Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: Ywh6mTH7sgUhPKOhf9OHcPkKA+Do9GIKniUPisfovYQ=
Subject key identifier: A2:A2:52:30:BA:8C:E7:B4:C3:4E:EF:9C:F9:C0:45:9B:8B:BC:F9:36
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 019F91357F3717276BFEB4C71E4C181424A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:00:29 +0000
Manifest this update: Thu 23 Jul 2026 23:00:29 +0000
Manifest next update: Fri 24 Jul 2026 23:00:29 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: BJV9/L6glxF3mDdLuF2cLNDcv2c35SqBjzZIwpnNbzE=)
2: q6jiQ8kIIOAVEl2Xp2qX5_pMoSI.roa (hash: nTyqp5QiWNzkKcVcQsp2jGxyBaOXuQpq1p5YA426WVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7f:37:17:27:6b:fe:b4:c7:1e:4c:18:14:24:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jul 23 23:00:29 2026 GMT
Not After : Jul 24 23:00:29 2026 GMT
Subject: CN=a2a25230ba8ce7b4c34eef9cf9c0459b8bbcf936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:c5:e3:17:24:d4:e9:ef:81:ae:62:d1:07:
28:6a:0e:cf:16:ec:ff:5a:91:1d:43:bc:04:2b:e1:
b8:fd:d7:81:a4:1a:a2:53:fd:b1:46:d7:94:6c:92:
9b:f8:5d:8e:63:92:b9:49:a3:c3:f6:33:7e:c5:25:
04:d5:aa:69:0f:2e:88:0b:fd:59:b6:22:a8:1c:a4:
a6:53:9c:ec:d2:65:e5:6c:77:44:75:26:37:d8:c9:
12:b2:b1:ec:9c:37:4f:1d:2b:74:c6:8e:58:78:c6:
88:77:7a:ab:0e:f5:8e:ec:1c:2a:4a:f6:3b:8a:be:
15:7e:88:f3:80:e5:21:18:2b:ea:a9:99:ac:03:58:
64:b8:a9:de:57:2c:8c:5e:af:35:0c:a0:37:0c:f2:
e7:a8:fe:1b:da:e0:42:da:c6:3c:89:07:cd:8a:03:
97:57:0e:c0:e3:1a:9b:0b:d0:37:ed:46:ac:aa:4f:
41:25:69:b2:33:f0:55:11:ed:0f:3f:69:48:e4:66:
ab:59:62:dc:d5:35:d0:17:d5:48:00:ad:a2:16:02:
12:92:f5:e2:75:59:7a:2c:1c:51:88:ff:48:d2:b6:
52:ba:c9:76:8e:5f:e5:57:71:6c:ba:b8:6b:d1:91:
9f:2d:95:cb:d6:88:e3:2f:9a:8b:a4:a9:ef:97:ed:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:52:30:BA:8C:E7:B4:C3:4E:EF:9C:F9:C0:45:9B:8B:BC:F9:36
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3b:6b:3c:af:ea:5d:bb:2a:a0:c1:a0:3d:bc:a7:e5:fd:35:
2f:4b:da:97:94:12:2b:ca:e8:1c:1c:92:e7:c1:6b:f2:bb:b0:
dd:b8:50:eb:8b:97:2c:86:6b:62:4c:9a:4e:a8:85:da:05:7e:
30:8e:0a:80:df:e1:fd:c4:ab:61:14:19:6e:44:4a:f0:51:cb:
62:f0:df:ae:1c:38:ee:35:3b:90:0f:d9:15:a9:31:33:43:61:
df:e8:ac:ac:8d:79:1b:c7:e6:75:cb:9a:0e:67:14:28:2a:1b:
7d:4b:36:fa:f8:6c:2d:4e:19:b5:01:80:84:d3:89:db:29:5b:
9a:38:24:ee:27:a4:86:56:32:65:12:2e:af:d5:d9:d1:be:2d:
c5:a6:71:f6:62:b5:e3:be:05:aa:13:af:f7:4e:9b:40:81:e6:
ae:24:ad:c6:97:5d:6e:8a:84:97:34:37:bd:ae:aa:08:3a:af:
c2:5f:4f:04:48:96:63:2a:50:d0:09:98:f9:a7:2a:b9:30:71:
b4:e9:0f:34:ce:e6:71:e7:f8:07:bd:fc:9c:c1:32:62:55:6c:
6c:ef:ae:8b:5e:27:87:a7:8f:59:c2:95:59:de:da:f8:95:a6:
ca:68:77:ac:d8:a7:b5:cf:24:e0:c0:25:0b:ee:70:c8:a8:45:
8f:07:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:25 2026 by rpki-client