Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
File: 5Icdjywm6nGuXBPIRUp70xhxkYQ.mft (raw, json)
Hash identifier: BQZ8jYi1uFSfwUWEViC4oaUrfoG/AZSKNFZFyjlI290=
Subject key identifier: 31:C6:43:5A:67:70:B0:30:E1:CC:4B:C9:E1:E1:4E:5B:C2:9A:A2:56
Authority key identifier: E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
Certificate issuer: /CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Certificate serial: 019F924881F732F3CFDAED8312ADA8DFF170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
Manifest number: 1147
Signing time: Fri 24 Jul 2026 04:00:53 +0000
Manifest this update: Fri 24 Jul 2026 04:00:53 +0000
Manifest next update: Sat 25 Jul 2026 04:00:53 +0000
Files and hashes: 1: 5Icdjywm6nGuXBPIRUp70xhxkYQ.crl (hash: q6jcWbLrcPuo4z+svkpnmAYfVuY+dJ6krS7XKDuY4AU=)
2: YLE2vfufVk24cZ6EDNv6jxuRqZw.roa (hash: 2hYWPZD7mmq1gTXaTHqa1lUO8cR3/QhledO7Dbv5su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:81:f7:32:f3:cf:da:ed:83:12:ad:a8:df:f1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4871d8f2c26ea71ae5c13c8454a7bd318719184
Validity
Not Before: Jul 24 04:00:53 2026 GMT
Not After : Jul 25 04:00:53 2026 GMT
Subject: CN=31c6435a6770b030e1cc4bc9e1e14e5bc29aa256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:98:61:0e:12:c9:5e:d3:64:a9:52:9f:97:
2b:6c:a7:10:0f:be:2f:34:dc:d4:5c:79:0b:be:72:
32:c4:39:b3:bf:be:06:9b:87:7f:d7:67:2e:20:f1:
24:7c:8d:c5:02:73:1f:4a:b8:81:e5:82:da:76:af:
bc:32:7f:1a:28:ef:47:bf:d4:55:ca:b0:de:27:8c:
0a:2c:f4:66:ef:23:10:ab:ba:c5:fd:65:8a:b3:d1:
a2:ef:79:0f:31:ae:9a:b6:83:81:24:a0:4b:03:c5:
12:de:15:65:e8:69:f5:e3:ca:11:c1:06:53:9d:4d:
fe:5a:63:d3:b9:b5:51:d2:37:5c:00:5b:c0:f5:8f:
e5:66:01:a4:58:87:ce:b7:bd:1b:f8:b7:ec:2c:7e:
a6:4e:a4:0d:86:98:ba:45:5f:6e:66:56:9d:3a:ac:
0e:b3:b4:87:3b:2a:43:0c:14:c3:ed:1d:8b:6d:99:
fd:34:d5:c7:a2:fb:57:3c:b6:72:9d:4a:ce:c7:c0:
45:e0:45:df:08:30:9f:f1:31:69:92:d1:92:44:76:
f8:21:2e:e1:7e:ca:4f:c8:03:ff:68:2f:6b:70:a5:
6e:0f:ab:3c:b4:60:6f:35:05:7f:0e:30:d2:4e:25:
3a:21:80:33:e8:8b:f4:4a:a8:ff:e0:9e:40:60:20:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:43:5A:67:70:B0:30:E1:CC:4B:C9:E1:E1:4E:5B:C2:9A:A2:56
X509v3 Authority Key Identifier:
keyid:E4:87:1D:8F:2C:26:EA:71:AE:5C:13:C8:45:4A:7B:D3:18:71:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Icdjywm6nGuXBPIRUp70xhxkYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/34fe2e-26d6-455d-8778-f905a83bd389/1/5Icdjywm6nGuXBPIRUp70xhxkYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:81:a1:3c:e1:3d:4a:68:b7:72:41:dc:44:1d:75:38:a5:
72:12:41:32:ba:16:ae:0a:1d:e7:db:39:20:86:a8:6e:fe:69:
0a:ee:d8:c5:57:47:fa:c6:46:57:76:73:b9:ce:0c:7b:4d:63:
98:52:0e:21:c9:c1:d4:09:31:a8:2a:7a:8c:96:2b:cd:75:63:
4c:2b:b8:4a:57:92:52:18:95:7d:3b:22:b6:60:eb:4a:fe:82:
94:7f:38:b5:a1:77:d8:90:a9:e7:2d:ee:5a:cb:e3:70:d1:b6:
2c:ad:a0:4f:53:5a:5b:f7:38:dd:6c:e5:85:40:aa:23:f1:9f:
23:b2:ed:33:8f:f9:43:99:20:cc:c6:62:14:5b:fe:45:cf:cd:
89:c3:96:92:6a:bb:d1:10:67:21:4e:e6:c4:7b:cb:e0:65:93:
5e:42:cc:e3:02:78:6b:c7:68:45:e2:5c:73:31:46:55:b6:a2:
32:b0:ee:e8:98:27:47:7b:d0:7b:e7:e7:fa:0b:2a:2d:9f:b7:
71:35:a1:20:56:fc:72:36:be:19:ef:72:6e:f0:f2:91:89:75:
9d:bd:17:6e:ea:97:9c:2b:08:db:0c:c4:59:52:cd:ee:fd:c3:
92:ef:a1:24:1b:22:62:b5:f7:a4:34:5a:a4:67:71:55:21:c7:
2e:31:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:17 2026 by rpki-client