Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: MsaaZoXXbXcXrLG8wP8chRj/+lBLaPqWnUCIXlN+4XM=
Subject key identifier: 0E:44:C6:5C:7D:30:5C:72:63:2B:4C:A8:BC:17:F0:0B:DE:37:8F:84
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 019F916C4AE682591FD3572CDD884EE7FAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: Lv8apDUMo61AOlVhfFEnvabyI9P6KQYv2l9SD+AAkkk=)
2: KH_y6DMeLM_eRTQR237TlQM4cq0.roa (hash: S47bUB+M6fnMYGaRb90XLdJ8p/ULY/nAXkVIfAd1Rog=)
3: Y_-6cR-Ot-YkSDcVXJ6Sf9LgN2I.roa (hash: 6nifGRrcDpgAxnDj7xvX5R59QywyMQ7qljbxshYjizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4a:e6:82:59:1f:d3:57:2c:dd:88:4e:e7:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=0e44c65c7d305c72632b4ca8bc17f00bde378f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:73:d6:79:02:1e:fb:2a:76:50:f1:03:42:
ed:b2:59:58:ac:71:bc:63:4b:4d:fb:72:fd:03:76:
b7:dd:8f:bd:21:30:66:df:75:2c:f9:b9:01:0c:7a:
7c:ae:e4:bc:76:cb:35:0d:d4:fb:cb:f9:d1:e3:44:
4f:1f:34:33:78:ee:d6:fa:a8:3c:ec:68:89:6d:c0:
c1:3a:14:2e:fb:08:47:be:bb:bf:20:da:77:d0:cb:
f2:4c:ce:1a:d7:1e:b5:bd:81:79:ac:27:73:d1:eb:
de:d2:f1:49:30:7a:dd:97:a6:bb:ea:96:35:73:45:
32:96:88:78:26:56:8d:e3:39:91:33:3d:96:62:29:
cc:75:e9:84:8a:98:41:14:6d:07:67:6f:5e:2f:e8:
cf:fd:6a:50:bf:de:d7:6b:67:7a:cb:d6:77:77:a3:
d4:ac:e9:35:72:3a:1d:f9:89:45:54:c0:39:a7:e5:
9b:db:ce:fc:70:ae:b1:55:b2:57:d0:48:15:97:ef:
5a:b1:d0:c9:bd:fa:57:f0:8c:9c:07:9a:80:0b:38:
be:0b:ea:c2:68:4d:eb:91:1e:eb:f6:fb:5e:cc:56:
c4:c1:07:f6:22:ad:fc:a4:22:37:1a:dd:cf:a4:a8:
14:f2:4a:47:8e:75:82:55:6b:ee:e3:9a:63:35:4d:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:C6:5C:7D:30:5C:72:63:2B:4C:A8:BC:17:F0:0B:DE:37:8F:84
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e6:fe:97:b4:f1:c4:3c:93:8f:44:d9:65:d0:90:c0:cd:84:
97:59:dd:20:0b:7e:2a:d6:a2:25:e9:3e:5a:a6:60:29:24:a2:
17:d2:77:e0:f3:fb:56:a7:bf:5d:b0:65:fa:db:32:6f:19:64:
2a:73:24:10:17:fc:71:da:c6:dc:82:7a:32:ae:c6:99:a3:09:
1c:dd:41:b7:d1:48:00:94:1a:7c:df:e1:91:89:e2:6a:13:37:
e5:6c:73:e8:b0:5b:3c:a1:63:08:f6:8b:e3:ad:79:7a:93:16:
cd:4e:59:12:b5:85:c3:43:8b:cb:2a:ad:f2:6d:5a:02:48:16:
8d:76:c6:35:de:b0:ac:db:48:0f:67:6d:47:38:00:65:b2:12:
b6:04:95:07:8f:10:a4:31:0e:2e:5a:30:d3:0c:b7:e8:ca:8f:
d8:c2:7f:32:a2:ea:d6:dd:50:67:11:4e:55:77:99:7d:f1:75:
79:6c:1b:90:d5:21:5a:73:a6:75:3c:f1:d2:18:51:94:24:86:
42:c0:09:52:0e:83:31:f5:fa:85:f5:3a:67:16:00:89:83:64:
c2:73:eb:69:f9:18:be:f3:55:17:9c:4d:cb:e7:cc:95:f4:1e:
77:30:36:8b:e6:ab:2d:53:9a:86:aa:9c:c3:66:9f:93:dd:3e:
6d:fb:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:21 2026 by rpki-client