Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: JNXnWkK9PnddRqKQFIESvvwe2zM23tUjpMKlo7tnfh4=
Subject key identifier: 93:0F:8A:85:40:B1:31:22:A4:C3:D3:1F:D4:8F:F5:58:6B:40:5C:91
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019F91DA6F0DAD09B342E685CAEF95C8A29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 15C0
Signing time: Fri 24 Jul 2026 02:00:39 +0000
Manifest this update: Fri 24 Jul 2026 02:00:39 +0000
Manifest next update: Sat 25 Jul 2026 02:00:39 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: CZ6m+ou5XWEUSzvLlJ2Z+eZSrrcUMGbc62X+Hw1mxXI=)
2: Jt8YXQnSYki_aZ_F4dCfaaJKKow.roa (hash: lv1y9n6SxRqEqaqKtDtqJfGE7WxXtWgMt7j43NvbuS8=)
3: l8hfM0tA1hlOp9-gmuJ6WOfIhu0.roa (hash: IAmuOAJMto9pgwbf2c7PBZN6/VWyoBQiETP/DoJwG+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6f:0d:ad:09:b3:42:e6:85:ca:ef:95:c8:a2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jul 24 02:00:39 2026 GMT
Not After : Jul 25 02:00:39 2026 GMT
Subject: CN=930f8a8540b13122a4c3d31fd48ff5586b405c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:a9:a3:b9:f8:68:9f:60:80:3c:18:31:80:
88:12:1b:ab:7e:9f:4b:cf:61:57:60:97:2d:82:eb:
62:17:1f:f3:74:dc:df:5b:ff:b7:db:65:73:c5:3d:
8d:af:d4:26:15:4d:c8:fc:46:30:4f:7e:cc:97:b8:
7a:f8:c0:0b:b9:9d:73:10:7d:eb:40:55:fb:62:24:
36:11:4f:33:23:6d:d6:b2:f4:e2:78:0d:2e:ee:70:
b2:08:48:d1:6c:89:87:bf:eb:dd:11:1c:c9:82:62:
b4:79:b5:80:b1:24:66:64:23:eb:92:9e:30:26:7c:
95:9e:76:e2:bc:eb:4d:b2:01:9f:ce:7b:0d:5c:1c:
fb:37:27:ff:86:fa:ec:d9:ad:10:17:9e:6d:ff:de:
c4:d7:51:08:0c:fa:6a:c7:e2:b3:99:f5:e3:79:4a:
8b:a7:ea:d6:23:10:81:82:3d:27:f1:c3:25:6b:50:
ef:a3:6e:f4:18:e4:b6:7b:9c:f3:4c:5c:08:5d:5a:
7d:07:c9:02:7d:7f:22:6d:d7:7e:af:21:fc:8e:7a:
ab:7d:35:3c:1a:84:e3:32:ed:c1:5d:0f:4d:0d:fc:
97:03:50:1d:76:ad:4d:ba:43:19:57:02:44:67:73:
34:d0:86:1c:a2:44:ad:f6:d3:c6:3a:60:e8:7a:14:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:8A:85:40:B1:31:22:A4:C3:D3:1F:D4:8F:F5:58:6B:40:5C:91
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5a:4e:c2:a5:19:dd:14:b1:e0:f3:87:91:19:f3:73:34:f4:
78:9f:38:24:45:8b:80:50:41:2c:05:88:75:db:56:28:6a:1d:
36:0e:e2:1f:2d:c8:4d:c0:e8:b3:2e:23:bd:75:7b:f3:a5:d1:
e5:5c:16:e5:4d:2c:c8:07:9c:84:00:77:19:23:18:18:3b:f2:
96:9a:c7:97:8d:d9:fe:00:25:ad:05:b7:88:11:26:d9:a6:46:
29:97:30:0c:18:ba:d1:0c:c8:61:6b:a8:54:aa:d2:c5:78:37:
a4:aa:68:a5:4f:9c:d9:90:ce:46:1c:8b:42:d4:6f:40:2a:54:
c4:90:fb:47:c8:88:ae:5c:fe:b1:2d:64:de:a4:f8:aa:21:c5:
26:31:f1:b0:da:2e:3d:56:4c:b1:8a:80:9c:99:fd:d4:d0:86:
59:c1:26:6b:d3:f3:f7:b8:33:cb:8d:ca:ad:e9:b8:d3:db:d1:
bb:da:54:45:6d:88:90:6c:1d:20:b7:52:b9:eb:a0:09:eb:10:
77:b8:78:c8:dd:d9:96:eb:fa:17:e1:e4:3c:eb:db:33:ae:01:
53:ab:31:51:65:a0:8c:65:7f:d8:a2:a2:c4:60:22:c8:7a:2c:
02:65:68:a7:fd:8b:04:ff:a0:e3:43:32:ee:8f:ae:3f:a5:79:
f4:0a:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:20 2026 by rpki-client