Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: vy88xyduyPawgXandt6514Z8yXqHPQWrF1qAygiFLUo=
Subject key identifier: E3:0F:A0:EC:24:7B:16:95:58:6E:48:EE:7C:71:B2:F0:D3:A1:87:81
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019F95EDE0959FF8EDC2225EB02F44F38658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0FD0
Signing time: Fri 24 Jul 2026 21:00:22 +0000
Manifest this update: Fri 24 Jul 2026 21:00:22 +0000
Manifest next update: Sat 25 Jul 2026 21:00:22 +0000
Files and hashes: 1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: 2L2sAn7Kg+3Adcq1As+YpVx8wfD8AOsgSL5SDpw6HS4=)
2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:e0:95:9f:f8:ed:c2:22:5e:b0:2f:44:f3:86:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jul 24 21:00:22 2026 GMT
Not After : Jul 25 21:00:22 2026 GMT
Subject: CN=e30fa0ec247b1695586e48ee7c71b2f0d3a18781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:bd:ee:2b:5a:49:19:74:ea:92:ab:07:a8:4b:
6b:c4:70:ef:8f:c0:52:50:a6:5d:c4:87:12:f5:4a:
e8:28:5d:7a:69:ad:bd:f9:18:08:56:37:f4:78:23:
c6:ba:c4:77:dc:d0:a0:57:a1:23:95:14:4f:21:75:
35:03:89:1c:41:b9:ce:d6:67:4b:b3:2f:75:00:3a:
0c:8d:d0:26:69:70:cd:e3:84:73:c8:b5:21:a4:1d:
a7:94:9b:c1:50:1c:5b:09:2f:c3:63:d9:7b:e3:60:
b0:7e:8c:d3:e5:1e:5d:64:34:df:66:14:29:c3:ea:
24:5e:0c:a5:40:94:9f:8a:43:8a:db:0f:93:b7:64:
75:69:21:52:f9:ce:05:39:f0:23:aa:58:12:2b:ad:
d9:91:c5:a7:ad:cb:4d:7b:0d:ff:4a:fb:31:e0:c4:
1a:83:96:11:8b:a5:9f:5f:3d:0d:dc:10:48:b0:fb:
eb:c5:47:92:57:cf:61:36:62:67:9a:9d:0b:b8:b6:
65:e6:2b:1c:56:c2:e8:34:5f:15:04:c4:16:a1:91:
58:a3:6d:a4:3a:e7:4e:8a:c6:7b:ca:a7:10:b5:eb:
6d:00:9d:09:b0:91:10:23:8a:f4:89:5e:e1:55:83:
c9:6a:50:12:7c:1e:50:c1:4c:2c:73:42:52:db:92:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:A0:EC:24:7B:16:95:58:6E:48:EE:7C:71:B2:F0:D3:A1:87:81
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:f8:6e:87:92:b8:2c:6d:74:5b:1d:d6:24:9d:00:eb:03:
ca:7a:65:04:64:54:0f:3d:4b:fc:c8:05:73:d5:8e:4e:82:2c:
d4:e0:5b:12:f9:35:c2:43:40:7d:a8:a9:22:8f:8e:33:15:68:
49:d4:14:7f:c7:6e:34:d3:44:04:69:3b:b1:be:7e:54:13:e6:
57:fa:db:50:2d:14:eb:b1:83:3b:96:34:7d:80:de:c5:93:fa:
b0:3a:69:97:9b:15:05:0d:95:6f:ca:c3:75:51:40:91:bf:ea:
98:16:eb:6b:fd:24:f6:69:10:76:7e:cf:f8:a8:b5:de:52:c2:
ce:cd:f0:11:e7:9b:66:af:8d:78:02:f9:49:9e:96:83:ab:69:
54:04:a3:b8:39:cf:2c:0a:65:9b:ce:ea:23:f9:1b:2e:01:6c:
2e:b6:96:f7:00:1b:9a:92:74:f6:c2:e9:9f:4a:14:69:26:55:
ae:e1:33:66:e3:63:d6:22:28:87:42:ad:0e:b2:e3:be:1e:e2:
de:1f:fa:57:f6:d4:73:15:c8:73:af:7d:b3:9a:99:ec:6c:c2:
71:bd:1d:ce:29:55:e4:21:3b:ae:8c:b6:90:85:b3:a0:90:d0:
07:24:4c:ba:22:0e:32:f0:fd:ae:82:48:60:86:b9:7d:4c:1c:
55:9e:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:17:20 2026 by rpki-client