Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
File: S_5nhudBGv_P9M5otbcGmCrbshY.mft (raw, json)
Hash identifier: cKi3hzKfbDke/ZPmhoRK3kR7iRljQLaYYaSN9s9yr1I=
Subject key identifier: E6:FC:DC:2A:3F:44:D7:BE:8A:AE:FF:AC:CF:CB:7C:90:F5:AC:BF:9D
Authority key identifier: 4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
Certificate issuer: /CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Certificate serial: 019F92B5E9463CD4CEC452FBF5A30E04BAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
Manifest number: 5E
Signing time: Fri 24 Jul 2026 06:00:22 +0000
Manifest this update: Fri 24 Jul 2026 06:00:22 +0000
Manifest next update: Sat 25 Jul 2026 06:00:22 +0000
Files and hashes: 1: 172J7Q8mZsr0VC6StV7ph30UAog.roa (hash: JJms2nQRkX9Y3NBzgyt6sK+QPIVuTMzGhhx4yrWYyvo=)
2: S_5nhudBGv_P9M5otbcGmCrbshY.crl (hash: XYxnjZmk7FZgkOk4cF9+csYd2u8NjP7+E7HyCzgohTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e9:46:3c:d4:ce:c4:52:fb:f5:a3:0e:04:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Validity
Not Before: Jul 24 06:00:22 2026 GMT
Not After : Jul 25 06:00:22 2026 GMT
Subject: CN=e6fcdc2a3f44d7be8aaeffaccfcb7c90f5acbf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:e1:2d:d0:d9:c0:61:03:c5:9a:d0:b6:dc:
80:b9:b5:fa:0b:be:c6:ea:73:0f:3d:d7:99:fd:7a:
5c:c5:8f:31:f7:ca:0b:c9:ae:e3:1d:13:f0:d9:20:
c3:7c:83:60:a0:0c:0a:b5:0e:36:96:d1:99:56:cc:
a5:a5:fa:b0:01:26:8a:1c:c2:3b:c5:8e:cb:fd:ac:
1f:52:95:2f:d4:a9:79:78:b1:b8:31:f8:27:a8:c0:
cd:37:8b:af:14:e4:92:83:6c:02:5b:ab:e3:fd:f3:
eb:30:36:ce:c6:e4:5e:a1:17:14:ce:13:49:c0:4a:
66:2c:27:26:f5:51:86:e5:1d:c8:78:e1:be:41:ea:
bf:7e:97:ea:76:8a:7a:8c:f2:08:c0:fe:93:b5:af:
4f:e1:9b:70:ba:9c:b0:79:2a:3a:76:11:9e:ca:c8:
48:64:ff:45:23:0c:bc:3d:6d:85:53:d9:fe:43:a6:
a0:6c:0d:a6:14:80:0b:a0:07:c4:c4:7d:b2:80:79:
cf:5f:83:75:97:9a:30:fb:83:28:9e:c4:09:4e:33:
14:10:be:13:28:b1:8b:16:50:fe:cd:c2:0a:7c:5d:
6f:6b:f0:e2:43:bb:a0:24:84:64:df:0c:18:a9:bd:
7c:bb:a6:16:73:d9:d3:7c:ec:24:4b:39:7a:07:8e:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FC:DC:2A:3F:44:D7:BE:8A:AE:FF:AC:CF:CB:7C:90:F5:AC:BF:9D
X509v3 Authority Key Identifier:
keyid:4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:b0:cb:4d:6b:91:17:67:49:7e:01:30:de:cd:9c:5c:23:
f0:3d:20:97:ee:9f:20:15:8c:94:0c:0c:a3:1c:13:c6:87:8b:
ed:ab:29:d7:1e:45:10:7d:10:c1:3e:51:db:3f:cd:58:d9:ed:
92:82:d9:28:a8:2e:ab:b2:19:77:17:3a:ec:0a:2d:ef:a6:b6:
75:ae:44:89:86:02:6f:ca:43:d4:ff:85:74:7b:10:18:be:79:
49:55:2c:94:22:7a:93:5a:c3:50:06:9c:0d:57:97:40:1b:1d:
ed:97:2d:1b:e2:73:23:6e:5c:af:71:99:d3:69:36:69:6c:d3:
73:12:5e:3a:25:b0:61:ab:b2:87:16:c5:9f:40:b6:66:71:21:
09:cf:9e:2a:5f:57:a3:d7:cc:de:f9:ae:82:9c:8d:6b:45:94:
b0:b5:6b:a1:bb:ec:da:24:ed:c5:50:93:dd:5b:58:cb:eb:dd:
c3:0b:62:dc:a6:10:ba:51:0d:b8:47:6d:17:2b:b4:91:3e:1e:
2a:e5:64:92:44:cb:69:0c:d9:ca:14:75:d2:05:a9:0d:28:74:
df:2f:a6:a4:0e:a2:7e:41:ea:76:d0:48:c2:a9:8c:38:b1:31:
33:0a:77:18:d8:ec:1e:7a:74:ad:c1:d3:37:4e:b1:d9:ef:eb:
4f:66:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:11 2026 by rpki-client