Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: ULITUuo2Uxh8h8Tnp0XfgFY95v+uVAwLvGDz8/0LNC8=
Subject key identifier: 71:3E:14:3A:0B:3B:01:86:E6:83:7E:31:32:BB:80:E2:46:DE:B6:FA
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019F91A418000426438E64CCFDE05BB99A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:17 +0000
Manifest this update: Fri 24 Jul 2026 01:01:17 +0000
Manifest next update: Sat 25 Jul 2026 01:01:17 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: PV72E2h7n8JlhGojsXoZCWuhYe08L4kze5sbQRzGBoc=)
2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:18:00:04:26:43:8e:64:cc:fd:e0:5b:b9:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Jul 24 01:01:17 2026 GMT
Not After : Jul 25 01:01:17 2026 GMT
Subject: CN=713e143a0b3b0186e6837e3132bb80e246deb6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:ca:d0:9d:66:41:ac:2d:bc:af:cb:d3:52:
0b:43:49:c1:44:b1:6e:20:92:60:36:97:11:bd:f1:
2d:be:6a:4e:78:48:c9:08:a8:29:b4:ae:8c:56:09:
5d:0f:bc:fe:3d:00:fb:09:95:0c:a0:66:0d:c1:3e:
2b:69:3c:b7:9e:d1:2f:3d:cb:d7:dc:38:de:8c:c7:
0e:39:cb:47:9b:32:e6:21:0f:c2:da:12:63:f5:02:
fe:8c:f6:29:31:45:41:5a:cd:f3:6a:c6:e3:71:c6:
87:0a:ec:ac:52:a6:bb:ab:cd:7d:ab:48:30:c2:f8:
8c:c3:4b:ca:aa:f2:46:d0:3a:25:d3:6f:4c:54:11:
df:46:e6:7e:f2:4b:34:6c:4e:7d:8c:18:29:42:bd:
0b:27:ac:2f:af:60:4a:86:d5:68:cb:b6:49:1f:ca:
b5:38:25:4e:a2:f8:d9:d5:2c:69:de:74:e5:84:af:
c6:36:f6:49:c4:09:f0:a4:7d:0f:11:ed:30:3f:ec:
a0:f0:8f:d4:8f:da:e1:ed:ca:37:4d:0f:e8:03:ed:
1f:4a:1b:be:78:9a:c0:44:9c:2c:69:1a:ae:36:84:
5b:cf:87:70:b6:b8:be:14:b0:24:72:9d:74:d8:29:
14:a1:fc:d3:64:16:89:ba:f5:81:30:d9:b5:30:64:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:14:3A:0B:3B:01:86:E6:83:7E:31:32:BB:80:E2:46:DE:B6:FA
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c9:65:30:8d:98:a4:b6:01:bd:8e:97:cd:39:5d:c9:4d:be:
fe:95:17:73:f0:a9:f5:7a:cf:11:03:7c:0b:63:8f:4f:d3:3f:
b0:29:05:41:ac:50:d4:db:be:4f:60:e6:2a:a3:a4:b9:d6:2c:
13:b4:1b:0d:1a:58:36:08:f5:b3:b6:cb:1d:4a:e8:1c:56:56:
0d:89:df:2d:7a:4e:b7:c4:ee:82:b5:c9:f7:a8:28:f2:38:5a:
00:fc:1c:4d:9e:ba:51:61:0c:22:9b:f4:d9:6f:8a:70:94:94:
13:73:fb:6a:42:d3:27:52:e8:2b:14:fc:12:e2:05:1e:e7:0d:
48:23:03:31:ac:17:65:ee:00:0c:85:39:70:51:ef:35:b6:ca:
dc:a4:14:4e:a0:42:ec:12:d3:6d:54:47:53:d1:0c:15:d6:64:
be:c1:d6:36:08:53:3d:73:31:4f:07:41:29:cb:b8:e0:a7:af:
6d:ec:38:d6:a5:4b:f9:c8:7d:b8:dd:cd:31:04:f2:fe:c4:b0:
e8:a9:8f:d4:0d:d4:dd:6f:02:ca:f7:3a:29:7a:63:f2:a0:6a:
62:7c:f7:90:4d:dd:f4:ea:9b:7b:1b:ac:8e:bc:8b:79:2b:ca:
e6:f9:aa:43:e1:8a:b0:77:4a:0e:20:ec:ae:d8:d9:60:52:69:
01:42:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:21 2026 by rpki-client