Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: BarIjo+VYLlMAZPXwrREQiILUghzZT+YfGUaQLcm1Dw=
Subject key identifier: 0F:99:60:90:D6:4B:30:B6:DE:CE:A0:B4:9A:9B:E3:3A:8D:50:20:E4
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 019F946DB89579F6B628499D6885999075FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 117B
Signing time: Fri 24 Jul 2026 14:00:46 +0000
Manifest this update: Fri 24 Jul 2026 14:00:46 +0000
Manifest next update: Sat 25 Jul 2026 14:00:46 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: mQqBA7NzMVbMvYjCg+sIDg3CTzJPb1iHE3ykRi5hIt0=)
2: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (hash: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:b8:95:79:f6:b6:28:49:9d:68:85:99:90:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Jul 24 14:00:46 2026 GMT
Not After : Jul 25 14:00:46 2026 GMT
Subject: CN=0f996090d64b30b6decea0b49a9be33a8d5020e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:74:2a:ca:0e:b1:af:91:fd:2f:0b:1a:b6:
49:3a:f1:2f:91:dc:0a:bd:0b:59:39:02:6c:c1:4b:
e8:e3:90:93:ca:2f:6d:0e:d3:0a:09:91:4a:37:54:
be:39:fc:c2:01:14:fe:68:ad:b3:1a:24:1c:69:29:
79:ca:2a:7b:25:f3:7f:a5:c7:70:75:39:b0:84:51:
d2:6f:63:93:78:08:a7:d1:77:50:7d:bd:5f:31:05:
a8:4f:05:bf:c6:e0:18:c2:4c:b1:29:f7:48:3a:70:
3b:55:6c:fa:71:fe:3b:05:7d:0e:1a:08:84:91:4c:
23:d4:84:41:0b:b4:ad:b0:3a:8b:4a:71:b5:99:0b:
9c:4e:03:39:6b:00:ab:77:fa:13:90:e3:f1:64:aa:
24:6e:da:5e:90:21:d1:8d:b6:0b:32:33:9b:68:de:
e3:ea:3d:7b:49:8d:37:a3:c8:44:61:90:bc:7c:9c:
08:09:67:e0:53:e3:34:d9:1f:b3:07:97:40:13:04:
e3:7e:49:0e:b2:38:48:87:02:12:91:0b:dc:0a:a3:
5e:bd:99:b9:80:7e:13:5b:99:a3:94:0c:35:7f:12:
9a:5b:66:99:32:41:80:0a:1e:9f:fe:13:c3:95:16:
fe:52:f8:a5:4c:a1:9d:01:a1:30:aa:2e:d8:9b:51:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:60:90:D6:4B:30:B6:DE:CE:A0:B4:9A:9B:E3:3A:8D:50:20:E4
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:bb:14:1a:da:68:bb:18:6c:23:60:b3:f3:3d:38:d3:03:
cc:e2:1e:a6:9a:44:e8:03:03:c2:59:c6:56:7b:5e:c1:55:1d:
33:ad:29:8b:70:06:f9:ea:4f:5e:4d:08:a3:c6:7d:c4:33:f4:
93:91:61:a5:ab:c7:ce:a7:37:b5:41:5b:bf:bf:67:67:2f:f4:
63:34:59:af:4f:1a:25:2d:58:2f:fc:2c:db:5a:97:c1:95:e7:
54:39:90:92:f1:40:4b:b9:8a:a9:41:e2:68:a9:c9:4b:43:6e:
d0:12:8f:70:59:5c:f4:e9:28:82:78:fc:f9:89:c1:e6:c9:77:
29:4d:78:2d:ad:d5:91:e5:b2:ae:7c:22:8b:a7:96:2f:63:bb:
32:d9:06:80:35:5d:c0:21:7a:74:86:f7:27:68:69:7d:44:33:
05:8b:88:2a:44:fa:de:e1:ba:da:22:92:27:f6:24:1b:b7:8b:
a0:6e:29:4d:19:f7:7e:3c:be:e8:66:65:20:78:2c:68:f1:ab:
6c:59:ab:32:74:4a:02:7d:69:8a:be:ae:e6:cb:bc:ff:d4:5d:
b4:f4:2a:55:08:74:ed:0c:42:04:7b:15:9f:77:c2:5b:32:c0:
f6:94:f8:af:b5:f0:33:0e:d4:51:99:09:48:30:d5:74:a3:f9:
eb:62:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:31:58 2026 by rpki-client