Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: eGeY6iEzZpIzYlbaNSHI8/G0WgGsToVqphsRD7m2LwU=
Subject key identifier: 57:74:BE:5F:06:F8:F5:88:01:DA:5A:20:DC:6B:28:FD:D7:2A:25:3D
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019F8F7F947DBF694E12E7DD716B36661E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 16E9
Signing time: Thu 23 Jul 2026 15:02:10 +0000
Manifest this update: Thu 23 Jul 2026 15:02:10 +0000
Manifest next update: Fri 24 Jul 2026 15:02:10 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: 9AFMZKKyQsEvqUndL/XTT6Nw7Ri/7Vos+Vc6eaY6kiU=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:94:7d:bf:69:4e:12:e7:dd:71:6b:36:66:1e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jul 23 15:02:10 2026 GMT
Not After : Jul 24 15:02:10 2026 GMT
Subject: CN=5774be5f06f8f58801da5a20dc6b28fdd72a253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:6a:9c:df:dd:d2:65:3d:a5:35:c6:09:52:
ca:b6:73:a9:b0:b1:38:67:9c:87:6d:77:71:ff:be:
c5:cc:5c:62:4f:73:6a:2d:40:78:68:38:dd:a6:33:
75:75:f2:eb:55:62:df:b2:d1:61:18:e5:52:74:1b:
a7:93:8c:08:4e:08:74:81:3e:45:b8:cb:3d:df:20:
c5:05:29:c9:cd:31:0c:d5:05:1e:d8:cf:bf:58:5e:
b7:28:03:e0:78:66:99:96:83:a0:55:ad:df:92:b9:
5c:a7:99:28:b9:ae:1b:0b:ee:d1:d6:8d:d9:26:7b:
e7:2d:28:50:3a:cb:79:06:b7:38:bc:62:7e:6f:b0:
fc:6f:f6:7d:be:eb:c0:90:f5:ab:d7:e8:28:bd:5e:
ff:f9:8b:ce:1c:61:a0:49:46:6f:28:7f:05:43:23:
dc:b3:38:39:03:ed:99:5e:d2:11:43:41:f4:3d:27:
2c:f3:4a:11:62:02:5a:c3:62:18:b5:0e:21:8a:6e:
a3:89:1f:0c:4a:8a:a9:78:9f:1f:c2:40:8a:53:bd:
85:1d:4d:a2:5c:65:cb:0c:ee:cc:01:c6:31:97:18:
aa:c6:26:f3:47:d1:07:3b:97:ce:d1:22:4f:0f:72:
40:b3:5d:99:c1:5f:60:87:55:83:aa:6a:aa:6a:83:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:74:BE:5F:06:F8:F5:88:01:DA:5A:20:DC:6B:28:FD:D7:2A:25:3D
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:2f:47:52:b7:a4:24:a8:2f:40:b8:1f:04:fd:1a:44:26:
67:21:43:cf:4d:fe:bb:66:0b:49:a3:13:11:10:43:1a:37:34:
13:48:a3:00:ab:34:ef:85:d0:c3:ca:66:72:7a:2e:bc:51:c2:
c2:8b:a3:ed:e5:79:73:a0:c1:8c:c2:b6:bf:1e:26:8a:f2:11:
2e:da:5d:4f:92:44:f3:b3:76:20:6c:58:02:df:e1:1e:44:3e:
5b:62:7f:5f:7e:75:e7:2e:fd:30:64:0f:b0:d4:15:cf:80:7d:
da:46:d7:3b:12:9e:ca:37:6c:bc:1d:96:3c:75:87:55:dc:ea:
45:cc:42:38:8d:7a:13:49:83:d4:37:4f:6d:f4:62:12:27:db:
08:05:25:b4:b7:08:2b:8f:63:05:59:7f:cc:fb:63:99:49:92:
06:62:5f:7a:4b:e3:0e:56:fa:1b:de:58:a5:78:05:fa:72:5e:
27:7b:1e:38:09:7c:02:a3:9d:c6:e0:1c:6e:88:ef:77:a1:6c:
3b:0c:fc:f8:29:bb:43:94:a3:8d:af:1b:4c:da:f2:28:a7:2a:
f4:5e:9e:e8:7b:5e:90:2e:0d:38:b8:7c:4f:25:02:48:51:76:
4d:30:2d:63:c4:67:6e:bc:8e:e1:c3:ef:b9:7d:7a:d6:cf:5b:
e3:ee:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:35 2026 by rpki-client