Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: zQKStFFquqFe7KG97i4rIQ+kJE1C2IgOiEplPgxFXEI=
Subject key identifier: 52:BE:33:04:50:3A:D3:DB:8B:94:2F:24:B7:DB:A9:5C:EA:21:93:48
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019F916D2908513172ACA395BB2F4FA79911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 16EA
Signing time: Fri 24 Jul 2026 00:01:17 +0000
Manifest this update: Fri 24 Jul 2026 00:01:17 +0000
Manifest next update: Sat 25 Jul 2026 00:01:17 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: qFoeSygoj2vuMBH68f8/0X/Gr1ND9DMtjRBnkXFXdt4=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:29:08:51:31:72:ac:a3:95:bb:2f:4f:a7:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jul 24 00:01:17 2026 GMT
Not After : Jul 25 00:01:17 2026 GMT
Subject: CN=52be3304503ad3db8b942f24b7dba95cea219348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:07:fe:43:0b:32:c1:cc:3a:6b:84:b9:fe:
c2:6f:5c:aa:5d:ce:87:e2:a2:bc:3d:16:98:1a:8d:
39:31:ae:2a:08:36:2e:76:64:80:29:e7:bc:a8:d7:
3d:f0:5c:c9:f6:14:42:86:48:a3:68:d4:1e:e4:58:
29:c2:f2:5e:c4:c7:b9:38:da:27:e8:be:37:6a:d8:
34:c8:d1:b5:d1:3a:94:9a:74:5c:da:ee:59:a5:ea:
f6:84:d4:6a:ba:44:1e:1a:86:f1:eb:fb:1a:8b:ca:
45:fa:1b:52:48:35:3e:9d:de:93:b8:05:3c:ee:4d:
fd:0f:e0:d7:c8:17:8c:19:b5:d7:f6:65:b7:eb:67:
49:6c:c5:fd:b5:01:c8:cc:fa:19:57:96:f9:b8:50:
43:a9:b3:ce:e6:2c:1a:d3:7f:b6:62:b1:0b:fd:35:
0a:9f:e8:da:e8:5a:6a:3c:0c:07:0f:25:83:ee:1b:
5d:5c:1e:e4:06:bc:d8:49:c6:cb:71:f6:11:fc:fe:
81:9d:40:7f:9f:83:93:98:84:c8:ea:85:12:52:04:
eb:18:71:29:53:d3:79:ff:3c:fe:3a:0d:2b:51:cb:
9f:d5:a8:d7:01:19:4f:d8:73:98:fc:8b:3a:da:0c:
0f:6b:05:df:22:d2:29:27:37:40:f7:eb:bc:f9:53:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:33:04:50:3A:D3:DB:8B:94:2F:24:B7:DB:A9:5C:EA:21:93:48
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:7c:ab:24:e8:81:a5:eb:60:67:55:b2:c7:df:d8:f9:a7:
34:7d:77:6c:2f:e2:18:f8:28:b3:10:59:7c:2f:1b:1d:77:02:
6c:57:0c:1c:91:7e:32:0e:bf:ba:a2:3e:e6:ef:2e:b4:80:2c:
98:ee:9a:c4:e9:b4:d8:47:f7:58:59:d1:d1:b1:7e:21:04:25:
47:ae:c1:ad:b3:fc:6f:ab:9d:02:0b:9a:f5:39:63:de:32:57:
d6:18:30:7b:8f:89:b8:5a:e1:8b:45:37:c2:e0:22:d7:07:16:
d6:43:ec:04:58:7b:05:ba:19:78:86:39:d8:06:1d:e1:1c:74:
5d:cf:28:c3:9c:ff:a2:bc:87:11:30:a6:7b:ab:a2:4b:72:87:
c2:00:ee:b4:0f:90:bb:e2:ae:f6:27:8d:9d:a5:08:bd:45:09:
ea:97:ec:c8:15:09:7c:5a:98:be:d3:7a:09:b1:3a:d6:bb:d2:
2d:1d:27:1e:6e:8c:cb:ab:ba:12:19:2a:ba:d4:e0:20:a1:35:
4d:1c:fd:f6:c0:fb:b3:a0:cc:cc:02:09:7f:81:ad:15:ba:59:
bb:f4:80:fd:9c:1c:5e:f1:7e:9c:cf:85:31:9b:28:dc:47:4b:
4c:4d:ce:a2:64:10:88:c6:b7:60:03:4b:a7:d2:4b:71:a1:6d:
a9:86:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:03 2026 by rpki-client