Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: 4RzuZV9WlkYnc5ud2sDWbYsVuy+Ws1BaYGi20i77O9Y=
Subject key identifier: 23:0F:CA:32:D5:BD:BE:42:9D:18:54:CB:0C:AE:77:DD:E6:32:B2:3E
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 019F8EA2CAFA548C25FA03BC607D9913B219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: 0680
Signing time: Thu 23 Jul 2026 11:01:01 +0000
Manifest this update: Thu 23 Jul 2026 11:01:01 +0000
Manifest next update: Fri 24 Jul 2026 11:01:01 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: F/o1u+qq0yyUlTmTz52gCspCZejNHW1Ve9MRAdGygHY=)
2: VC6pU8sH53fsSXhpjxvq2spJkW8.asa (hash: eY4uxqqdpm3pkCV4oqysR7RZdD/oSeWBc0FKFASjw1g=)
3: XaMeeXQ5ysc8kABhh0l_VC0xvRQ.roa (hash: f1b46uPGTd/9X8UPdm3VptVXLZpHjki1wLcZZ1TfO/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ca:fa:54:8c:25:fa:03:bc:60:7d:99:13:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jul 23 11:01:01 2026 GMT
Not After : Jul 24 11:01:01 2026 GMT
Subject: CN=230fca32d5bdbe429d1854cb0cae77dde632b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:f3:2e:06:be:5c:25:cb:bb:37:15:14:c5:
a4:a4:98:42:f8:b2:69:6c:11:68:63:38:f6:98:2d:
d2:64:6d:ea:bc:82:1f:88:b9:69:77:78:68:bb:cf:
ac:65:61:d3:5b:35:9f:e6:9c:5d:dc:de:32:c8:84:
f5:b1:c8:65:83:24:56:c8:0d:5d:82:bb:21:1b:be:
e4:83:fa:20:7e:2a:e9:45:79:61:12:76:97:bd:e4:
b0:ef:34:0f:31:0a:48:57:04:e2:9f:ef:2a:b6:25:
2f:8f:1c:0b:66:6f:b5:04:46:77:f5:54:06:7b:05:
50:57:8c:c2:e0:41:25:6a:ff:91:c5:55:f9:a6:77:
7b:25:9b:70:4c:0b:37:b0:55:11:51:02:18:89:d8:
02:d3:9c:fa:15:20:03:a1:22:2b:53:08:45:bb:34:
57:0c:9f:5c:38:3f:26:88:d7:a1:2c:02:78:ad:1f:
42:38:b3:b3:d7:41:c3:70:89:fd:e4:9f:09:ce:a5:
2e:30:e6:b1:41:ba:e9:42:d3:2c:7f:c5:c0:a4:f4:
82:83:dd:48:35:b3:03:8b:1e:7e:29:f2:ce:db:7e:
68:41:59:9e:f8:bd:fe:17:a1:e6:aa:0f:65:72:07:
02:30:6b:42:19:bf:55:ce:a5:58:7b:63:b2:b9:95:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:CA:32:D5:BD:BE:42:9D:18:54:CB:0C:AE:77:DD:E6:32:B2:3E
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:26:6c:fd:80:bf:1d:7c:1e:f8:5b:43:04:be:63:f7:61:3b:
55:0b:72:9b:13:98:80:8e:b6:60:f2:94:14:35:b2:93:25:a7:
9b:a1:0d:7a:67:20:28:31:ae:ec:01:28:87:df:f6:35:f1:3e:
a6:62:6b:2c:94:35:61:3b:62:37:d9:e1:fd:e4:ec:0e:8d:7b:
df:68:c2:df:c1:a7:fe:eb:78:f0:e5:53:37:be:fb:ec:0a:c2:
73:13:25:5e:c0:30:37:b0:69:5a:62:b0:bb:42:69:f5:10:76:
97:d8:49:28:fb:c1:53:2d:fb:35:f4:27:a3:e1:84:70:ce:3b:
f1:fa:6a:ee:c7:f7:9c:01:5d:01:6f:1f:dd:fa:cb:65:ca:e9:
7e:a5:2c:ba:2f:f8:7c:0e:d4:f1:aa:a9:a1:a8:4d:39:94:d9:
53:6c:1a:be:f7:e4:e7:82:f0:52:6b:15:d9:bd:83:e9:59:52:
9c:74:93:45:65:ae:51:59:1f:c1:b5:43:db:bb:e8:6f:3f:5a:
af:bd:31:1e:ea:bb:37:14:5e:13:bf:85:2d:cc:d5:c3:92:1b:
bb:7a:65:5e:85:70:d9:aa:03:dc:dd:40:27:bc:b0:00:23:18:
85:21:6c:ab:25:dc:5a:e7:91:a1:ce:5a:f1:d2:7e:6d:29:48:
9d:b1:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:28 2026 by rpki-client