Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: hCr8MQYoHSWkWibufT6eIHggq5l5FZgldZB2a19zpEQ=
Subject key identifier: CE:C0:F6:DB:5A:CE:7A:F1:C5:24:66:6B:15:5A:9C:B0:B3:DB:07:8D
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 019F916D70BD1815F21F3D1C3DA659FFA900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:36 +0000
Manifest this update: Fri 24 Jul 2026 00:01:36 +0000
Manifest next update: Sat 25 Jul 2026 00:01:36 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: k5tCw41UKP8fvvtGwfoByimjAh5FtpgMWm3C+bx+4IQ=)
2: ymGU-blAl3Eiudw-0pPU5E8cWuM.roa (hash: sR3zp4LyEopkmIvV+/IzzZmry6sELnZ6ai0YOhaDCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:70:bd:18:15:f2:1f:3d:1c:3d:a6:59:ff:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jul 24 00:01:36 2026 GMT
Not After : Jul 25 00:01:36 2026 GMT
Subject: CN=cec0f6db5ace7af1c524666b155a9cb0b3db078d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:ad:08:41:49:07:91:b7:97:df:92:01:78:
e0:4a:1e:3a:1d:81:f9:c1:5c:a2:37:2d:fa:49:df:
66:b6:6f:84:f8:75:e9:04:0a:92:b5:7c:4c:8d:a0:
6a:f0:fa:c8:b9:80:ee:fe:38:0f:9e:b7:71:d7:88:
e0:1a:ad:6c:83:96:e8:a4:7d:6f:b1:9b:d4:b1:a1:
3a:b6:da:55:8a:e4:14:8f:66:4d:f9:38:47:b9:00:
ca:06:21:17:b5:32:92:9b:70:06:27:54:36:9c:b0:
b5:e0:c3:c1:a0:59:52:dc:00:51:c5:46:5a:53:87:
58:f1:9a:be:e3:5e:cc:66:01:6f:5b:74:c7:14:5e:
2f:8c:f1:7d:fb:39:95:3a:b2:7a:43:b4:47:71:5c:
ad:8b:15:5d:0f:fb:5d:e3:99:fa:af:b3:3e:e1:49:
15:84:fe:c4:24:ca:23:88:1d:a6:69:0d:c7:3a:ef:
17:26:65:d5:9b:b5:08:bc:3b:3e:82:86:1c:dc:c1:
87:cc:56:a1:74:3d:1e:f4:52:97:e4:9f:06:c9:e9:
32:b0:55:99:c6:5e:17:a6:af:1a:86:a5:57:f9:2d:
ba:5c:41:db:10:91:cd:56:a6:f8:ad:cd:ce:87:60:
56:91:d0:4d:f5:3c:46:30:bd:6c:85:0f:e9:6a:96:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:F6:DB:5A:CE:7A:F1:C5:24:66:6B:15:5A:9C:B0:B3:DB:07:8D
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:ec:94:48:c7:87:ce:99:17:ec:09:54:ee:c9:54:42:33:
fb:84:1f:b8:0c:05:ce:92:d3:ab:ec:0a:f2:80:e0:c9:c2:e9:
86:43:42:87:72:5a:c3:79:37:17:99:94:38:40:6d:12:90:cd:
12:a6:3a:10:1c:6c:99:1d:7a:95:24:31:be:23:7f:91:a9:d8:
78:ef:e6:2e:9f:ad:bb:d3:4e:d3:fe:0e:f3:ec:10:1a:e7:4e:
ae:b2:db:0c:d6:94:42:70:bf:d9:dc:56:0a:d5:83:db:22:e8:
75:bb:91:1d:a3:a5:f4:c5:f7:e3:ea:19:49:c4:ff:2b:4d:8d:
93:22:05:34:41:6b:54:64:92:29:a4:d0:c3:29:12:36:62:a1:
68:6b:17:39:b4:eb:0a:64:8d:34:e7:4b:b3:64:64:91:0f:44:
9f:37:b4:b5:93:51:3d:db:47:4e:5e:1c:31:71:f2:cb:d6:f4:
98:8d:c4:17:b7:bc:7a:04:87:36:81:ee:f5:53:fe:4a:48:8d:
e1:ee:f4:4f:a9:de:cb:35:02:68:82:99:6a:e8:1d:00:eb:4a:
b6:86:dc:e2:00:77:b5:12:01:ed:db:e1:43:7a:01:a0:86:6d:
78:d7:0c:51:dd:05:62:94:48:6c:ae:c0:f5:0b:c1:1f:74:31:
72:4e:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:12 2026 by rpki-client