Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: M+lxh7Yds/VAenoHvjIBq+AkT0offaJttrD25q3WS5U=
Subject key identifier: 06:10:D4:4B:7B:74:6C:D3:D4:6F:19:4F:1E:11:5F:2E:B1:AF:B5:F0
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019F90C823B39957CFDCB39B81397BCCF356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 13A5
Signing time: Thu 23 Jul 2026 21:01:02 +0000
Manifest this update: Thu 23 Jul 2026 21:01:02 +0000
Manifest next update: Fri 24 Jul 2026 21:01:02 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: pHNibHBiXOAknn2+DckusCKvkOwjw4YZnMN7OvpQh58=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:23:b3:99:57:cf:dc:b3:9b:81:39:7b:cc:f3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jul 23 21:01:02 2026 GMT
Not After : Jul 24 21:01:02 2026 GMT
Subject: CN=0610d44b7b746cd3d46f194f1e115f2eb1afb5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:bc:d7:9e:c7:ce:ab:fc:d8:d5:39:f6:c1:
04:2e:27:77:80:d8:40:d9:2a:1a:12:f8:b3:19:2f:
f8:83:6e:24:c7:70:cf:e3:c7:34:ee:62:6c:49:b0:
5f:14:7c:d3:a4:b4:22:3a:29:6f:68:3f:5d:b6:12:
85:46:78:0d:46:e8:80:7a:ea:48:bc:c4:f4:53:03:
dc:7f:ca:ba:d3:7e:57:2d:f9:ee:3e:f4:a5:75:6a:
7a:ee:b9:ff:39:21:1d:a5:32:04:b4:c5:2d:d7:40:
34:87:e4:8b:89:e6:fe:90:43:62:fd:bc:ec:69:c3:
be:ab:0d:11:10:3b:4b:4c:ca:7c:89:86:30:a1:90:
92:ad:09:66:ff:90:1e:7b:8f:84:fd:3c:75:bb:6a:
2f:01:e0:6a:72:6e:b0:5e:fe:8e:8b:61:bf:f0:6e:
9e:99:94:6c:d2:4b:c3:c6:28:3e:b9:0d:08:26:e1:
b1:38:cc:b9:14:35:1e:4c:c6:1f:82:03:b2:93:02:
90:9a:b2:23:dd:70:a8:85:a2:ae:b6:c4:7d:b8:74:
19:0b:a5:83:a4:f5:4d:cc:40:53:77:85:c7:f4:20:
98:de:fa:b0:48:58:6b:b6:07:3d:4a:69:3b:29:90:
b4:97:c8:85:69:76:3a:5c:78:80:f0:db:dd:9b:53:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:10:D4:4B:7B:74:6C:D3:D4:6F:19:4F:1E:11:5F:2E:B1:AF:B5:F0
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:38:cb:2a:a9:b8:bc:da:52:1f:bd:15:58:4b:d2:4c:30:2c:
a0:bc:63:38:41:ac:bb:0b:73:85:3c:22:8a:4a:ab:33:f0:46:
40:75:ad:fa:3e:55:30:f9:11:95:d0:ff:41:c1:13:ed:83:e6:
b7:c9:00:54:7e:4a:83:70:95:ce:9b:23:b3:0c:13:d2:54:d8:
4f:24:33:d3:81:7e:0f:c5:3f:1f:75:aa:53:34:7d:f0:cb:48:
65:46:6b:ac:f6:e7:13:51:0a:28:b7:ae:b7:0d:6d:34:fc:ce:
56:15:89:03:c1:c6:f2:aa:7d:ed:9c:77:d9:77:4d:a0:4d:74:
f3:29:8b:a5:98:c8:13:a3:34:55:1c:47:4f:bb:af:74:42:50:
0a:f7:a9:e3:d3:0b:20:f0:9f:32:c1:af:5c:2e:63:b0:71:25:
be:07:92:96:3d:92:18:52:d6:b2:00:f2:dd:47:f1:f3:cc:2e:
f6:98:5c:08:f0:34:90:ec:4d:8b:20:d5:00:14:8c:f5:2c:4d:
e4:9e:e8:d1:ec:2f:02:fa:0e:5b:5b:d6:89:32:eb:1a:57:1f:
38:c0:6e:c0:49:98:86:c8:f6:8d:85:b7:e3:46:10:e1:0e:c5:
3d:c9:0a:30:3e:f4:c2:76:db:9f:21:30:36:db:69:3a:58:b1:
ee:07:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:54 2026 by rpki-client