Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
File: 5akg5_Td28JaYDiLxP0ejmRqbdI.mft (raw, json)
Hash identifier: EeXKVr8o1LAzWBs44Yu4/MfPRTP/nCgTF7YlTUT7mjM=
Subject key identifier: 39:48:5C:7E:3D:79:5F:23:62:32:0A:F1:BB:A4:A9:EA:5B:0F:46:6D
Authority key identifier: E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
Certificate issuer: /CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Certificate serial: 019F9091104D8338DB4DE4EF9FD9F59A70E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:53 +0000
Manifest this update: Thu 23 Jul 2026 20:00:53 +0000
Manifest next update: Fri 24 Jul 2026 20:00:53 +0000
Files and hashes: 1: 5akg5_Td28JaYDiLxP0ejmRqbdI.crl (hash: nG7GdFYN9KiwaLm3cvF6hgrgOYIxoS3bPf3mQM8USeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:10:4d:83:38:db:4d:e4:ef:9f:d9:f5:9a:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a920e7f4dddbc25a60388bc4fd1e8e646a6dd2
Validity
Not Before: Jul 23 20:00:53 2026 GMT
Not After : Jul 24 20:00:53 2026 GMT
Subject: CN=39485c7e3d795f2362320af1bba4a9ea5b0f466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:2a:08:75:6c:fa:1a:4d:7f:29:ed:d4:ce:
10:3f:68:a3:33:89:d8:c4:11:80:0a:e5:6b:14:f1:
c8:60:4f:5f:42:27:49:bf:d2:21:36:93:41:a2:42:
47:5b:a6:06:38:71:e0:b7:cc:38:b0:f7:dc:97:6b:
1c:02:d6:94:57:42:bb:b8:ce:58:f8:d5:be:0f:d3:
69:b9:fa:68:52:4c:41:fc:20:b0:05:c5:b1:7b:96:
6a:87:ad:29:e4:77:32:8d:de:7b:38:03:90:53:42:
78:14:3c:c9:06:2e:78:67:e0:95:c1:90:db:61:f6:
ff:e2:45:ac:b9:95:f7:e6:a7:0b:0e:d5:64:53:1c:
c7:13:eb:38:6c:66:18:80:46:b0:24:9a:84:ce:64:
66:f5:86:57:ac:61:a4:7b:a5:d5:32:70:ef:04:72:
b4:31:35:d6:2f:6d:89:5d:a3:15:f2:07:38:d2:b2:
8c:f6:23:10:5a:8a:ac:a9:83:23:6e:06:1f:43:fb:
26:cf:df:72:e2:78:07:22:fc:e5:70:19:ea:1e:5a:
20:57:d4:17:bd:a7:57:78:f4:89:0d:26:6f:4f:1c:
11:42:cf:78:91:3e:e9:c2:6a:f6:55:ba:1d:99:c2:
c0:97:3a:da:73:e6:98:d8:9f:bd:d7:fa:a4:ad:e5:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:5C:7E:3D:79:5F:23:62:32:0A:F1:BB:A4:A9:EA:5B:0F:46:6D
X509v3 Authority Key Identifier:
keyid:E5:A9:20:E7:F4:DD:DB:C2:5A:60:38:8B:C4:FD:1E:8E:64:6A:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5akg5_Td28JaYDiLxP0ejmRqbdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/5akg5_Td28JaYDiLxP0ejmRqbdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a9:b4:6e:81:8d:f6:63:53:9e:52:74:91:a8:aa:a1:33:42:
44:1e:0c:99:c1:c0:b0:b7:7a:d0:25:ef:1a:bf:a1:68:7f:0b:
51:4b:f4:41:ad:d2:ab:e0:1e:fc:42:77:80:d8:c5:9c:5a:6b:
c9:68:d0:cc:2d:e9:e3:86:96:3c:5a:7f:87:ea:24:5f:06:80:
b7:f8:a0:4d:4f:5d:b0:78:c5:55:1f:02:fe:6c:1e:47:61:f4:
d6:25:14:a9:e0:18:7a:09:40:58:a1:11:8e:06:9d:ba:2c:71:
38:77:27:88:33:19:8b:d0:e5:43:da:e1:f7:af:08:e6:2f:5d:
6c:23:40:47:01:b0:11:77:6b:fa:1a:11:7a:77:8d:68:54:99:
09:73:60:a9:63:dd:f2:7b:0f:f1:47:9f:7a:d9:ec:9c:6c:fc:
28:6c:cd:0b:08:6b:4c:fe:31:80:86:da:b6:50:f9:2b:d8:7c:
21:7f:09:cb:dc:4b:90:a6:3f:3d:11:de:40:38:15:48:ef:3f:
29:d6:aa:2a:2a:fb:59:a1:f7:91:c3:46:74:d3:5b:6b:60:d6:
6d:84:8c:2e:30:e2:e5:51:d0:b1:b1:54:dc:ab:fa:39:99:4b:
ff:74:b2:28:be:ba:f9:62:a0:ca:7a:2e:00:99:ae:19:72:33:
2a:82:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:35 2026 by rpki-client