Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: Q20RlH+Jqr46EDJviI5X5GHZ2W5SfJvSaPHxU/zdESI=
Subject key identifier: 03:E0:BE:59:18:5D:71:56:7A:8C:4B:61:87:55:D7:DE:1C:50:92:F4
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019F8EA2B48D8A0204B5C05D265F59BE61B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: 9U2gzAHMQAtRK1gQNHxjr09eebA.asa (hash: AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=)
3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: NKrca0mMSFXu3QdLTSHV1OAXmssbVIHtttcQSA9gV94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b4:8d:8a:02:04:b5:c0:5d:26:5f:59:be:61:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=03e0be59185d71567a8c4b618755d7de1c5092f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:8c:ba:53:de:7d:29:25:30:d6:33:4d:20:
29:16:93:e3:23:b5:67:95:32:e2:0a:a9:5f:7d:85:
2d:e9:94:fc:0c:d2:f7:05:6b:24:f1:aa:d1:f6:09:
69:0c:2b:e0:26:1d:b3:b6:c2:93:6e:7e:2f:0b:66:
61:e1:dc:55:e9:bd:fc:75:86:f5:bc:d8:23:8a:29:
17:78:7f:5e:8f:bc:c3:1b:84:ee:67:c9:20:ed:55:
01:f0:a4:d7:10:8b:26:be:62:b4:40:22:2c:18:dd:
94:dc:c6:ba:92:14:28:ce:0e:93:70:b4:3d:bc:56:
bd:a3:0d:e5:da:e5:fe:eb:10:4b:cf:13:30:b5:ef:
66:14:01:af:47:2a:77:e8:0f:a9:d8:c8:27:02:fd:
97:20:90:6a:27:94:9f:a1:2e:01:43:d5:6d:a3:01:
11:2c:5e:97:69:22:dd:2a:ac:17:38:10:50:7b:15:
e3:89:67:b2:89:d6:58:05:97:6b:66:a5:2b:14:93:
25:6a:5d:13:38:b0:fc:21:ac:23:7c:6b:36:df:b4:
53:e9:cd:81:a7:6b:bd:e6:28:b5:3d:53:2b:bf:57:
e5:81:12:d4:94:33:95:d7:b8:3e:49:f0:bb:19:2c:
69:7b:2e:61:0c:e0:95:b0:ba:bb:52:20:4c:19:72:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:BE:59:18:5D:71:56:7A:8C:4B:61:87:55:D7:DE:1C:50:92:F4
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9c:cc:45:94:97:cf:b6:7d:0d:a6:de:7b:1b:da:77:4e:8e:
7e:ab:8e:5d:80:b3:ba:f2:f5:ab:ba:52:6e:67:0b:dc:ac:b2:
c5:52:a6:f6:0c:fe:f1:e9:36:af:ee:8b:23:57:7a:85:2d:d2:
1b:36:87:73:b6:b9:36:54:72:f0:de:fa:c9:f7:c4:9c:79:b8:
1b:ab:61:82:9e:e9:ef:61:31:36:53:df:52:43:0b:e0:09:b3:
77:a6:cf:14:f4:59:4b:ac:df:9c:1d:d2:ae:91:a4:c8:77:54:
56:4a:5c:97:e7:65:88:23:a7:98:eb:7a:95:53:73:32:08:6b:
cd:f6:12:3f:01:b1:b4:12:15:7b:e4:2e:ac:c7:e3:11:f2:94:
6a:26:76:a7:99:2a:dc:be:fd:14:a5:b0:e9:f1:fa:f2:ea:bf:
7d:84:07:a8:13:3b:82:f5:9e:27:69:16:b9:07:b7:5e:74:86:
bf:aa:15:09:e4:11:65:e1:d3:40:71:4c:76:da:dd:54:1c:4b:
69:f9:27:72:74:c3:e2:a8:46:cf:b7:61:be:3c:e6:77:e7:3d:
89:d3:ff:bf:34:1a:bf:14:9d:3c:62:11:1c:b3:ce:44:d5:f5:
c7:84:d3:1e:79:e1:62:4d:0b:fb:b0:05:c9:36:a5:64:71:13:
20:c7:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:50 2026 by rpki-client