Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json)
Hash identifier: aSxwH3bAOUHVPxSsNEanrw+RvkGwCDZTQ3a+YoHa+QE=
Subject key identifier: 6D:E2:DD:8D:D9:5D:DA:9C:9D:A9:61:D3:23:9F:4F:42:7D:A3:1B:E9
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 019F90FF90091B56D9B373C03444790E6A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
Manifest number: 1147
Signing time: Thu 23 Jul 2026 22:01:35 +0000
Manifest this update: Thu 23 Jul 2026 22:01:35 +0000
Manifest next update: Fri 24 Jul 2026 22:01:35 +0000
Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: Id4MerYbQ9i20r2QgHhEOyHWcsM70RM5muKSvgEdFtg=)
2: IJhmUCiFKkEWauTpmApnTpFj-SE.roa (hash: kLeSqMguXmeNnm1rZ9r4cMOYIPZfo29ixEQEwX6dLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:90:09:1b:56:d9:b3:73:c0:34:44:79:0e:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jul 23 22:01:35 2026 GMT
Not After : Jul 24 22:01:35 2026 GMT
Subject: CN=6de2dd8dd95dda9c9da961d3239f4f427da31be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:fd:6c:12:6b:1c:44:d9:4a:64:3e:6e:d4:
10:29:b7:d7:2d:80:27:b2:ba:91:00:d5:01:a5:18:
10:9b:fc:db:55:90:9c:db:4e:fb:9d:a8:53:a4:93:
3b:8a:db:5e:a4:ac:bd:46:19:50:62:f3:12:a2:de:
07:a6:0c:98:b2:01:12:40:74:db:c1:f3:6b:46:ba:
ae:0c:89:01:f5:95:db:71:56:1d:36:1a:2d:7f:3d:
e0:f6:d7:cc:5e:32:09:9b:71:d1:f4:2e:3a:e3:1f:
02:97:a7:85:be:dc:38:18:15:9e:0f:09:44:6d:08:
1b:c5:48:17:15:ab:03:b0:64:b6:63:ed:61:df:e9:
6a:7f:85:e6:71:39:04:3c:b8:4b:48:b7:92:8c:09:
49:9a:0b:04:86:27:7a:91:bb:a9:1d:da:95:a0:cb:
15:fe:97:08:c3:a0:eb:80:0d:18:ae:30:4e:21:17:
3c:04:76:31:aa:98:52:13:65:7a:51:49:ab:aa:83:
18:8c:c5:01:f1:58:bc:b8:a7:30:46:54:6a:40:be:
26:b8:57:03:af:1d:4a:90:1c:5d:5a:c2:07:36:e0:
5e:e9:43:1b:71:3a:84:d6:53:c3:56:b0:c9:65:a1:
cc:84:f7:6d:bf:0d:b6:b3:7e:55:e1:3e:70:da:3d:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E2:DD:8D:D9:5D:DA:9C:9D:A9:61:D3:23:9F:4F:42:7D:A3:1B:E9
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:45:81:03:8f:e2:88:00:ae:8c:78:ff:b7:5f:67:10:5a:b8:
72:5a:c3:76:d2:ed:39:c8:6a:30:6f:5d:df:d6:71:b2:3d:bb:
e5:36:21:2a:3a:49:54:18:cd:15:e0:4c:0c:79:6d:e3:12:76:
d9:0f:13:a8:0b:0d:fc:34:5e:3c:f1:4f:05:71:57:4e:ea:ec:
72:e1:dc:d8:8b:91:47:9e:3d:fd:93:3b:5e:b3:df:8e:94:7e:
bc:50:a7:1d:2d:47:8d:59:a3:f3:1b:25:24:cd:23:10:ff:ac:
fa:41:f5:d5:8a:56:14:a2:07:c8:1e:84:bf:17:1c:f0:55:d8:
2c:de:22:21:d9:2e:96:a9:6e:fb:88:59:6e:d6:9f:95:94:8d:
a3:d1:e2:99:96:fa:94:fd:c8:3d:c1:05:c4:c5:11:ed:a8:74:
51:da:13:62:f8:a8:65:a1:d8:87:a3:c8:91:0a:5f:bb:70:16:
38:25:25:da:12:68:21:bd:d3:33:f5:af:ba:e5:77:5e:c2:02:
8d:95:37:cb:e3:4f:e4:d6:a8:e8:93:b8:5c:15:ce:6a:ee:69:
b9:90:eb:0a:eb:34:c6:c6:2f:f6:cd:d2:4e:f2:54:41:5f:ac:
20:98:20:02:f3:73:ae:0c:c1:21:d8:c0:19:4b:03:35:a3:0a:
9f:10:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:56 2026 by rpki-client