
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: uvKrI+/VYg3zP/FrCT9Z7P9gVGXn6qkFXXO/PadpYJs=
Subject key identifier: 6F:46:CB:E7:9C:E8:E3:BD:C7:2B:8F:42:B6:86:01:73:83:4E:B0:AF
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019F94366D8892DE7F3522A27FDBC0A5C85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0CAB
Signing time: Fri 24 Jul 2026 13:00:22 +0000
Manifest this update: Fri 24 Jul 2026 13:00:22 +0000
Manifest next update: Sat 25 Jul 2026 13:00:22 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: zt6dTpw2ai/lHCQ2aqLjE7vjie4fqlxYRNo5kQD+MhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:6d:88:92:de:7f:35:22:a2:7f:db:c0:a5:c8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jul 24 13:00:22 2026 GMT
Not After : Jul 25 13:00:22 2026 GMT
Subject: CN=6f46cbe79ce8e3bdc72b8f42b6860173834eb0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:90:78:28:b6:f1:34:09:f5:83:a6:2a:15:
e0:87:e9:67:2a:5c:41:1e:10:cc:5c:a7:26:70:b3:
e5:60:ee:3d:ad:66:85:a2:27:36:58:03:dc:dc:52:
11:94:d5:44:c9:17:6a:21:43:0e:4b:6f:c9:f3:b5:
2b:85:be:40:8a:0d:c8:70:24:e8:9c:49:0a:e3:b4:
92:4f:cb:b2:4b:0c:31:25:12:30:f4:b4:c5:d1:4d:
eb:6d:46:37:22:ae:b2:44:57:2d:ca:6b:d2:ff:1c:
64:83:4b:76:a7:08:cb:58:39:0e:aa:f2:db:cc:13:
71:c0:9b:41:80:e8:ee:0e:58:97:4e:3d:26:d3:5f:
60:2b:67:96:98:d6:9f:69:5d:a5:98:c0:18:57:95:
01:e7:a8:f7:79:81:fd:8f:cc:fc:9b:5d:df:14:2c:
82:f4:9a:da:d1:16:49:85:8d:0d:15:0a:8c:03:92:
63:12:fd:9f:d4:74:e9:26:1e:2c:db:30:9e:b6:96:
86:8e:f6:2f:4d:07:be:77:e9:6c:40:b0:2f:3b:d9:
2f:22:c5:ee:8e:dc:5f:9b:a9:e3:25:9d:a9:7e:ff:
a9:8b:0c:e2:f7:d4:64:41:c7:1d:fb:e7:45:8d:59:
91:96:76:03:35:d9:f5:76:bd:f0:8b:5d:42:87:b9:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:CB:E7:9C:E8:E3:BD:C7:2B:8F:42:B6:86:01:73:83:4E:B0:AF
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:66:3b:e1:1c:15:8f:26:a5:f2:d5:c4:e0:06:67:49:f6:c2:
39:0b:3b:a7:1a:77:30:ab:6a:70:e1:9c:53:90:e5:3b:f8:3c:
30:f7:fc:79:ff:94:46:1e:c3:bb:47:78:dc:a1:07:90:27:27:
65:86:d9:33:85:2d:a3:a2:ad:5b:a4:a0:87:95:9c:50:ec:73:
77:74:8e:7b:62:78:00:38:2f:84:8d:20:5c:ea:82:da:1c:68:
ae:48:6e:ea:8f:7a:e6:4b:d1:f3:72:34:0a:a4:e5:a1:77:0d:
ce:9e:53:3b:8a:58:bd:03:da:59:fd:5a:a8:9f:d8:70:12:ec:
45:c3:d4:36:b9:59:20:71:80:b8:f4:3b:38:da:dc:0f:41:44:
fa:11:58:53:d8:a4:4a:13:b3:a7:85:a2:28:30:67:9e:f3:71:
cc:ac:78:02:0f:f2:65:0b:30:b3:d9:2a:69:78:9d:d8:6c:5d:
ea:2a:6a:b7:34:87:eb:bf:24:a3:04:d2:ee:c5:a4:1e:65:fb:
d2:b0:8d:39:44:86:cd:81:5e:20:5e:cc:a7:3f:b7:63:78:9d:
fc:fc:ce:ad:39:d8:4c:21:75:f4:db:49:b5:3c:ee:cb:ba:a4:
75:21:29:52:1d:c4:a6:90:d2:42:b1:04:a3:c7:d0:e9:9c:2c:
07:24:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:28 2026 by rpki-client