Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: MfexdOYFBsq4A7wxSHHxBnEdronmt35tN9Z8+P2sD0k=
Subject key identifier: 06:09:A8:6D:5E:8D:9C:41:64:65:A4:2B:68:3E:0F:88:74:27:8D:41
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019F8FEC2BCBA7C01CC4418997F3159A211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0949
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: d6NaGnNzAGpv8CvGszL85kTD6R8csY3nrfjNw835Spo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2b:cb:a7:c0:1c:c4:41:89:97:f3:15:9a:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=0609a86d5e8d9c416465a42b683e0f8874278d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:b5:ff:73:24:93:72:60:6f:46:9c:2a:73:
61:96:22:c7:9c:78:35:ac:bc:dd:98:e2:a2:7f:ad:
26:0d:6d:c6:d2:2f:e9:e5:e0:17:b9:96:eb:e1:b6:
53:fb:1e:7c:81:0d:ac:72:93:f0:30:0b:07:5f:86:
ea:d0:16:55:f6:a6:b5:c8:5f:09:f3:67:c7:ed:9c:
64:9f:e1:17:66:87:f3:69:b0:65:82:ce:79:b1:6f:
6d:48:75:e1:2e:01:9b:0b:31:cd:5d:d0:46:c6:e8:
4e:44:f5:89:24:2e:5d:0b:aa:a2:c6:29:b1:28:2c:
4c:ca:8c:7e:0d:94:1d:e7:b6:56:12:b2:f7:7d:c0:
dc:70:42:c8:ce:89:9d:c9:82:35:b0:a6:4f:ca:d8:
e0:51:07:24:ed:9c:c2:dd:9e:a3:04:66:ac:03:dc:
a2:2e:aa:f1:18:c2:65:df:70:84:28:22:25:4e:ce:
ad:a7:40:82:4d:94:33:19:10:82:9d:c2:4a:c2:37:
6a:13:4d:c4:d1:d2:fe:76:09:13:b2:b7:c6:17:c3:
03:cf:77:7b:e6:82:b7:9b:90:af:a6:ba:1b:aa:fa:
44:62:98:e7:3d:44:45:5e:f8:17:35:ae:58:c9:61:
b8:4c:98:6b:59:4f:c7:ad:28:fb:dd:2c:64:2c:35:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:A8:6D:5E:8D:9C:41:64:65:A4:2B:68:3E:0F:88:74:27:8D:41
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:26:12:c7:6b:ae:62:27:00:b5:e8:70:99:8b:c4:72:a8:0e:
bb:40:3c:f8:c3:f7:d9:cf:65:87:a3:bc:c3:20:0e:a7:68:1c:
0a:a4:6d:20:38:38:ba:7b:c8:f9:b5:27:de:13:42:ea:dc:14:
51:1c:32:6e:f0:fb:be:3f:d1:da:f2:c3:4e:61:34:44:ad:68:
fe:5a:52:f3:a5:41:20:2f:ce:0e:8c:67:c8:91:1d:3b:72:e5:
3e:f8:27:d3:63:d5:73:b1:27:a9:0c:90:e5:6f:bf:0d:95:9f:
b3:43:a8:54:b3:dc:aa:9d:c6:8d:04:5b:6a:ed:6e:e2:63:94:
80:6f:35:12:b7:64:2b:e6:d0:1b:59:d3:6f:a1:6a:53:71:cd:
bc:09:30:94:68:47:95:52:60:4b:b7:97:0d:19:9b:39:3f:59:
5e:95:11:8b:32:1b:ee:f6:34:75:a1:1c:ce:66:3f:1e:22:71:
df:12:7e:1a:8e:21:0f:da:93:e6:e9:61:d6:e4:d0:14:e3:6a:
97:56:b9:6e:6b:e9:fc:29:1d:f2:82:81:2e:cc:5b:31:50:15:
9c:35:9e:0f:1c:64:c1:01:17:9c:ea:b0:5d:3e:d5:ea:a3:7b:
ab:d4:d3:c8:e8:4b:a0:3f:c5:7e:5e:b8:5b:02:49:ce:bc:a1:
93:40:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:23 2026 by rpki-client