Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: WePMGZytl1HSJHKWgoypq/cuYy2xcyAsKIURYiLabC0=
Subject key identifier: B2:F0:30:E8:ED:F2:5F:87:69:38:72:01:A8:EB:DC:92:71:30:02:42
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019F90C7AA556F2A4380E2942CFC21B3A7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0E37
Signing time: Thu 23 Jul 2026 21:00:32 +0000
Manifest this update: Thu 23 Jul 2026 21:00:32 +0000
Manifest next update: Fri 24 Jul 2026 21:00:32 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: J3h6H8LrEm0gS3+uuJxV1dQKXPvr0uFddiGPQsZhSGQ=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:aa:55:6f:2a:43:80:e2:94:2c:fc:21:b3:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jul 23 21:00:32 2026 GMT
Not After : Jul 24 21:00:32 2026 GMT
Subject: CN=b2f030e8edf25f8769387201a8ebdc9271300242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:31:14:87:3b:91:69:a6:cb:81:21:83:d4:
4c:ac:1f:e5:1d:dc:b2:34:a5:fc:86:f4:37:8a:a6:
d2:2c:35:47:3b:05:32:49:bf:56:16:08:cc:d6:da:
22:58:8b:98:74:8a:9f:1e:a8:42:ee:e1:b4:08:a1:
34:bf:58:85:88:79:c6:2c:26:c0:ca:ba:ac:7d:be:
49:c6:34:9a:79:a3:cd:45:ec:77:61:67:e8:7b:b1:
84:3f:4b:77:a7:45:b3:c9:13:25:03:cb:ea:26:50:
b1:fd:a3:f8:92:0a:07:54:9d:dc:c1:62:b3:39:42:
c5:10:9f:04:cc:e2:8e:b1:e9:a2:27:de:fc:82:db:
17:94:62:d4:37:7b:99:81:37:39:81:1f:32:cf:01:
90:5d:c8:6f:f5:80:9b:c1:fb:8f:9e:32:ca:e7:af:
e1:00:73:95:ac:62:6c:6f:d7:6f:1f:80:56:23:18:
91:9d:98:c1:93:aa:bc:11:9f:2b:b0:6f:a8:c3:b3:
2b:ad:f7:a5:8d:13:b4:2a:19:77:0f:39:da:3d:c9:
d3:30:3c:41:98:81:83:b1:0a:00:6a:df:3c:e1:74:
63:d0:0c:ba:aa:a9:1c:de:01:f3:b1:71:36:9b:13:
c8:18:59:70:a5:39:0d:a5:db:9b:2f:83:b1:ed:06:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:30:E8:ED:F2:5F:87:69:38:72:01:A8:EB:DC:92:71:30:02:42
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6b:c9:5b:e1:61:78:1f:87:23:39:fd:c9:b0:2b:20:5b:98:
7f:e8:2b:23:37:4d:da:59:41:fa:b3:11:64:2f:bc:07:5c:97:
2e:50:84:bb:2b:ae:e5:28:83:71:9c:4d:50:e1:4b:dd:ee:a9:
f0:a4:28:6e:d7:64:6e:93:2a:7d:cc:9b:01:e0:27:2b:74:dc:
8f:b1:9b:3b:02:e4:fe:eb:9c:cd:a4:3d:2c:62:19:b5:31:90:
6e:07:20:83:76:bd:6a:ba:36:32:99:86:7f:41:3e:80:71:da:
40:d8:c6:65:33:d7:4d:64:56:53:8d:c9:4c:e5:73:ae:de:95:
22:c7:8d:69:a7:ac:f9:5e:96:52:b1:99:4f:4a:bd:a0:28:67:
7a:bf:f1:d9:eb:e8:2a:a2:e0:8a:3c:41:9b:93:ee:3d:03:1a:
74:37:a1:6d:a5:10:fe:79:2a:30:5c:aa:ac:b4:f6:05:64:5b:
c3:19:81:3c:c7:40:46:1f:85:5e:da:78:d5:d4:5a:c6:dc:08:
f1:39:39:f6:7e:9c:40:3f:9b:4f:5c:2d:8b:bf:d2:73:40:7d:
de:fc:31:ed:93:43:e4:75:cf:08:c1:0c:55:39:04:21:1c:0b:
d2:32:b8:65:4d:0b:c4:c5:f6:18:19:d8:91:61:d8:0a:ef:57:
dc:59:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:27 2026 by rpki-client