Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: w8y8E0HW+5VfW4lfD48y86+9fV+vBavtP1xZoATndJ0=
Subject key identifier: 00:E6:45:09:CE:F1:C7:87:69:A3:F5:BB:60:A1:F2:05:DF:4A:95:E3
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019F927F3AB8B240F681F7E7816C0CCCA755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 05F6
Signing time: Fri 24 Jul 2026 05:00:39 +0000
Manifest this update: Fri 24 Jul 2026 05:00:39 +0000
Manifest next update: Sat 25 Jul 2026 05:00:39 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: IxCP0VS5y7ZaCICua3hPWuzItAzMZTfU+OEoAfEhjbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:3a:b8:b2:40:f6:81:f7:e7:81:6c:0c:cc:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jul 24 05:00:39 2026 GMT
Not After : Jul 25 05:00:39 2026 GMT
Subject: CN=00e64509cef1c78769a3f5bb60a1f205df4a95e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:ee:1f:c3:94:66:22:96:7a:ae:ad:77:fa:
00:40:cb:be:31:a9:b8:93:99:0b:1b:04:a4:86:e5:
d1:da:54:1a:ef:f6:ae:4b:56:b1:d4:3e:0f:bc:67:
4b:9c:85:ca:ef:be:a4:9a:f2:6c:a3:a3:9a:90:bb:
38:08:dc:5c:8e:2f:2f:16:14:49:df:45:a0:16:95:
24:aa:e4:4f:1e:9b:e7:d7:30:89:59:86:b4:b9:8b:
cf:bb:c7:a7:c0:de:11:df:3d:6c:75:31:fa:0a:34:
75:7f:b2:2c:2d:e0:c7:b6:a4:31:8e:3c:f6:7b:3b:
5b:d7:ba:f6:25:38:a7:fd:37:30:63:f5:d2:b9:0a:
62:05:90:46:30:58:a0:53:21:0b:a7:4a:15:bb:c8:
a5:81:42:13:14:d9:a2:b2:0e:a4:1e:ee:dc:ce:ad:
58:fc:ec:15:50:df:c9:5b:d2:57:f4:d8:ee:e6:d6:
cc:9a:49:73:84:f4:6b:3b:ef:ea:b2:88:1e:a5:b3:
64:7f:3c:88:bf:92:10:7a:04:90:18:31:26:d4:64:
f1:d8:5c:a7:8f:03:fa:db:d0:a1:88:ce:8b:31:43:
f9:9d:ec:84:4f:d6:55:5d:3b:12:a2:36:66:5d:f0:
37:0b:62:05:34:b1:37:e2:41:52:f5:b1:d2:36:b0:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:45:09:CE:F1:C7:87:69:A3:F5:BB:60:A1:F2:05:DF:4A:95:E3
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7a:ea:9c:09:c7:2c:a0:5c:3f:eb:33:be:54:f2:14:91:85:
a9:77:02:cd:b6:9c:7f:2f:7b:51:ce:1c:61:1f:82:3b:ac:57:
2e:b8:84:6f:d8:e3:61:91:a8:c1:e1:1e:2a:36:41:ca:f5:49:
b5:c9:17:65:fa:96:9b:4b:6b:7d:44:b4:69:11:ac:76:cf:36:
0c:3e:c0:7d:12:ba:b1:5d:78:2f:5c:db:51:d3:20:5c:a7:09:
41:21:14:c4:16:05:0a:f1:dd:cf:98:2a:5d:d6:c5:9d:42:76:
c0:17:71:1b:d2:d6:32:49:50:18:76:3a:f5:20:30:4f:05:cc:
dd:64:e2:07:47:36:03:60:a2:3a:1b:f2:ca:25:b8:8d:30:c5:
6b:12:90:01:f4:dc:22:ba:db:e5:45:a5:b2:3e:74:d1:44:e2:
90:9a:4e:10:b1:a5:3b:56:1d:20:fb:5e:27:7b:03:89:8c:e9:
49:1e:1c:0a:59:e9:9a:94:f2:85:ae:1c:7b:82:6d:04:72:38:
3b:b0:01:99:84:42:50:9a:6f:29:b0:e4:c5:3f:e5:f5:8c:64:
29:26:f1:94:58:5e:85:cf:5c:9a:57:81:91:c2:bb:7d:83:b4:
c4:4a:df:23:0d:8a:be:a0:e4:9d:a8:b1:42:72:b1:3f:6e:71:
d0:81:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:58 2026 by rpki-client