Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
File: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft (raw, json)
Hash identifier: dFHTtmAODK2mHZmjJVTXBXkRl2iEuqjd68j7fOg52GY=
Subject key identifier: 3A:B0:22:45:AA:A3:40:39:44:1A:37:3D:24:6D:03:8F:A2:30:19:CE
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 019F916C82F8374A18772B1E6CBA9B52F310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:35 +0000
Manifest this update: Fri 24 Jul 2026 00:00:35 +0000
Manifest next update: Sat 25 Jul 2026 00:00:35 +0000
Files and hashes: 1: 5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl (hash: NJmYZk3nOO3C/bVkekBW5DtpDV/32IUKjE8curRHdl4=)
2: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (hash: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:82:f8:37:4a:18:77:2b:1e:6c:ba:9b:52:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Jul 24 00:00:35 2026 GMT
Not After : Jul 25 00:00:35 2026 GMT
Subject: CN=3ab02245aaa34039441a373d246d038fa23019ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:39:24:b6:72:c8:84:85:4a:07:46:9e:72:
3e:96:fb:15:f6:3d:2e:ce:72:76:18:91:4c:d5:cd:
0b:94:92:29:47:02:47:37:c6:5e:2d:c4:2c:0e:ba:
bd:04:86:13:89:63:da:b2:9a:c4:6a:98:fa:d7:b3:
3b:b8:cf:1b:9e:69:45:0e:2c:f1:f0:cc:62:0b:07:
9a:4d:be:cb:02:a0:3a:bc:44:88:c8:68:1a:25:70:
64:3a:c5:d3:cf:a1:af:de:7a:df:04:e9:c6:92:aa:
e0:e5:7b:cb:e8:fc:a8:41:26:6d:6b:b0:43:4c:bf:
f2:a0:9e:94:c3:6d:53:75:0d:a4:4b:98:b4:f4:03:
12:6a:31:46:1f:6c:e0:91:4a:77:00:56:5e:e4:c2:
25:e4:b3:e2:e6:f9:65:58:85:63:c5:35:f8:bf:34:
3b:ac:4b:48:12:a3:1f:0c:88:56:83:9c:6e:53:f6:
d0:11:4c:fb:56:a7:5d:a8:fc:7b:74:15:52:5c:8e:
c3:6c:37:51:d0:7c:e5:dd:a1:3d:2e:4f:42:69:88:
e8:67:6e:0e:1c:1b:6e:9f:aa:f3:93:1a:b3:70:73:
c4:fc:87:41:b9:3c:95:fa:aa:e2:af:18:b4:59:b5:
c0:29:89:9b:06:7a:d9:ff:6e:43:24:8f:bd:76:c4:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:22:45:AA:A3:40:39:44:1A:37:3D:24:6D:03:8F:A2:30:19:CE
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:bb:09:73:ee:4f:60:15:f4:b2:17:e2:fe:95:1e:18:04:
ad:be:1a:95:9a:22:78:85:cb:d8:91:98:6c:09:05:31:24:f8:
44:99:64:f1:ae:ee:7b:af:c1:1a:95:6f:c6:ab:46:3b:ed:ea:
97:54:b7:b7:3b:d7:2d:01:4d:8a:1e:8a:d0:c3:97:2d:71:89:
52:a4:d7:31:35:fd:93:91:88:16:91:bb:ee:97:73:37:10:aa:
71:02:30:b3:93:98:c7:a0:19:58:b2:03:d4:54:c0:81:fc:72:
cc:de:16:1b:52:e0:02:da:fe:a0:4d:0f:e8:f5:d8:4d:08:e9:
28:28:f2:16:b4:2f:26:39:d5:96:41:d3:70:d1:b8:96:08:24:
29:0c:18:2f:20:62:fd:dc:12:d2:fc:f4:07:22:8e:92:60:e6:
cf:41:32:7e:4e:1a:b7:89:0d:5e:b5:18:50:2a:11:42:13:19:
10:94:b0:c8:89:1a:32:b6:d4:58:dd:7f:5d:1a:0b:5d:31:f1:
13:35:f8:09:3d:62:ee:b0:67:e7:af:66:f9:f9:ff:b6:2c:47:
f6:77:ae:4a:7b:5e:c9:de:d1:e1:ab:1c:b9:c0:ea:06:1b:1f:
08:fc:ba:25:5f:d5:9f:55:e7:43:52:3f:f5:7c:d5:0b:98:25:
69:1a:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:51 2026 by rpki-client