:0a:29:fc:f8:
61:e3:d1:fb:a0:e8:d6:9e:ab:97:1b:75:67:af:8d:bc:47:09:
59:db:b7:1f:12:4f:dc:d8:51:05:ce:88:39:da:27:8b:04:71:
1a:d4:b8:72:fc:08:d8:bb:18:1c:2a:83:fb:e8:04:c6:38:a2:
25:fe:80:8c:b3:52:2a:bf:9e:a0:ee:cb:6c:58:ab:c9:37:09:
c7:48:67:bc:6a:81:d6:fd:92:7d:86:a2:62:c6:5b:79:4f:d0:
55:b1:68:8f:34:e0:12:8a:5d:02:88:bb:98:ae:8b:f9:20:6d:
28:1d:d3:1f:ad:13:bc:4c:6c:8a:f7:67:24:5a:3a:be:e0:70:
73:76:45:a7:2e:ff:0d:76:04:85:4f:f0:1a:17:86:77:f4:95:
d2:e4:d7:2f:0b:9b:8f:60:bd:0e:d8:e8:b9:d4:5e:ab:f4:38:
d8:76:b0:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSOVTOEvhTN7QRj6ZyvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0
NjQ1M2EwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD
EyhjOTViNzQyNmEzZjBkZDMwYTI1YTc0NWI0MjA0NDFhNmVlYmM5NjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdUHyJZErPZfv/03gdsnPnLl6xWB
Gz7KSMaAELUF7K4MG3yYhlGOs7WOVXc9WhjbpeiSPMajvu1tNskK12/Qo0AqTQhS
XpDKA+niRvuJkWU/WO3EdoejtJ4XJwY+0TuSQX09Sl17kHcdYVCUzBvWbIbpzE6w
bYuyemJ3anOZpUxS05AaBpoUVBfnBqYGh+1pxKoIXGF6Pd06Y0wlElvLMKV/kuXF
oAAvkBPIbh+RABYj8Pz2UhQ2g0mRow8cAhX/Sk2GUhG7vjIAV0YmBgUyh3bcXzBa
SqP+UDZjzNfxGnGr7z+3AqLDGY5P0xxrNHSTXeDMngWKKKSD+mbMN6vV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlbdCaj8N0wolp0W0IEQabuvJYLMB8GA1UdIwQY
MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt
YmY4NjZkYTc0N2FmLzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm
LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu8Ow7y/
0Qei+SDhEwD0Y+/P2pAcw2gTv2/YyDg1fJVLJTs6QKW+TUS0+756FVA0CbWChCL1
r8VJK+KWDfTxG+oXhq7kue1K/BRoTBvQQqnAnlS2O+8KKfz4YePR+6Do1p6rlxt1
Z6+NvEcJWdu3HxJP3NhRBc6IOdoniwRxGtS4cvwI2LsYHCqD++gExjiiJf6AjLNS
Kr+eoO7LbFiryTcJx0hnvGqB1v2SfYaiYsZbeU/QVbFojzTgEopdAoi7mK6L+SBt
KB3TH60TvExsivdnJFo6vuBwc3ZFpy7/DXYEhU/wGheGd/SV0uTXLwubj2C9Dtjo
udReq/Q42HaweQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:18 2026 by rpki-client