Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: qxJcI7vS4u8gsiLKDCFdAiL1MPTgU0WvXqYsCfMbynk=
Subject key identifier: 14:AD:3B:24:15:67:DD:88:B0:F3:DB:19:16:43:4A:9D:81:20:F9:5A
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 019F8FECB6397CA77C72DFEE2815C63730D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 17:01:22 +0000
Manifest this update: Thu 23 Jul 2026 17:01:22 +0000
Manifest next update: Fri 24 Jul 2026 17:01:22 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: yTLUr0VqWjXHJMIfBRxmT6zktqqWefPiI3k9ApTEygI=)
2: e2x_8PpcIHOJJPXsPBjrkhlkVvo.roa (hash: QXzcET22GY2j2zVB7MrhPNOcYIzpk5pDfm9vuuXWqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b6:39:7c:a7:7c:72:df:ee:28:15:c6:37:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Jul 23 17:01:22 2026 GMT
Not After : Jul 24 17:01:22 2026 GMT
Subject: CN=14ad3b241567dd88b0f3db1916434a9d8120f95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:07:d1:87:e8:fc:2a:d0:5d:2b:01:de:af:
e6:b2:f3:82:20:45:7a:c0:d5:82:74:bc:2e:bf:73:
8b:e1:a3:a1:fa:78:06:65:07:63:57:ab:91:ae:66:
e8:ce:b9:a4:6d:d2:ac:10:90:44:92:05:82:3c:cb:
75:90:99:5f:7f:6b:1e:95:ab:c2:a5:e4:0f:14:b6:
44:da:0d:60:6e:99:67:de:96:5c:f1:47:a5:4e:a0:
22:fb:37:81:aa:81:49:bd:a8:6d:de:0d:64:ec:22:
ad:d5:41:a7:24:e7:7d:5f:87:a2:51:7a:5a:be:09:
28:c3:eb:3a:46:89:26:a1:fa:47:3f:f3:31:2a:97:
bc:0c:ae:0d:ea:42:bd:00:ad:12:d5:39:3a:1f:c4:
6a:b5:c9:b1:5e:ba:4e:d4:c6:7b:03:56:44:9e:1b:
9b:46:19:4c:65:88:5c:c4:84:86:5b:0a:b0:66:c0:
df:e6:b8:be:15:c1:7c:ec:08:50:80:b0:26:68:da:
e4:34:dc:47:fe:87:00:2a:67:fd:0b:73:28:d0:be:
3b:b7:4c:b7:50:5b:c3:01:07:36:8c:d7:a3:0e:6a:
0b:68:f2:ab:ab:a2:4f:3b:df:64:f1:1e:14:6f:f2:
bc:dc:3d:74:2c:2f:dd:02:65:b0:e0:d3:de:1a:ce:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AD:3B:24:15:67:DD:88:B0:F3:DB:19:16:43:4A:9D:81:20:F9:5A
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:fa:4d:a4:56:13:23:f3:41:f6:19:fa:80:e3:d6:fa:74:
18:4a:12:0a:3c:7a:6d:10:9c:9e:30:63:04:bf:21:a2:5c:0f:
64:47:52:b7:a8:15:35:55:31:3a:53:56:2c:3d:72:e7:83:00:
07:19:4b:13:2a:f8:1e:da:45:91:48:e4:3e:57:73:1b:b5:ce:
1f:e0:12:74:e9:25:87:1d:98:d9:36:ea:c5:00:26:41:c9:17:
1e:7c:ef:88:a8:bd:e8:ed:84:bb:c2:c8:36:eb:2a:96:5d:d8:
74:82:55:d3:dc:0f:35:92:d5:9c:2a:ce:bb:85:99:6f:08:ae:
bd:77:32:cd:65:23:7e:39:e7:04:ff:3d:00:06:0d:06:36:60:
ca:38:dc:c5:24:92:f8:35:85:44:30:97:e8:76:d8:62:d9:d7:
c5:98:95:8c:0b:c3:21:a9:c8:04:ca:56:7a:83:f1:73:b6:ae:
03:2e:40:68:13:5a:35:e5:6a:ef:45:ab:b2:65:8f:72:71:fc:
bf:f0:9e:3f:2e:86:98:33:16:f7:0a:d0:fa:b3:70:37:be:6a:
65:27:65:9c:74:4f:dd:69:b8:38:ca:fb:db:cf:03:ca:da:e4:
77:46:0a:d7:da:f9:76:f6:1e:6b:f4:77:c0:b0:f6:35:48:f8:
5c:10:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:03:36 2026 by rpki-client