Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: +ysKIdUD6xCcTM3dHcwn4mzjWSsoYdMxu4FO2OLYXDg=
Subject key identifier: DD:D2:16:B9:4B:60:2D:7A:8A:F6:22:57:CB:0F:4E:85:D7:F6:E1:B4
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 019F91A433F860F12005A4A826B424AC7C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 19D7
Signing time: Fri 24 Jul 2026 01:01:25 +0000
Manifest this update: Fri 24 Jul 2026 01:01:25 +0000
Manifest next update: Sat 25 Jul 2026 01:01:25 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: 7unVO1KolXtB4zimnuv+PFBRQeOCpZ6g7kcLk3AEhWE=)
2: KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (hash: QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=)
3: fYprx9tfSrpJ7R3f1TAiM1wmUEU.roa (hash: GnFvgFHqjbv0TdFv86yIpomdwFZ2W7tQkR4j2YTsnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:33:f8:60:f1:20:05:a4:a8:26:b4:24:ac:7c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jul 24 01:01:25 2026 GMT
Not After : Jul 25 01:01:25 2026 GMT
Subject: CN=ddd216b94b602d7a8af62257cb0f4e85d7f6e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:98:03:c3:78:6b:f0:af:bc:e4:3e:0d:d9:
68:00:68:78:89:20:13:f0:8d:43:93:fb:0c:03:57:
15:58:4c:2e:08:d2:e3:12:91:98:7f:06:38:93:90:
52:64:e0:b7:74:8d:31:46:01:4f:87:55:ea:d6:1f:
ba:92:68:92:fe:5a:e3:cd:f4:3f:33:b1:50:d3:96:
7e:55:97:42:4a:16:ba:d2:6c:02:ec:aa:d6:b0:4a:
f7:e1:49:fa:f4:0a:49:1d:20:45:17:a9:2b:f9:86:
a7:60:72:6c:9b:80:07:3f:56:5c:ba:13:23:37:21:
b7:14:ef:78:3d:ca:08:34:a5:9d:99:a3:79:bd:ba:
f1:bc:e3:06:36:9a:e0:b9:b1:75:c9:52:1d:a4:c5:
97:e1:34:21:d4:d7:b0:32:f6:5f:54:41:3b:47:0f:
30:a6:7b:a2:c9:4a:cc:8f:6c:cd:ce:79:02:03:1f:
13:6e:ab:7b:c4:f2:68:95:bf:a9:16:76:d3:fe:53:
d3:89:e6:8f:f6:95:56:41:2c:47:46:e6:7a:aa:29:
92:c1:f2:98:c6:de:e6:86:d3:8e:a4:1d:8b:ac:40:
ee:ed:9b:56:a3:b8:fa:94:65:b3:02:0b:4c:ca:cc:
6a:71:0f:59:0e:74:5a:03:5f:5a:f9:2b:ad:75:a0:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:16:B9:4B:60:2D:7A:8A:F6:22:57:CB:0F:4E:85:D7:F6:E1:B4
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:a0:53:26:05:33:e1:eb:b0:a2:cb:c2:db:43:c8:fa:7d:
93:fa:18:ba:14:93:ce:7a:69:d8:d9:f3:75:f2:6e:34:91:c5:
4e:57:d7:eb:f5:8e:05:0d:ce:3f:8b:00:04:2b:7b:2a:6b:1b:
9c:04:6f:44:e7:75:d8:58:c2:63:45:50:f5:0b:7b:ae:cf:da:
88:de:e5:f6:20:91:64:92:5b:61:8c:57:42:74:f9:69:90:3e:
11:da:57:30:4a:86:c6:82:77:fd:ee:a5:4a:1b:03:e9:1a:bb:
ff:11:c9:52:83:48:0f:32:d0:2a:c5:3d:88:a4:5d:ce:0c:dd:
a1:91:13:e5:40:c0:7e:74:67:23:ba:ee:77:15:a3:1e:2e:1a:
05:7f:07:2b:95:5e:d0:73:12:c5:26:20:1f:52:84:88:8a:5f:
13:92:c5:52:77:bf:2e:d9:5c:c6:91:dc:ec:89:1f:e2:8f:0a:
76:94:01:37:e8:e9:90:20:91:10:53:de:27:e6:92:5f:aa:a1:
08:19:7d:cc:b3:e6:bb:62:7d:20:63:3a:c6:37:f0:c3:13:7c:
a4:29:8f:0c:55:08:b3:9a:ff:aa:16:c2:ac:90:01:47:cc:68:
55:5d:b2:8e:33:e0:76:f2:6c:09:79:f4:cc:1f:80:e0:d9:83:
3e:11:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:09 2026 by rpki-client