
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
File: 5D_0Mpxm5bDVELjy6viwfn1ce0A.mft (raw, json)
Hash identifier: WlOwaqHsg0xNYwCQEoQ+o6RJ7pXMSsXMLz6b+2rosb8=
Subject key identifier: 04:1E:7D:1B:62:A4:01:30:0E:38:0A:80:E8:E5:1B:F3:5C:71:2D:4F
Authority key identifier: E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
Certificate issuer: /CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Certificate serial: 019F8F7F52780870C9940D20B6AD86206266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:53 +0000
Manifest this update: Thu 23 Jul 2026 15:01:53 +0000
Manifest next update: Fri 24 Jul 2026 15:01:53 +0000
Files and hashes: 1: 5D_0Mpxm5bDVELjy6viwfn1ce0A.crl (hash: UK0ULTref6LLRGuh9HrCz5W5S7pR4+HsPkd8SG//v5s=)
2: vMzqrHDtZQseD1IfDrA-iShDNwk.roa (hash: cIZbKSavouxTcPZPOTmND0k51VrW5LYVlRN+D9j5W+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:52:78:08:70:c9:94:0d:20:b6:ad:86:20:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43ff4329c66e5b0d510b8f2eaf8b07e7d5c7b40
Validity
Not Before: Jul 23 15:01:53 2026 GMT
Not After : Jul 24 15:01:53 2026 GMT
Subject: CN=041e7d1b62a401300e380a80e8e51bf35c712d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:b7:02:4c:f4:50:05:b1:56:fd:fc:9f:1b:
b3:cc:8a:48:f9:21:40:19:e9:a7:ad:e6:a8:22:a9:
06:49:7a:2a:3d:ea:77:7c:b4:34:42:1b:09:ab:cf:
9f:6f:17:06:52:8f:be:b2:1a:32:46:1a:bb:ab:84:
b5:06:26:ef:56:bd:18:32:0e:72:dd:77:46:a1:43:
2d:ad:68:e3:f3:b2:8a:40:7d:c5:fd:f4:d0:b9:d0:
34:06:90:da:9d:67:28:06:9e:72:90:a2:af:ed:bc:
74:87:c8:f5:65:a5:45:74:16:76:15:18:08:75:2d:
c1:ab:f3:3d:41:41:a8:4e:3d:c1:60:e1:e6:7a:53:
82:fa:60:4c:cb:4a:25:d2:65:36:0d:5a:1f:8e:1c:
08:25:00:ca:cd:2d:ae:51:57:b4:9d:fd:bb:77:43:
5a:b8:8c:eb:b1:4b:17:b9:e6:df:4e:5e:75:0f:3f:
63:12:93:93:02:66:ad:f8:1a:39:4b:e2:7d:3a:08:
1a:a6:72:4d:25:7a:38:b1:a3:b0:d3:df:34:67:f5:
54:61:b0:9c:e6:c3:19:dc:b0:52:d9:76:fc:02:1c:
b5:a6:30:37:27:22:7f:9c:fa:50:cf:25:93:7a:9d:
a7:80:ff:5f:8c:7f:37:5f:19:ed:eb:6a:0a:3b:c5:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1E:7D:1B:62:A4:01:30:0E:38:0A:80:E8:E5:1B:F3:5C:71:2D:4F
X509v3 Authority Key Identifier:
keyid:E4:3F:F4:32:9C:66:E5:B0:D5:10:B8:F2:EA:F8:B0:7E:7D:5C:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D_0Mpxm5bDVELjy6viwfn1ce0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/5D_0Mpxm5bDVELjy6viwfn1ce0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:e8:f3:54:0e:55:fe:b8:af:3e:9a:53:39:00:57:d7:0e:
00:3a:40:5c:69:87:4f:a5:be:c9:c9:d0:f7:1e:ef:af:9f:51:
ab:3a:d2:b9:d8:f3:31:32:84:cd:51:1a:ed:1e:4a:e0:b0:39:
99:7c:a6:fb:9f:bc:45:3f:61:a0:c7:08:35:c9:27:48:16:0a:
95:30:01:a1:da:04:e9:7f:38:7a:6d:74:29:e3:0f:7e:a0:e5:
be:b9:56:cb:b6:2a:77:1b:ae:7a:12:c8:1b:8e:d0:07:cf:8d:
1b:be:67:1f:fd:88:9b:5c:82:32:32:6b:5b:91:56:cc:16:1b:
b7:18:fb:b9:6d:ff:2d:12:51:56:ad:e6:08:46:4b:dd:f6:d1:
bc:6f:1b:f5:ff:70:d1:23:b5:02:6b:d8:9c:ea:ce:18:2f:0a:
f9:b8:54:ce:22:15:77:ce:63:18:80:bf:ea:54:83:30:a1:58:
5f:85:2a:f0:60:20:63:57:f0:c4:f1:10:75:15:12:00:05:c3:
98:b0:9f:79:76:67:1f:5b:71:f2:cb:a3:b3:3d:ca:19:3e:88:
d4:ae:80:17:fa:d6:57:24:69:11:0e:56:35:02:39:9a:1e:ab:
5f:11:d9:7e:cd:9a:ff:7b:a4:5d:f7:f5:c4:15:1f:c2:c0:00:
65:d1:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:26 2026 by rpki-client