Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: V+dFWcpkJ/PwSwFiFgl4NYr/uNEeKooXTJ/Mui6SH68=
Subject key identifier: 42:22:86:F5:64:38:19:DD:0E:25:51:B1:7B:C8:22:C9:04:2D:8C:16
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 019F8FEC497BECDBFFD9191FDA65504FEB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 047A
Signing time: Thu 23 Jul 2026 17:00:54 +0000
Manifest this update: Thu 23 Jul 2026 17:00:54 +0000
Manifest next update: Fri 24 Jul 2026 17:00:54 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: IeEVWGITAueStZUBGqDD9hGYDQqElWYy2BhZSa76zo8=)
2: 72Y0w9pV82pI3wLwx96KwjAs5oU.roa (hash: c5hQXuvcKRBmbu9AlA38sraM6CQffUtGwob8NZ7WzZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:49:7b:ec:db:ff:d9:19:1f:da:65:50:4f:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Jul 23 17:00:54 2026 GMT
Not After : Jul 24 17:00:54 2026 GMT
Subject: CN=422286f5643819dd0e2551b17bc822c9042d8c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:f1:6e:a6:1d:b8:04:35:42:eb:ee:88:f1:
c4:69:b5:4a:1f:15:6b:b0:93:18:c5:a4:03:d4:6d:
01:04:1b:c0:f2:8c:47:f6:b7:d2:8c:9d:c1:ea:6c:
5b:bb:71:fd:82:3b:50:b4:40:20:e6:6c:83:b3:82:
45:ef:83:d9:85:02:c5:38:d1:61:54:fb:f9:03:0f:
de:6a:6d:95:13:7e:20:ea:c4:98:09:59:b2:09:e1:
65:e4:af:bb:1a:12:fe:00:ae:76:3d:07:07:11:e6:
ff:e1:4f:e7:e2:e8:1f:92:0f:60:b2:00:bf:49:d8:
8b:f7:76:1e:a3:2a:1c:d2:d9:34:e8:1f:f3:99:a8:
4d:22:7c:71:57:07:eb:46:3d:14:78:f0:27:25:5c:
9d:ed:d9:e0:64:d8:e4:ce:b7:4b:02:a0:fe:70:8b:
cc:76:12:9b:aa:be:12:30:da:6b:4b:ca:5b:51:3a:
b2:ea:1b:4c:e3:9a:0b:cf:72:ff:bd:85:51:92:62:
08:df:73:9b:42:19:06:c9:59:2a:ec:65:12:60:da:
b0:53:cf:4e:60:05:ef:66:b3:69:2d:9e:d0:8e:ae:
5a:59:cd:2a:c5:72:ef:7a:0c:59:89:2f:a1:33:48:
71:86:65:98:c6:f7:98:5a:53:06:2a:cd:e5:df:96:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:86:F5:64:38:19:DD:0E:25:51:B1:7B:C8:22:C9:04:2D:8C:16
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c4:5d:f8:fc:86:ff:f9:03:76:92:01:d9:91:ca:c0:92:da:
5d:59:b4:fa:2c:26:5c:25:58:28:56:d3:87:b4:fc:4f:83:8d:
97:54:46:ac:32:75:eb:c6:6b:b6:7f:a2:39:62:03:4a:f5:4f:
7d:a4:cd:42:03:2a:a2:96:61:5c:53:cd:8a:5f:54:a6:27:e6:
41:42:d5:1f:fa:66:bc:b7:3f:1e:5c:9a:02:54:9f:32:5b:6b:
d5:23:a1:5e:85:ee:18:a8:b9:fb:90:40:d2:18:8c:b9:d4:1f:
75:4c:90:99:44:59:ea:53:74:59:ed:89:01:cc:47:b6:92:c6:
86:42:e4:d1:0a:4b:81:ae:6a:72:64:eb:50:06:0c:ca:bf:15:
48:48:29:50:f4:df:18:90:3d:b9:54:65:5f:41:dd:94:3e:ac:
23:3f:3b:60:d8:9b:00:72:a5:85:f5:91:6e:35:b6:86:2e:a3:
9a:4f:a2:95:f0:ff:73:f7:f7:71:16:97:cf:9f:6c:0f:d5:9b:
c3:36:78:6d:88:9e:49:26:42:07:fe:c6:8b:64:4f:01:51:d7:
25:85:f9:9f:db:ed:2b:0e:d1:3c:9a:48:a3:d6:3c:5e:ec:e6:
2e:e1:5b:65:2f:50:af:6f:e9:4d:fb:ab:31:37:9d:96:a0:ad:
1b:54:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:07 2026 by rpki-client