
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: Z8mBwsg500Bz7iS0rIvNzrN36x0cPO5BCtr33kGRKAw=
Subject key identifier: 43:F3:6A:20:18:5F:F8:7B:B1:1F:17:53:49:6A:DB:E6:EB:5F:F6:39
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 019F916C4D0F1842C896057E6C9A9AB80081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 1758
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: of1r3nJ+oVzMk4Uqpy+Kg0Zh/Plb8hv61NJLUEDwcHE=)
2: Wu9t7d9tnZW1AA2IWZCyVHCZEmo.roa (hash: kOHm2lN17Qca/qCn59+JS7mNSFFu2Gxe0p/zQAQ3878=)
3: ew282-AhNX4FMYFmo40ImlhZsYU.roa (hash: 7VW/QfG/Z+KeGR3BpgjUt4A9hj2uza0zmvqYLXTnLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4d:0f:18:42:c8:96:05:7e:6c:9a:9a:b8:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=43f36a20185ff87bb11f1753496adbe6eb5ff639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:e4:2f:12:a7:5a:74:ab:0f:07:70:b3:9e:
51:f8:6b:27:c6:5b:da:d0:6b:6c:71:19:b7:bc:3d:
aa:f0:cc:a2:05:63:31:c3:42:bc:f7:1e:1b:8d:06:
0e:b3:5b:8e:5c:ce:72:14:93:c2:7c:ae:5f:6c:fd:
f8:d1:cd:fd:ab:18:df:76:f2:be:bd:36:60:20:6c:
7c:dc:7d:5b:71:97:38:17:cc:f6:0d:a3:e5:d9:6b:
b5:cb:b2:a6:66:be:50:ca:4e:22:c5:c4:2b:c6:6f:
cd:2b:8f:4a:2f:e6:88:0d:9b:92:35:3c:33:38:73:
af:df:1c:59:d6:c3:1b:da:26:73:89:d5:53:c8:83:
2d:25:c8:45:48:a9:c0:fa:26:89:88:91:eb:af:28:
dd:c0:a4:7b:93:d8:de:77:3e:33:80:c3:7e:46:26:
8f:32:b4:8d:32:62:ac:b8:a7:ed:62:03:45:d5:ab:
71:a4:1f:cf:73:23:29:88:e3:84:14:e0:0f:27:80:
82:cc:14:9d:0d:25:22:ac:d9:e1:a3:31:44:fb:93:
30:de:68:62:94:4b:f5:3a:42:76:f2:59:51:9b:f5:
6b:16:24:a4:0a:3a:23:ff:b2:72:c0:d2:52:75:91:
27:4b:a9:69:c4:aa:77:1c:6a:48:d2:b3:f2:d3:ac:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:6A:20:18:5F:F8:7B:B1:1F:17:53:49:6A:DB:E6:EB:5F:F6:39
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:7a:8d:3d:f6:50:b7:db:f9:3e:19:af:08:44:3d:5b:e8:
25:0c:13:a2:0f:98:1b:18:ec:3c:59:0d:36:21:20:44:33:c3:
b0:6e:1c:0f:00:ab:3a:52:8a:aa:4a:43:f4:e4:16:44:0a:df:
1a:b1:40:21:dc:db:bb:27:a5:9f:a3:82:41:e2:f3:21:ed:97:
09:c2:11:b1:54:4c:f5:0f:ef:6c:51:55:be:d9:d9:6f:fa:3f:
de:61:23:c0:a1:f0:a2:a1:7d:ed:12:7f:f1:0d:28:c6:70:83:
c5:f9:27:0b:82:6f:f9:e3:0d:c2:c4:f6:cd:b9:de:b4:cb:be:
8c:e0:64:7d:3e:46:54:d8:5a:0c:52:bd:91:48:96:09:a6:f2:
5b:fe:c1:24:c9:3a:30:a3:78:60:7d:99:53:25:bd:15:8b:e4:
72:38:79:f3:1b:09:f7:69:a3:2d:8d:31:d1:2f:8d:82:e5:40:
5c:3e:6c:4f:7d:33:58:bf:e6:a9:ae:12:3e:bd:e2:6e:57:5b:
4e:74:9e:a3:25:a5:b8:cd:48:8c:af:a7:4e:73:0e:d3:37:e0:
83:b4:81:15:a4:57:43:04:9b:85:a1:c3:bc:07:6c:e2:2a:32:
02:6a:84:93:d7:7b:93:d7:ef:04:13:8b:f3:8e:b0:33:00:98:
48:1e:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:45 2026 by rpki-client