Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
File: 5CI8HxzaGbmTW0jH_c8gVcKWICg.mft (raw, json)
Hash identifier: mapz2Ktz4XxEqgzX5y/U1ShM7ODySU2zPmAKR+zXMGM=
Subject key identifier: 40:28:83:E6:36:0A:2E:B8:05:E2:D9:DC:71:03:CC:1D:3B:41:E1:CF
Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Certificate serial: 019F9091184891F817BB86C7D44952183C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
Manifest number: 0231
Signing time: Thu 23 Jul 2026 20:00:55 +0000
Manifest this update: Thu 23 Jul 2026 20:00:55 +0000
Manifest next update: Fri 24 Jul 2026 20:00:55 +0000
Files and hashes: 1: 5CI8HxzaGbmTW0jH_c8gVcKWICg.crl (hash: p052tGesVzoyNN1673ggJ3ttUfEPC8Jj98BbXuq2tz4=)
2: xuYEpRaA_BbVvcRMwj6GF8dzFtk.roa (hash: +oo5HVPSdE5F0vnX0GJbLJAscp8MlST1lOFf6d/1Nz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:18:48:91:f8:17:bb:86:c7:d4:49:52:18:3c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028
Validity
Not Before: Jul 23 20:00:55 2026 GMT
Not After : Jul 24 20:00:55 2026 GMT
Subject: CN=402883e6360a2eb805e2d9dc7103cc1d3b41e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:c5:1a:04:fe:40:a4:2a:2b:2f:15:35:5e:
e7:ee:1e:75:5d:7f:ae:2b:ab:fa:08:5f:69:fd:ea:
d7:43:3b:a4:05:11:d4:dc:47:e2:22:d5:c1:af:1b:
9a:83:dc:9d:96:3b:2e:fc:fd:4c:a4:ea:6b:ec:3b:
31:7b:a7:09:9d:56:d2:6b:12:5b:0f:0d:2f:75:3b:
f6:f6:6d:6e:85:4f:e3:97:95:22:a5:74:00:cc:25:
23:10:b2:4a:20:27:09:f5:b7:d6:50:cb:a7:aa:2f:
39:65:aa:93:2b:90:ef:26:16:a2:45:57:04:5a:9d:
c4:06:37:7d:28:ad:6a:d1:96:e5:6a:15:8d:8d:b6:
f9:46:b6:e6:8a:23:b4:4d:a7:d3:b1:88:62:38:10:
ef:68:87:07:7e:74:70:81:7d:a5:00:71:5d:44:44:
bb:1b:af:b2:30:31:c9:10:85:b1:41:bc:c3:ac:3a:
f2:99:db:f6:34:51:82:2f:4f:c4:4e:df:28:ea:49:
47:74:c8:fa:f0:b9:fc:07:36:84:a1:63:1b:03:3c:
b5:2c:74:81:3b:eb:8e:0e:57:07:f0:78:b6:61:00:
ea:ea:1d:e2:3e:37:da:01:f6:0c:98:d7:03:87:9a:
37:38:5b:61:e6:d6:94:42:2c:e8:e9:95:dd:21:80:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:83:E6:36:0A:2E:B8:05:E2:D9:DC:71:03:CC:1D:3B:41:E1:CF
X509v3 Authority Key Identifier:
keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:ff:e8:e4:99:26:c5:c7:01:e0:5a:40:84:15:ce:29:da:
2a:2b:1f:7b:8d:33:94:c8:63:e2:a9:76:09:d9:e7:1f:be:b9:
33:70:b9:cb:8d:a5:83:df:c7:7c:46:1e:7e:6a:33:54:61:c3:
6a:42:c0:d8:d8:65:35:ca:d1:14:c7:51:02:9b:6e:10:46:27:
8e:66:a8:2f:68:19:4b:d2:1e:94:90:bc:b5:96:7e:4a:bd:a3:
1c:50:52:f6:a3:51:84:92:d6:c8:38:07:9d:b5:16:89:0c:44:
08:87:43:82:b8:90:ae:9e:6b:42:28:92:ad:41:7e:7b:c7:80:
a6:59:0e:3a:ec:ac:db:3b:9f:76:56:4f:3e:27:ae:34:81:df:
ed:14:8d:ba:9c:e5:49:e9:96:37:cc:63:c0:f0:bf:dc:e5:4e:
38:68:b8:d0:aa:7b:25:59:38:98:ff:66:80:37:80:ce:d5:c9:
97:b8:55:a2:03:36:d5:7b:72:71:e7:76:48:8e:d6:eb:6b:40:
6e:85:f1:a1:cd:35:e0:4b:a8:39:03:d9:8a:a6:2e:87:8d:47:
33:03:4e:27:5d:dc:58:c9:c0:c7:9a:fa:ee:a5:f5:8d:ac:ba:
90:93:82:1c:61:aa:23:df:8f:79:19:88:46:27:57:b8:bb:3a:
25:0b:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:03 2026 by rpki-client