Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: 7fXggywvqL0arZCivjOZ5G1TergefDJuIPTWm+9chhE=
Subject key identifier: 97:BE:51:B5:A8:97:08:8C:42:71:E3:C8:6E:89:DC:DB:09:86:17:62
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019F91DA571EC4A8714C099F79FD2569A202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:00:33 +0000
Manifest this update: Fri 24 Jul 2026 02:00:33 +0000
Manifest next update: Sat 25 Jul 2026 02:00:33 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: jtk2eKipTuoJy7gtU8nBqk6hLv/B61kCdwKbQscKaHQ=)
2: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (hash: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc=)
3: ncOjKzjAJZ0rXQZZexy9a5HthBQ.roa (hash: fH171kjhrP2+SN/YSbQ/CikCGMzhjuGR7vctJ9ttA9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:57:1e:c4:a8:71:4c:09:9f:79:fd:25:69:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jul 24 02:00:33 2026 GMT
Not After : Jul 25 02:00:33 2026 GMT
Subject: CN=97be51b5a897088c4271e3c86e89dcdb09861762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:c1:65:83:8c:ba:39:e3:24:dc:82:a8:53:
82:93:13:f6:76:55:24:b6:37:48:e2:bd:a1:8d:b0:
e8:88:d3:d5:f7:04:3f:64:04:24:97:29:43:d1:bd:
47:86:06:3a:57:bc:39:0d:a8:b6:2f:e8:7e:01:c4:
d6:ad:b2:f7:b3:24:e1:32:62:e8:42:b5:72:84:dc:
b2:66:4a:10:90:be:18:97:0c:cf:70:16:0b:55:c4:
7a:69:62:51:9c:79:b9:10:20:4d:62:66:33:11:87:
ee:60:52:68:7b:07:df:db:f0:c9:5d:e7:c4:02:b3:
97:a7:69:e5:5e:68:49:c7:86:8c:24:cf:bc:01:a2:
99:39:2c:8f:95:7e:5f:09:21:37:c1:42:2a:57:4f:
48:7b:54:e4:f6:3e:40:ae:3e:3d:5a:35:d2:28:7b:
80:74:4f:39:35:a0:d0:6c:68:11:c7:e8:8f:d7:d7:
8d:bb:a6:a8:d3:21:d9:38:97:f9:fe:a0:a9:24:9b:
df:2b:7f:f5:d7:e0:82:73:66:99:bc:c4:fa:52:96:
9a:cd:43:ef:3f:07:35:da:bc:ea:a0:5c:d8:21:e0:
70:7d:b2:f5:83:d9:58:83:ac:0c:15:61:c6:bc:41:
92:d6:91:98:42:d7:ed:dd:9d:33:80:05:d9:05:1a:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:51:B5:A8:97:08:8C:42:71:E3:C8:6E:89:DC:DB:09:86:17:62
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:12:5e:9f:c0:9f:fc:c8:3c:ac:d4:a0:30:46:8a:de:a9:
03:65:c6:37:0d:a3:55:dd:c5:04:61:f7:15:7c:64:81:d0:ca:
1f:e8:11:1f:ce:e5:82:fa:91:f4:12:ce:f9:48:63:5c:b3:c5:
87:25:90:14:a5:33:74:ec:60:10:dc:2b:c6:30:fb:b8:b8:3b:
21:fe:86:52:67:bd:71:de:46:28:6d:cf:e0:c8:6d:e8:b1:5e:
b7:a4:72:17:44:e7:bc:fb:cb:87:3d:f7:93:88:49:bf:da:5c:
0a:e1:e8:58:63:0c:3d:19:c3:88:0d:0b:dc:dc:ea:b1:05:6d:
97:b1:67:32:8e:72:a0:34:94:9c:8a:c0:fc:f4:fe:fd:b9:1a:
60:22:4d:ea:7e:0f:49:ca:e7:47:7e:d1:10:78:65:78:f8:8e:
a7:b4:ba:b4:94:a3:8f:04:dd:87:b4:9e:3d:75:a3:d2:cf:aa:
7f:a4:b9:75:25:7e:21:86:83:8a:9f:e2:da:f6:bb:f8:cd:25:
cd:cf:3c:b1:d1:a9:bf:08:49:5a:e9:bb:be:95:8b:e1:60:98:
9a:de:6f:95:40:8a:3f:3b:1d:c7:63:cb:3b:00:51:38:0e:16:
2a:e5:53:cd:12:8a:96:3c:b0:2d:4e:31:5e:0e:23:42:df:dd:
63:3d:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:10 2026 by rpki-client