Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
File: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft (raw, json)
Hash identifier: VqIgvQQdGqbzX3xMTyJjlOdIfGDHntEJlvdPA0YWsTU=
Subject key identifier: 8A:B7:59:11:86:2C:43:7B:0E:0E:F7:10:92:33:69:AB:38:88:0E:D9
Authority key identifier: E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
Certificate issuer: /CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Certificate serial: 019F8F7F3DD454D7A975AC4171291FBB6E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:48 +0000
Manifest this update: Thu 23 Jul 2026 15:01:48 +0000
Manifest next update: Fri 24 Jul 2026 15:01:48 +0000
Files and hashes: 1: 5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl (hash: Ar31Ht3tqMkI7tD5BBBtth1lLHsTOYaWWnzoK6aS6ak=)
2: dJl8r4I9cKQfDAC67Fzamr6A4Ns.roa (hash: G49JKof/PjJ/pDTjMFk4RiR1s/uu+QqKOQDfL/6PwFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:3d:d4:54:d7:a9:75:ac:41:71:29:1f:bb:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e672c2ae4b7fec68c5b110973aa066a5047dd0d7
Validity
Not Before: Jul 23 15:01:48 2026 GMT
Not After : Jul 24 15:01:48 2026 GMT
Subject: CN=8ab75911862c437b0e0ef710923369ab38880ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:6b:cc:40:1e:60:e0:24:97:eb:e0:06:43:
9e:df:26:cc:93:fa:93:bd:6f:af:37:8e:ae:13:24:
f7:86:bc:95:86:a0:39:9f:42:17:c0:f9:57:67:31:
ae:5d:90:27:ed:03:3c:03:a9:92:7f:3c:04:0f:ff:
e0:1c:9d:b9:1d:de:35:07:2d:41:18:02:bd:fc:24:
9e:89:8c:d4:02:62:d8:c6:a4:9c:d5:1d:31:31:74:
e3:55:6d:f2:0f:fe:4e:76:45:9d:6f:2c:4b:68:7b:
a4:8b:15:b7:b4:56:94:4f:72:51:93:ee:e9:02:7e:
96:8f:f6:69:75:71:07:70:a8:c4:8d:8f:fe:24:df:
f0:fd:86:4d:9c:75:2d:55:b7:e9:33:42:de:43:ca:
9e:3b:1d:12:db:4a:de:37:37:a9:5b:72:8d:1b:e6:
80:bd:3f:cd:26:64:b5:bf:c5:ff:24:54:75:26:d6:
e5:a8:83:7f:98:69:4c:f7:4d:ba:41:69:47:f6:68:
3c:37:dd:9c:23:52:54:49:52:45:bc:14:c2:0c:ad:
c5:cf:9a:94:b5:94:ff:cd:ec:bb:5c:22:29:9c:ca:
47:a3:bc:f0:46:9b:6b:83:e4:06:65:18:51:e8:28:
62:38:bb:a4:22:1b:3c:ac:b7:16:af:31:e2:bf:db:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:59:11:86:2C:43:7B:0E:0E:F7:10:92:33:69:AB:38:88:0E:D9
X509v3 Authority Key Identifier:
keyid:E6:72:C2:AE:4B:7F:EC:68:C5:B1:10:97:3A:A0:66:A5:04:7D:D0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nLCrkt_7GjFsRCXOqBmpQR90Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/5nLCrkt_7GjFsRCXOqBmpQR90Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:16:54:82:93:9a:6a:a4:6e:dd:3a:8a:c1:02:2f:e3:f8:
40:d6:97:be:7d:65:15:4f:e5:93:a4:68:b4:39:94:6d:48:bc:
9d:ec:0d:3f:31:93:b1:2a:6b:11:1d:32:77:6b:7d:f8:69:ee:
a4:ff:50:7b:e6:9a:8f:da:0b:69:d7:f8:c9:51:8e:8d:ef:94:
92:70:aa:dd:78:0c:18:18:80:2e:00:28:36:f5:b8:08:95:ce:
53:bc:65:9b:ec:0a:05:93:37:4e:b1:24:19:1a:f6:44:51:23:
1c:b5:f7:5a:87:c6:55:4c:75:f4:27:83:d0:c2:f0:06:2d:74:
b9:c4:dd:f8:71:93:47:aa:da:c4:79:59:c8:57:b8:1c:91:a0:
30:86:ea:7e:2e:98:d1:55:d6:2c:b6:a4:a0:32:a9:3f:9f:f7:
31:38:9f:49:9c:1f:ce:26:4f:03:eb:03:9b:26:85:1b:59:f6:
e1:b1:59:b7:ca:67:63:fa:55:2e:6b:3b:b4:c7:e8:e4:c7:ed:
78:57:d6:e0:a2:4c:17:e5:72:a0:c4:b1:cf:c8:72:ce:c0:27:
f0:f3:3b:5e:b5:b3:84:fc:78:3c:5b:da:f0:90:38:0c:37:eb:
3d:60:c7:08:48:c5:06:b6:bb:c8:a0:3d:3d:55:75:36:c2:55:
74:ee:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:18 2026 by rpki-client